Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/965342-4da2-47c9-88b9-b1beda4c0c86/1/AymfovJMg4iMLP64vwBMgbonVmI.mft
File: AymfovJMg4iMLP64vwBMgbonVmI.mft (raw, json)
Hash identifier: L7KIWgl97xs1Uh9y0am10nH96FvoEqWxThePHJGdLEw=
Subject key identifier: 49:5F:C8:10:2A:D0:BF:34:FF:29:87:B3:5A:9A:70:32:09:26:94:9C
Authority key identifier: 03:29:9F:A2:F2:4C:83:88:8C:2C:FE:B8:BF:00:4C:81:BA:27:56:62
Certificate issuer: /CN=03299fa2f24c83888c2cfeb8bf004c81ba275662
Certificate serial: 01A1DE713A6B2B469C6260E18229A74795F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AymfovJMg4iMLP64vwBMgbonVmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/965342-4da2-47c9-88b9-b1beda4c0c86/1/AymfovJMg4iMLP64vwBMgbonVmI.mft
Manifest number: 8F
Signing time: Sun 15 Nov 2026 09:02:04 +0000
Manifest this update: Sun 15 Nov 2026 09:02:04 +0000
Manifest next update: Mon 16 Nov 2026 09:02:04 +0000
Files and hashes: 1: AymfovJMg4iMLP64vwBMgbonVmI.crl (hash: abtcsc/6N5+QmuspofdkGUnUWx6a8tBvHb6tGsy6fsg=)
2: V7pbKChUJtSjh1G5KgBNzDWIbsk.roa (hash: SeefTgTJd9gprlWK+mLpHH5gueNNDle8XyGOCPLLu9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/965342-4da2-47c9-88b9-b1beda4c0c86/1/AymfovJMg4iMLP64vwBMgbonVmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/965342-4da2-47c9-88b9-b1beda4c0c86/1/AymfovJMg4iMLP64vwBMgbonVmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AymfovJMg4iMLP64vwBMgbonVmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:3a:6b:2b:46:9c:62:60:e1:82:29:a7:47:95:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03299fa2f24c83888c2cfeb8bf004c81ba275662
Validity
Not Before: Nov 15 09:02:04 2026 GMT
Not After : Nov 16 09:02:04 2026 GMT
Subject: CN=495fc8102ad0bf34ff2987b35a9a70320926949c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:a8:5c:c0:da:9a:a2:52:5b:64:58:22:20:
00:18:76:77:57:3a:51:e0:8f:3a:62:e5:99:71:b7:
e0:17:af:11:e3:d4:49:5d:ad:d5:08:7a:34:94:2e:
77:fa:95:e9:cc:12:51:ef:55:7f:92:b3:35:1e:15:
ed:07:61:82:e6:25:eb:e6:92:04:99:81:19:19:1b:
24:f4:aa:cb:2f:ae:6a:01:e6:c7:f8:15:22:93:2f:
9d:9f:77:9a:70:d2:c9:3c:ee:3a:51:68:88:08:bd:
a9:24:1f:56:be:44:49:eb:97:0e:45:57:d9:6e:4a:
a9:e0:af:21:b2:96:d9:c5:44:0d:be:32:17:fc:55:
41:1e:2d:6c:f6:e5:c0:58:08:e8:21:28:56:65:25:
03:02:da:fb:35:bb:b5:a6:c4:9a:25:39:ef:41:aa:
6b:bc:79:7c:f6:c9:16:79:2a:bc:b2:65:e2:df:64:
0b:01:bf:fa:6e:43:be:c7:2c:d7:42:a0:e3:0b:e6:
cc:32:37:59:6f:e0:49:e7:1e:b7:43:ae:ab:f4:55:
be:9f:e6:7c:9c:b9:57:c4:5d:8d:62:94:02:eb:65:
f6:3b:d4:30:bc:c5:0d:85:62:b6:ce:95:b1:b6:a9:
f8:05:61:5b:db:b1:f9:47:3b:ee:9a:5d:24:cd:17:
db:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5F:C8:10:2A:D0:BF:34:FF:29:87:B3:5A:9A:70:32:09:26:94:9C
X509v3 Authority Key Identifier:
keyid:03:29:9F:A2:F2:4C:83:88:8C:2C:FE:B8:BF:00:4C:81:BA:27:56:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AymfovJMg4iMLP64vwBMgbonVmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/965342-4da2-47c9-88b9-b1beda4c0c86/1/AymfovJMg4iMLP64vwBMgbonVmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/965342-4da2-47c9-88b9-b1beda4c0c86/1/AymfovJMg4iMLP64vwBMgbonVmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:29:76:84:cb:de:03:6b:1c:5b:72:98:7b:19:66:3f:5b:da:
83:38:c2:aa:b7:8e:09:90:74:1c:f7:08:9b:81:f2:d3:b9:78:
08:20:35:7f:03:4e:a7:59:c5:2a:81:b8:04:94:dd:70:ac:4d:
b8:fa:70:e7:b9:38:11:79:e1:f6:05:16:75:a8:03:bd:74:92:
fc:64:75:e0:e4:49:e9:19:f5:30:fa:50:a6:18:6e:df:8b:e1:
55:85:e3:a9:e8:90:3d:af:20:4a:35:53:00:bf:50:ac:e4:c7:
8d:cf:a4:1b:57:99:d3:34:95:90:b9:85:c9:7a:14:58:b3:78:
ed:88:c0:63:74:d0:d1:1b:9e:8d:5d:dd:cb:2a:2e:ed:06:ff:
5d:fe:25:d2:48:0a:94:c6:3c:ff:e8:9f:f0:86:26:81:e0:a4:
b4:e9:e6:b7:90:3d:3a:be:51:04:9f:2d:41:6f:41:87:8f:42:
55:b3:80:00:f7:29:7f:e2:0f:a8:c5:63:c5:1a:55:41:d5:0e:
17:19:4a:20:46:f4:ee:75:d7:72:c2:0a:f8:9f:da:fa:e8:9c:
ec:24:1b:5c:30:b8:f7:d3:9f:78:a0:b4:92:3e:66:6f:b2:f2:
51:57:73:03:c8:54:5b:cf:4f:4c:ff:5a:38:79:6d:1d:f5:d3:
f8:40:d7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:22:31 2026 by rpki-client