Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: n4fpkcXc32qQPe15shbVS/Tc9XKmCWVxZdC36D90vZE=
Subject key identifier: 7E:2C:58:66:D9:8E:24:46:D0:B2:DE:4A:CA:34:DE:E7:B3:83:DD:F9
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 019F91A3C9CBB2D913E67DEFB885F16EBC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 050C
Signing time: Fri 24 Jul 2026 01:00:58 +0000
Manifest this update: Fri 24 Jul 2026 01:00:58 +0000
Manifest next update: Sat 25 Jul 2026 01:00:58 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: DD4AS5o0k0Y27wd1FfJvEQWLZIbaPZ3mC8k3kLbxFK8=)
2: Ys_4DR1wULGBNA_eDYgXZEWOD2Q.roa (hash: qjKc7M+pEY0qhXBmrNC0EBe740v+5vXbrYaxAIWy74Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:c9:cb:b2:d9:13:e6:7d:ef:b8:85:f1:6e:bc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Jul 24 01:00:58 2026 GMT
Not After : Jul 25 01:00:58 2026 GMT
Subject: CN=7e2c5866d98e2446d0b2de4aca34dee7b383ddf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:dc:7b:80:c4:d8:50:05:76:ba:bf:2f:a0:d4:
e5:20:34:ea:ac:b5:ac:31:1b:ac:a4:01:c1:c1:2f:
27:63:b4:8c:d1:8b:48:15:aa:59:c2:dd:ec:a2:0a:
97:9f:b7:8e:53:6c:40:b5:75:72:fe:1c:54:e8:b1:
51:8c:8c:18:9d:1b:ca:ad:33:ec:90:0a:07:cd:ba:
84:2f:fb:de:cb:7b:8c:53:fd:d8:0e:59:2e:05:74:
eb:06:2f:ad:32:d8:00:68:fd:bd:2c:ae:ee:de:57:
a9:79:bb:36:83:72:c0:3f:9e:ec:c4:f2:5d:a8:c3:
c6:db:7c:19:b2:5e:66:f8:92:12:c8:98:6b:48:da:
10:53:78:b1:66:de:c8:93:1d:50:44:57:6c:6c:c7:
f6:0f:57:e6:4e:f8:e9:3f:a8:fd:b6:81:1d:f9:9c:
33:f6:5f:4e:2f:09:0d:bf:ef:38:a0:e4:d8:d3:fb:
49:b5:db:35:f3:50:30:20:c4:06:85:a0:4e:92:3c:
2e:5c:f2:e1:9f:61:f7:f6:d3:83:dd:e5:af:c8:78:
5c:94:3e:0f:14:da:79:ca:6a:64:8c:d8:5d:73:e2:
2a:61:c2:9d:64:67:30:75:03:e0:14:fa:f8:a6:10:
98:cf:6b:85:01:f7:f3:3f:2f:5d:63:57:83:9e:92:
19:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2C:58:66:D9:8E:24:46:D0:B2:DE:4A:CA:34:DE:E7:B3:83:DD:F9
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5a:f7:01:69:e0:d9:94:3e:e9:10:66:aa:3b:5c:b1:18:ee:
bb:61:98:ad:59:d1:bd:1c:8d:1d:1e:97:1a:47:84:de:b3:33:
74:2e:c6:c6:ef:4b:56:87:28:11:5d:c4:21:2b:a7:49:60:9b:
d1:63:78:c0:ec:ad:0f:d3:39:59:6a:13:a8:ed:25:7a:74:f9:
70:1f:db:23:ab:63:01:17:79:92:7f:5b:f6:a6:71:ce:90:01:
21:d9:7e:78:97:1c:65:34:74:3c:8c:61:b3:1f:d7:33:a7:ed:
a7:58:99:62:60:61:f7:87:70:57:7f:2d:c6:75:cc:ab:d9:d4:
0e:3a:87:46:4d:00:7a:9a:66:62:28:ba:0f:0a:1c:db:95:fb:
71:5d:0f:ee:7b:ec:d0:e0:bd:eb:b9:12:8a:6d:a5:61:6b:18:
b1:e1:8b:1a:c7:45:78:d1:87:0b:eb:4d:ce:19:23:76:11:07:
63:72:4d:88:55:1a:11:fa:fe:47:fd:09:d7:a9:6e:8d:68:bf:
e0:ac:d8:3b:99:8a:70:e6:d3:f7:35:55:e1:ff:17:5f:13:3d:
80:db:0b:86:35:b2:3f:1b:0f:d4:0d:09:3f:57:24:c3:cc:c2:
04:48:1a:10:ba:77:82:c3:74:a1:e2:e1:e9:2e:5d:b9:ed:74:
90:e9:7f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:55 2026 by rpki-client