
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
File: AyHqOVCODhemUf6SrCnqOIMtC_8.mft (raw, json)
Hash identifier: nqV0HotogjUGNgBw/eOdpTm3FA1S/kLPer/LaiW1Hns=
Subject key identifier: 1D:2A:3E:AF:A6:59:7A:ED:E4:D9:48:C7:64:A5:2A:5F:F5:22:D4:7B
Authority key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
Certificate issuer: /CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Certificate serial: 01A001A5D6FDA5BFA5AF74B134E28DBC61C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
Manifest number: 189F
Signing time: Fri 14 Aug 2026 19:00:40 +0000
Manifest this update: Fri 14 Aug 2026 19:00:40 +0000
Manifest next update: Sat 15 Aug 2026 19:00:40 +0000
Files and hashes: 1: 8UGI1s0WR4wlzQNu5QcJqIgdD6o.roa (hash: 0o0yTMQX8eIMkMe3RKQudDE1yMjJHai1D53A4eswsuo=)
2: AyHqOVCODhemUf6SrCnqOIMtC_8.crl (hash: D7+VD25/+8goGpkEVEd91Oz6qNi9iw6/27YLFsI3Jrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:d6:fd:a5:bf:a5:af:74:b1:34:e2:8d:bc:61:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Validity
Not Before: Aug 14 19:00:40 2026 GMT
Not After : Aug 15 19:00:40 2026 GMT
Subject: CN=1d2a3eafa6597aede4d948c764a52a5ff522d47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:88:28:2b:aa:9f:78:33:a8:49:4e:39:fe:
93:a0:e2:12:68:39:1d:6d:95:83:0b:0c:c4:4d:fc:
1c:dc:e8:81:50:7f:19:fb:75:95:8c:b1:ca:be:96:
1e:34:20:43:58:c1:be:4a:c3:28:66:1a:c2:b1:31:
a8:65:e7:3c:31:46:f5:60:b3:ec:01:f2:7b:cd:3e:
16:10:4c:09:5f:23:37:f2:be:6b:78:e5:e9:80:c3:
fc:61:fd:e2:a5:e6:a0:23:da:11:ef:25:85:bc:56:
87:c2:45:79:d3:bf:42:f0:7b:1e:b9:e0:5e:88:98:
c0:84:0f:65:04:db:99:31:7e:d7:7a:0b:7e:c0:d5:
17:b1:41:28:7a:2b:a4:c6:40:9f:7d:5b:3c:c3:71:
1c:96:7b:5c:34:9f:35:3b:b9:dd:29:c1:49:3c:85:
9f:9c:e4:1e:5c:9f:5f:4e:80:4e:c6:bf:67:de:da:
98:9e:7b:42:34:13:4f:ba:bc:51:3d:46:7b:9d:c6:
50:f7:04:b9:11:20:98:c0:38:1f:14:9b:dd:3d:32:
85:17:50:dd:eb:cb:2e:5e:3d:d8:c2:34:9b:c7:a7:
33:47:70:bb:f0:12:0f:0d:ef:2e:a7:69:e9:38:f5:
93:cf:5e:20:fa:73:cf:0a:27:45:a0:10:3b:14:3c:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2A:3E:AF:A6:59:7A:ED:E4:D9:48:C7:64:A5:2A:5F:F5:22:D4:7B
X509v3 Authority Key Identifier:
keyid:03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:71:ac:85:1c:90:18:df:1e:a9:3d:eb:cd:a2:98:28:56:6d:
b4:e8:d1:74:24:29:6a:f4:6f:8a:0f:8f:84:c1:e3:c5:3c:06:
a4:15:5a:36:e5:57:b6:6e:65:65:97:6f:37:4b:e1:6a:41:44:
e7:c0:14:2a:c9:48:e2:c5:d4:4d:77:57:27:db:cf:d9:10:91:
f9:3b:31:86:dd:1b:43:e7:50:55:46:40:a6:88:b6:f8:c9:a6:
d5:35:59:d4:63:b3:7d:90:b2:4e:ca:45:1c:b0:01:89:29:c8:
a3:ec:25:ab:c8:f6:91:74:11:51:84:59:9a:ee:75:93:fa:23:
99:a7:50:f5:10:95:d8:d2:f2:e1:0a:82:fe:db:99:34:de:06:
64:68:f0:6c:0b:a9:84:c7:4e:9b:48:e0:f4:b3:8c:31:90:c3:
8d:f2:c0:70:c8:f3:28:da:35:84:1f:11:66:32:b0:89:5d:93:
d9:17:ff:6a:a6:96:95:be:b0:81:fb:37:88:8e:2d:d4:f4:7f:
24:29:2b:ae:50:df:ef:90:fa:22:24:67:67:11:05:7e:4e:76:
c8:a3:1b:a2:d9:3d:e7:9b:cb:6e:99:80:78:94:5b:9e:20:5c:
cf:48:65:56:47:0d:08:b5:59:56:c5:aa:0a:23:67:69:f2:48:
5c:c1:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:30:40 2026 by rpki-client