
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
File: AAydVUKlqozV4BmKuD_OD5RypGE.mft (raw, json)
Hash identifier: xcPAVsvyWqFekmP4PlSzdeVFC3vXS+/9xDA2my16kBU=
Subject key identifier: 22:76:0B:A6:AB:C0:21:B2:8A:25:3C:C8:D5:FA:7F:96:94:D6:67:01
Authority key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Certificate issuer: /CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Certificate serial: 01A13E950974246732219240C170B4C504E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
Manifest number: 0D96
Signing time: Thu 15 Oct 2026 08:01:56 +0000
Manifest this update: Thu 15 Oct 2026 08:01:56 +0000
Manifest next update: Fri 16 Oct 2026 08:01:56 +0000
Files and hashes: 1: AAydVUKlqozV4BmKuD_OD5RypGE.crl (hash: supwTt25sRZq6GJ3O9n7YUFNnf1Lgjjy5+EaOWyKcHU=)
2: vngLZNmfLJj1az9Fmgtss3szy7c.roa (hash: ssOKv+ps89YXTCCYgONYAdpYtqCOvvIBxQPvm7fOwUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:09:74:24:67:32:21:92:40:c1:70:b4:c5:04:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Validity
Not Before: Oct 15 08:01:56 2026 GMT
Not After : Oct 16 08:01:56 2026 GMT
Subject: CN=22760ba6abc021b28a253cc8d5fa7f9694d66701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:20:a0:5a:89:7a:e8:ad:95:74:d4:b5:89:fe:
c8:47:e1:b8:78:21:f8:2c:32:a3:a8:ce:e2:79:8c:
18:be:f0:49:48:20:68:59:d4:4f:90:4b:a6:d0:e8:
7e:b8:5b:ee:fc:c8:8f:c8:30:66:28:6a:2a:0d:a5:
e3:12:5d:15:4e:06:56:1e:df:3e:72:3f:5e:bc:82:
d9:08:b1:6b:25:22:0c:72:f4:e4:b0:c0:e6:7f:cd:
72:9b:2b:3f:af:d3:dc:50:a3:16:3c:32:95:ec:14:
06:d5:99:38:9e:05:b3:ee:ed:8b:18:a0:7a:a4:c2:
2a:dc:95:09:28:56:e5:ef:99:07:8f:f5:07:c7:74:
31:f9:d0:c6:0f:07:0d:5e:b9:84:10:d1:75:b8:ed:
38:15:6c:6b:12:44:ad:89:bc:51:fe:fe:8b:2c:00:
14:55:29:dd:cd:12:41:e0:63:ff:c6:52:76:02:3f:
93:a9:7d:58:ea:e4:54:9d:45:93:4c:a9:52:81:3b:
fc:ff:9e:83:2e:40:4f:5e:0e:53:bc:bb:ea:13:4d:
13:a5:c9:21:18:fc:38:7a:2a:bb:50:21:b3:9c:ac:
c3:69:43:24:c3:df:c9:79:1c:65:40:c0:e7:83:f2:
60:01:9a:b2:63:7c:27:91:d0:af:b7:16:84:89:9b:
76:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:76:0B:A6:AB:C0:21:B2:8A:25:3C:C8:D5:FA:7F:96:94:D6:67:01
X509v3 Authority Key Identifier:
keyid:00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:92:9b:62:4d:e8:e0:98:56:34:3e:15:bd:24:4e:82:75:2b:
07:9b:2c:4b:57:70:ea:f6:23:9e:09:a3:8a:70:38:72:a3:3f:
9f:c6:b1:71:4e:00:f3:e1:61:b3:db:6f:6d:b4:b8:0d:1e:68:
70:71:0b:b2:de:6e:15:fc:4b:c0:67:3b:94:a2:f9:55:92:e3:
bb:68:ca:c0:60:94:8f:d1:65:02:b5:26:56:7a:df:49:72:cc:
67:f7:c4:b0:4b:2f:84:2f:37:40:fb:d9:d9:b4:f7:ac:0a:b2:
1e:7b:68:80:59:aa:33:4e:e6:9a:99:51:03:aa:ba:d0:86:e5:
97:45:99:4a:e2:0a:2d:6a:af:e7:64:2f:7b:81:e5:16:ba:2c:
6c:34:45:e7:95:32:75:9d:05:ff:98:3d:10:51:3c:50:66:86:
bf:8b:d7:e4:70:2b:c8:20:3c:5e:db:f6:f4:13:90:31:30:ae:
ca:17:d9:c7:8a:21:c4:0f:32:24:aa:5c:da:ff:7b:d6:9c:1a:
fc:18:d1:51:70:01:9a:b0:9f:4b:06:b6:7b:03:3c:21:2f:9f:
b0:71:2a:55:ba:23:9f:db:4f:b6:9e:85:fe:bf:59:5a:07:ea:
d0:f3:71:95:f1:70:94:a6:4b:7d:50:65:58:7e:2b:61:ec:a4:
60:14:44:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:45 2026 by rpki-client