Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
File: AYODB_eazcWa1uuC6Miq76PYgok.mft (raw, json)
Hash identifier: KHKkICUr01WJxu9qbWe5bG3wKS61esaI0ESd1BO55B0=
Subject key identifier: D5:24:45:15:85:68:2B:A2:20:7A:A9:95:07:BB:06:7E:E5:DE:39:CF
Authority key identifier: 01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
Certificate issuer: /CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Certificate serial: 019D2A0506F777B7E1E6AE010F135F32AFA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 12:01:05 +0000
Manifest this update: Thu 26 Mar 2026 12:01:05 +0000
Manifest next update: Fri 27 Mar 2026 12:01:05 +0000
Files and hashes: 1: AYODB_eazcWa1uuC6Miq76PYgok.crl (hash: qRFjUc32VOTCRWCPQ6ulU92CJ9EoF2H9Xz1tAAwFi6Y=)
2: SBaxEKn6omM3IqhrS7K0Wod8GDA.roa (hash: SyVRYDfJpMcJBFiaCrbmVlK9aAfcGPsjIqUsOCOATQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:05:06:f7:77:b7:e1:e6:ae:01:0f:13:5f:32:af:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01838307f79acdc59ad6eb82e8c8aaefa3d88289
Validity
Not Before: Mar 26 12:01:05 2026 GMT
Not After : Mar 27 12:01:05 2026 GMT
Subject: CN=d524451585682ba2207aa99507bb067ee5de39cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:d5:5d:51:92:cc:d7:8a:71:41:63:0f:49:
dc:67:5c:4b:2f:71:06:65:13:e6:40:19:1a:f5:ad:
cb:0c:3c:74:71:8d:f2:65:03:53:bc:85:b5:54:7b:
59:47:74:3b:7b:70:34:7a:66:14:6f:fe:4a:7f:b1:
88:5c:ed:2f:5b:43:3b:c5:e3:73:cc:57:b2:4c:f1:
6b:2b:83:6a:27:d6:cb:ec:92:33:e5:80:be:43:ba:
11:28:78:d9:d3:88:39:b2:b3:34:f4:9c:d5:d7:38:
e7:4e:34:2d:9e:43:67:a5:59:5f:33:6e:f0:d2:52:
76:6c:f3:07:c6:74:91:f7:9e:9a:61:f5:cd:b1:19:
19:6d:f7:74:bf:aa:e5:1d:73:a0:c5:77:12:8c:f0:
4c:fd:84:85:89:5e:56:cc:94:68:7d:62:b7:f7:24:
35:f3:78:3e:49:b7:2c:38:81:21:cd:67:8d:db:de:
f9:9a:b0:04:43:5f:15:7a:0c:02:b4:55:8e:7b:a6:
5b:1d:99:f2:8d:54:00:a6:02:f0:84:1b:20:b8:27:
ac:be:72:cf:85:7f:da:b5:6a:cd:33:de:39:c4:dd:
87:01:b3:f0:b2:05:72:d9:1f:df:31:7b:5f:6a:d1:
85:b5:15:5a:44:db:60:de:9e:ac:a0:3d:42:f2:ae:
2c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:24:45:15:85:68:2B:A2:20:7A:A9:95:07:BB:06:7E:E5:DE:39:CF
X509v3 Authority Key Identifier:
keyid:01:83:83:07:F7:9A:CD:C5:9A:D6:EB:82:E8:C8:AA:EF:A3:D8:82:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYODB_eazcWa1uuC6Miq76PYgok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/9f61be-8c31-49ba-b424-ca3d4aae6f09/1/AYODB_eazcWa1uuC6Miq76PYgok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:ae:27:49:38:57:49:91:2c:4e:cd:0f:34:b9:6a:da:d6:af:
91:08:d3:d3:02:c5:d1:4d:d9:36:a5:e1:6c:38:6c:bc:0a:1f:
53:35:a5:cb:0b:84:4f:4c:fb:96:4c:63:80:1e:d1:38:e7:9b:
91:c1:68:57:38:12:62:2a:88:12:7a:80:c1:ec:2e:c0:e3:76:
af:dc:c5:43:ca:ea:4d:5d:40:0f:d9:2d:23:72:31:ad:52:49:
0c:b6:15:47:aa:a6:ce:26:01:4e:54:eb:71:cc:5e:7e:b4:57:
1a:d2:23:67:52:f5:21:23:d9:b1:2f:dc:08:b7:18:51:9f:b1:
e0:bf:8c:f0:b0:a0:7e:ad:5f:83:50:a4:3d:b4:1e:95:6b:58:
c5:9a:13:8f:cc:60:87:42:73:7d:02:c3:24:37:5c:8d:db:19:
29:db:53:65:c3:b6:a5:fd:76:ca:7a:dd:d3:ff:dc:4d:49:fd:
ab:27:a2:70:55:1b:95:20:cd:3c:76:4d:9a:b9:90:a0:d4:cc:
70:ee:7b:d0:de:db:ba:1b:e7:45:e5:7c:d7:ee:b5:a6:a6:bf:
86:06:85:73:06:ea:b8:39:74:62:cf:da:38:6e:e7:e1:16:e5:
b2:cb:42:22:5c:cb:fb:42:1d:45:bf:3c:e2:7e:ae:72:eb:45:
a3:dd:b9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:23 2026 by rpki-client