Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
File: AiyP_FBgnsDYtKcoBciZCmSq5x4.mft (raw, json)
Hash identifier: LI3RGjMuT9JgaxRo+iWVm5So9Kh+kXQBZhIzOf0m+oE=
Subject key identifier: AB:F5:F2:38:33:BD:4A:C8:F2:AB:F6:DD:D0:46:22:6E:36:78:8B:4B
Authority key identifier: 02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
Certificate issuer: /CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Certificate serial: 019E1C7DC7490957BAECB73B142803742E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
Manifest number: 0E7A
Signing time: Tue 12 May 2026 14:01:05 +0000
Manifest this update: Tue 12 May 2026 14:01:05 +0000
Manifest next update: Wed 13 May 2026 14:01:05 +0000
Files and hashes: 1: AiyP_FBgnsDYtKcoBciZCmSq5x4.crl (hash: /g8wsZsMT6fm7a8AF1VQh9DwVjFS+JVzi4K7E+vbNYM=)
2: DWHyFvHwr99MtfkrMpHq2IQ1WQs.roa (hash: lZuuHU909ornFrQMygRPUOgb1PqH+8YBfhZUUM9nw/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:c7:49:09:57:ba:ec:b7:3b:14:28:03:74:2e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Validity
Not Before: May 12 14:01:05 2026 GMT
Not After : May 13 14:01:05 2026 GMT
Subject: CN=abf5f23833bd4ac8f2abf6ddd046226e36788b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:c5:d4:71:98:b2:1c:61:e7:76:29:d4:ae:
9b:c6:7d:cb:10:60:0f:e9:0f:39:ff:86:17:4c:06:
d6:c8:86:a3:94:25:38:86:d1:f3:3e:27:b2:66:2e:
e0:36:34:85:3e:b9:25:98:e4:87:e7:29:c7:b2:f4:
7b:84:2a:66:99:77:ca:10:8b:f7:63:5f:6f:ef:f1:
e0:be:1a:fd:f1:5f:22:07:a9:3f:4a:d0:58:d8:0f:
d4:29:ce:ab:4b:b6:0a:12:cc:02:d3:5b:71:f5:eb:
86:a7:38:a5:b4:e9:0b:6b:21:07:7b:fb:39:ac:40:
13:14:a6:8a:fa:a5:09:d3:95:3c:58:88:ce:a5:bc:
ea:69:18:16:a0:d6:b9:21:6b:23:65:e2:a0:34:ce:
63:e7:98:1c:3e:8e:77:f6:11:a0:9e:df:07:41:1c:
2e:b6:5e:d5:0d:74:21:9d:ce:63:74:b5:82:78:3d:
91:a3:8c:b2:56:4d:19:2c:b5:8e:f9:87:29:18:f5:
31:40:16:e0:87:9d:b1:0a:7b:8e:6f:50:a9:6f:d4:
45:39:ac:67:28:80:fc:cd:04:df:42:1e:b0:0f:ac:
77:ca:86:b9:92:7e:08:9f:62:a0:9b:2a:68:cf:48:
82:60:21:c0:50:a6:74:57:45:c0:b8:3e:1b:b2:eb:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F5:F2:38:33:BD:4A:C8:F2:AB:F6:DD:D0:46:22:6E:36:78:8B:4B
X509v3 Authority Key Identifier:
keyid:02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a6:bc:63:7a:88:13:88:97:4f:aa:a2:62:b7:8f:74:56:d2:
e2:26:0b:8a:e9:44:b5:68:c1:57:e3:e3:25:9d:c1:9e:f6:0c:
fc:d6:1b:d7:fc:24:50:a0:09:08:0a:7a:f3:c3:43:aa:9c:37:
6f:00:03:57:eb:30:fb:09:34:ef:17:9b:85:c0:23:49:94:91:
7e:78:6c:4d:50:72:da:0d:9f:8b:b9:7f:cd:18:74:20:6c:76:
b9:08:f2:2e:e8:6d:fb:b5:bf:b7:87:9b:43:f1:b0:b5:04:50:
4c:c0:ee:2c:89:17:22:22:75:d2:a8:8c:65:a1:06:8d:42:4e:
2b:b6:64:70:a6:1f:d6:22:62:fb:3a:16:6f:68:a4:fd:59:12:
53:5a:74:90:37:1e:dc:2a:89:da:eb:db:ff:ac:04:b0:32:63:
aa:3d:0e:79:70:0b:ae:62:f4:a4:a5:66:11:95:a1:cf:ba:11:
55:5a:9b:17:f2:6d:c6:6e:80:4e:17:6a:38:de:3e:ab:74:f0:
04:28:c9:56:1f:e4:0e:40:70:df:ad:ea:c5:9a:ad:81:e1:87:
18:24:de:d4:f8:87:73:2b:51:0b:82:6d:a7:b1:5b:97:3e:55:
17:e0:ad:43:f5:1c:d7:8b:5b:dd:ce:53:5c:f1:8a:18:9b:e5:
47:d6:7e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:41 2026 by rpki-client