Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: HQFCysT3xzjDUEEEtMbRaGJfExziSvSmTqB7T2PkhCI=
Subject key identifier: 0E:FD:00:5B:DF:83:E1:88:EB:EA:9E:D4:D1:6B:4D:B6:F8:D0:76:85
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 01A0C88FD0B3C6BF412C2555B6577740E4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 05AD
Signing time: Tue 22 Sep 2026 10:01:03 +0000
Manifest this update: Tue 22 Sep 2026 10:01:03 +0000
Manifest next update: Wed 23 Sep 2026 10:01:03 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: U1s1wFsVwB30Ua/cHXE+MWN2zMd1wHl6AgU/BCZShDo=)
2: Ys_4DR1wULGBNA_eDYgXZEWOD2Q.roa (hash: qjKc7M+pEY0qhXBmrNC0EBe740v+5vXbrYaxAIWy74Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:d0:b3:c6:bf:41:2c:25:55:b6:57:77:40:e4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Sep 22 10:01:03 2026 GMT
Not After : Sep 23 10:01:03 2026 GMT
Subject: CN=0efd005bdf83e188ebea9ed4d16b4db6f8d07685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:34:6e:4b:64:da:c3:83:a7:9b:67:be:be:
40:a3:8f:4b:d3:3b:a9:7a:dc:86:0f:42:8f:96:92:
dc:ac:3e:e8:93:2f:d1:16:1d:52:6c:e1:df:68:a5:
27:97:99:fb:9a:66:c6:88:f1:b8:10:9a:81:b0:52:
5a:4f:74:ee:c9:d4:f3:49:28:29:d0:0c:ce:72:84:
d7:65:4f:16:bf:4e:f8:eb:be:7b:ee:05:76:13:38:
d2:fc:de:6e:4b:4f:b8:bd:db:45:f4:87:a3:6c:c0:
8f:0c:b6:65:29:3a:d2:1a:fd:7e:2e:3f:b0:0d:b1:
be:45:27:a2:8e:41:de:8e:cd:ca:2a:d8:54:45:0a:
9c:29:c1:87:a9:2e:e3:2f:49:fe:de:c5:a1:aa:61:
8b:97:d4:f9:22:ba:e8:ff:85:f6:ab:0f:13:bf:f6:
d0:d5:ec:22:88:2a:39:38:4b:c4:16:57:e8:5f:dd:
4d:1a:c5:2c:21:56:5a:62:b5:90:04:f7:ba:1d:01:
10:8b:49:bb:a7:16:b1:95:95:a4:d5:13:95:1b:fd:
75:33:62:a4:1d:00:81:e7:c6:e8:8e:97:62:0f:bb:
fd:d1:6b:07:1e:e4:37:c0:67:ab:14:48:1a:c3:c4:
5f:2c:97:da:3d:56:35:c6:d5:06:c2:1e:2c:5a:bf:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FD:00:5B:DF:83:E1:88:EB:EA:9E:D4:D1:6B:4D:B6:F8:D0:76:85
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:42:cd:c7:aa:e6:34:d3:8b:0a:44:e5:df:44:c7:8a:5f:9e:
7e:57:18:3c:34:c8:85:a9:30:dc:3e:7e:86:b8:3b:ec:3b:ce:
09:53:95:6e:75:ee:6a:26:3b:bf:36:9a:f2:ec:b6:1b:3c:81:
c3:b8:50:66:f3:a2:ea:1f:46:9f:2c:29:c3:9f:e6:fe:ee:1f:
62:53:09:30:15:a0:2b:1a:d7:61:b2:14:0b:2e:ed:ba:90:ae:
5d:6b:b9:78:d2:f5:08:a6:32:3f:ae:b9:77:44:f4:62:99:49:
8d:62:c1:da:1b:0c:2e:04:6b:0a:3d:3d:42:f6:ed:6e:72:7c:
4e:ad:55:f1:37:94:81:89:82:16:b0:f5:2a:19:7f:e6:e9:25:
c6:9c:20:fb:16:30:6a:ab:e0:14:d6:af:f7:da:04:18:8a:75:
b2:13:27:93:12:9b:de:5d:a1:ec:3c:88:33:df:9b:72:75:d2:
25:3e:74:4f:e0:87:42:a6:6f:63:53:5f:95:4a:af:ee:07:d6:
e5:5a:19:3e:eb:0b:e7:81:96:4b:c7:21:4e:d0:70:e3:01:51:
d0:b2:9e:25:ec:1d:3c:79:8e:27:9d:83:1a:84:a1:3e:b5:8a:
9d:93:27:a3:f7:ce:bd:cc:ad:eb:28:bf:21:1c:4e:f7:d0:6d:
e9:c1:14:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:53:55 2026 by rpki-client