Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
File: AyHqOVCODhemUf6SrCnqOIMtC_8.mft (raw, json)
Hash identifier: yGUhDSoIwo1Hpm5ves54g0a7XsYftLdMRQZgvd6u0s0=
Subject key identifier: FC:8A:28:17:AA:83:9A:87:E6:B3:6E:5F:E6:88:5B:5A:DF:DA:09:F0
Authority key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
Certificate issuer: /CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Certificate serial: 01A13E5CC4FF76B3FAB50E71A8E8E25BC33B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
Manifest number: 1943
Signing time: Thu 15 Oct 2026 07:00:29 +0000
Manifest this update: Thu 15 Oct 2026 07:00:29 +0000
Manifest next update: Fri 16 Oct 2026 07:00:29 +0000
Files and hashes: 1: 8UGI1s0WR4wlzQNu5QcJqIgdD6o.roa (hash: 0o0yTMQX8eIMkMe3RKQudDE1yMjJHai1D53A4eswsuo=)
2: AyHqOVCODhemUf6SrCnqOIMtC_8.crl (hash: Q5XF/49WCTgUAertFy1+jDsvjdp714jYNy4kD+PathU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:c4:ff:76:b3:fa:b5:0e:71:a8:e8:e2:5b:c3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Validity
Not Before: Oct 15 07:00:29 2026 GMT
Not After : Oct 16 07:00:29 2026 GMT
Subject: CN=fc8a2817aa839a87e6b36e5fe6885b5adfda09f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:df:85:60:d6:5a:4b:a4:e6:e1:41:10:db:cd:
48:08:e4:ce:0d:7a:85:07:27:19:a6:94:91:4a:92:
4a:e0:cd:ba:57:e9:cb:01:09:0d:6b:50:9a:ad:2b:
6e:87:f1:4e:54:a0:2a:37:fa:bc:c8:48:ba:42:eb:
35:af:ae:25:04:89:4a:db:76:7e:cc:eb:ed:a6:45:
09:c4:bf:4b:01:4e:20:a7:79:8b:e3:1b:53:67:14:
60:18:b6:4f:dd:37:39:f3:60:00:5b:77:95:0e:a4:
4a:7f:90:7a:7f:23:58:ac:9a:1d:a8:fa:d9:4d:21:
10:90:91:cd:ae:f7:f2:58:8d:1b:1b:6e:99:12:ac:
6a:aa:3b:ee:b4:bc:3e:7e:92:62:5d:5a:38:cd:54:
ef:aa:fb:7d:30:ae:74:9b:da:8c:06:08:17:58:8c:
35:e8:89:84:00:2d:77:81:9f:f0:f6:14:63:45:13:
e8:ba:a3:f9:55:ad:58:12:c4:5a:4e:2c:2d:13:c6:
8f:73:22:50:82:56:42:13:0a:99:5c:83:82:cf:49:
47:2b:72:38:6b:62:9d:5f:c2:85:de:2f:63:97:12:
74:70:ad:f3:0c:a2:a9:51:9b:6d:4f:36:53:b2:6c:
7e:0a:99:21:1b:6c:4d:5d:1b:6f:a9:98:89:5d:4c:
5c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8A:28:17:AA:83:9A:87:E6:B3:6E:5F:E6:88:5B:5A:DF:DA:09:F0
X509v3 Authority Key Identifier:
keyid:03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f8:80:d4:66:77:44:20:cd:54:24:d2:51:37:83:a8:73:95:
84:6e:7a:cc:c6:2e:d5:2f:b7:1e:ba:96:1f:09:9f:79:5c:3a:
66:31:41:0a:92:54:e0:90:b0:d3:7e:e0:bb:c7:e4:d7:fa:f7:
25:fc:0a:75:8a:db:73:fe:b6:5b:6b:8a:3f:d4:51:22:b6:a3:
68:f0:39:bd:77:86:38:28:34:9a:78:75:2b:07:22:4e:a0:f3:
87:a6:a2:01:43:01:7a:c5:ed:40:58:ae:b4:8a:7c:c7:c6:f0:
98:dd:44:0e:4f:c7:2d:d6:6b:f3:52:4e:7c:ff:01:76:35:cb:
c9:28:8c:db:43:60:de:c9:a6:ae:cd:cf:9a:80:d6:c1:a0:80:
56:13:78:73:f5:8c:b6:0d:e9:7e:09:1d:d5:f8:ec:7f:2f:cf:
2a:95:38:3b:b5:14:50:8c:fc:0f:eb:01:3d:d0:1b:48:56:3e:
c4:33:e9:4b:d3:28:36:81:69:c7:25:66:a7:bc:eb:2d:0c:92:
ed:fe:d7:4e:56:71:11:0d:c4:b3:fb:0e:20:3a:92:50:17:4d:
2f:f4:28:f5:00:28:25:16:cf:b8:d3:54:e4:e6:62:47:b7:65:
00:4b:d6:54:6f:d4:50:7b:86:12:01:c7:97:79:91:91:d6:33:
43:88:9c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:31 2026 by rpki-client