Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: T/8jEc2Rfh5pDq1m1yAVkyImcAOFte35tA0cwzxX3rs=
Subject key identifier: EC:0F:75:4A:B4:61:16:D9:85:9E:76:94:80:8F:F2:5E:7A:83:8A:7E
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 019E1CEB9C86D3CDF4A99354427E7BD2A41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 044B
Signing time: Tue 12 May 2026 16:01:03 +0000
Manifest this update: Tue 12 May 2026 16:01:03 +0000
Manifest next update: Wed 13 May 2026 16:01:03 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: WEcOMMGLSbyF9wYtmqw7hEpMxXUU0bvzxUQttut9RB0=)
2: Ys_4DR1wULGBNA_eDYgXZEWOD2Q.roa (hash: qjKc7M+pEY0qhXBmrNC0EBe740v+5vXbrYaxAIWy74Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:9c:86:d3:cd:f4:a9:93:54:42:7e:7b:d2:a4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: May 12 16:01:03 2026 GMT
Not After : May 13 16:01:03 2026 GMT
Subject: CN=ec0f754ab46116d9859e7694808ff25e7a838a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c7:21:65:52:b4:e0:a8:34:ae:88:9d:53:22:
2b:9b:c3:21:05:7d:cf:23:a8:a3:9d:a8:fa:20:d1:
86:08:17:18:ec:f8:b1:30:33:0f:0a:10:d7:b3:90:
7a:02:84:21:a7:af:30:9b:45:5b:a9:eb:f2:d5:21:
e8:50:bd:ec:f2:ff:97:62:91:89:11:b3:95:54:1d:
8d:9a:79:e1:71:3c:5e:18:d6:a1:b5:83:53:3c:4a:
4c:19:5a:76:a5:1c:e3:db:1f:a6:3d:59:ca:6b:76:
a8:27:72:f9:eb:79:12:84:c1:ba:45:2e:a3:5e:7c:
fa:68:84:3c:36:00:3a:5d:95:d1:cc:9c:84:bb:4c:
07:cc:1a:40:d9:2d:bf:33:ac:74:a6:db:9b:16:eb:
29:bd:f6:e2:e0:c8:6e:81:05:b1:ff:ec:b1:45:95:
e0:04:9a:b3:89:e1:02:36:81:04:95:07:b8:c5:89:
1c:58:27:e9:09:30:42:ce:eb:46:5b:d9:fe:ea:02:
c0:04:54:ed:55:fd:aa:71:17:bc:68:88:fc:c4:8c:
94:a4:2a:ee:f7:c5:17:68:29:1c:d5:fb:8a:41:a2:
7c:da:ac:47:a9:ad:15:a4:53:4b:f8:07:80:16:2b:
49:03:51:87:d8:55:97:65:a0:e8:bd:b6:86:de:96:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0F:75:4A:B4:61:16:D9:85:9E:76:94:80:8F:F2:5E:7A:83:8A:7E
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8b:64:44:04:ad:7c:40:e6:ed:b6:39:e9:b8:20:bd:31:8c:
de:3e:38:cb:5b:c6:c1:04:42:b1:43:0d:ad:7d:ee:13:66:58:
31:a3:ad:f0:87:0e:e5:4f:3a:41:91:30:3b:a8:29:ac:fe:95:
49:f2:ad:80:32:b9:e7:87:07:2c:98:04:2e:78:d1:05:85:ec:
c7:0c:48:9a:0f:29:0b:75:48:2d:4c:7e:6e:f4:6c:f7:1a:ab:
fa:41:39:99:c9:d0:04:0b:dc:11:48:b1:ff:65:ce:34:83:a9:
f5:5b:a4:ba:ea:2b:18:05:85:50:6a:72:d5:fc:52:f7:34:2e:
27:79:a3:9e:65:4b:39:d0:db:a7:66:11:49:c9:6c:8e:5e:6e:
0d:5a:cf:aa:46:cc:4d:09:f2:8e:6a:9c:ab:de:a5:f8:6e:e3:
5e:91:ad:26:fc:b2:e1:26:cf:1e:67:63:e3:6d:4e:bb:3d:b3:
7f:25:16:81:51:38:22:3b:68:58:3a:7b:7f:d5:a6:71:ed:6c:
52:ee:8c:ea:38:f3:60:7a:61:8e:df:98:f2:f0:74:dd:28:56:
94:79:f6:b7:f0:45:d4:2f:80:b9:98:36:99:2b:28:31:51:df:
fe:52:80:4a:6c:c7:41:8b:53:35:89:d3:4f:f5:b9:aa:f1:2c:
a4:52:39:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:16:26 2026 by rpki-client