Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
File: AiyP_FBgnsDYtKcoBciZCmSq5x4.mft (raw, json)
Hash identifier: ijyRKeDOBYaI/xGE5hspGYMtOqHOhZ3F6pWsPaCSbTA=
Subject key identifier: 56:05:B4:7E:F4:20:2E:DF:AC:C6:02:AB:62:D9:FA:E7:9B:BA:42:93
Authority key identifier: 02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
Certificate issuer: /CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Certificate serial: 019D273B18FEC1C627783A199C60362D317D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
Manifest number: 0DFB
Signing time: Wed 25 Mar 2026 23:01:17 +0000
Manifest this update: Wed 25 Mar 2026 23:01:17 +0000
Manifest next update: Thu 26 Mar 2026 23:01:17 +0000
Files and hashes: 1: AiyP_FBgnsDYtKcoBciZCmSq5x4.crl (hash: nM8A3eNB4sCrWjsThVq+LVKpF/YJqVeESfIdc1S/s+M=)
2: DWHyFvHwr99MtfkrMpHq2IQ1WQs.roa (hash: lZuuHU909ornFrQMygRPUOgb1PqH+8YBfhZUUM9nw/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:18:fe:c1:c6:27:78:3a:19:9c:60:36:2d:31:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022c8ffc50609ec0d8b4a72805c8990a64aae71e
Validity
Not Before: Mar 25 23:01:17 2026 GMT
Not After : Mar 26 23:01:17 2026 GMT
Subject: CN=5605b47ef4202edfacc602ab62d9fae79bba4293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:81:b0:96:02:d0:19:8b:61:93:41:ec:dd:
03:26:5a:cc:90:2a:8b:09:dc:74:a1:5a:b2:60:07:
88:d5:1a:27:4d:df:c5:c0:62:39:77:3a:e3:97:79:
bc:01:a5:aa:c7:72:5f:dc:70:38:1a:59:2e:63:2e:
33:d7:de:5c:40:d3:29:54:69:83:83:7f:f0:4f:2d:
ab:63:4c:1c:2e:e6:06:bd:00:a9:c8:96:13:0b:97:
52:6c:8e:ac:85:99:19:5e:89:90:29:45:85:7a:bd:
c1:5d:c4:43:9b:d0:0d:50:58:9c:04:6c:0f:17:8d:
36:65:39:3a:82:7b:1b:3c:eb:bd:16:dc:96:d2:dc:
1b:e3:42:69:0a:40:5f:47:af:c0:ff:76:53:47:c3:
1f:3d:d3:57:67:78:ad:c3:09:84:93:5f:82:5c:6d:
e7:56:7a:25:3b:07:94:73:51:fa:81:e2:af:cb:7a:
dd:1e:6a:35:25:ca:99:c1:c3:82:a9:60:87:d9:dc:
47:f5:b8:53:86:3d:15:86:b9:1d:d6:52:9b:fb:bb:
2a:6d:21:48:ab:bb:6a:a2:f8:ee:22:9e:53:2b:63:
4c:c5:bd:37:79:58:c8:3b:61:62:bc:96:97:dc:c2:
bd:a8:5a:11:56:7b:c9:3e:a0:c9:30:8c:06:f6:4c:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:05:B4:7E:F4:20:2E:DF:AC:C6:02:AB:62:D9:FA:E7:9B:BA:42:93
X509v3 Authority Key Identifier:
keyid:02:2C:8F:FC:50:60:9E:C0:D8:B4:A7:28:05:C8:99:0A:64:AA:E7:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AiyP_FBgnsDYtKcoBciZCmSq5x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6f8a77-b26c-4d24-bb44-15b0c3449907/1/AiyP_FBgnsDYtKcoBciZCmSq5x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d9:17:97:07:08:0f:21:5f:54:ff:1f:46:ed:a8:28:1d:1d:
6c:7f:15:70:c1:e4:97:8d:22:3a:41:73:c3:b8:09:3f:7f:74:
17:06:0f:25:36:a3:85:28:6d:93:91:c8:3d:83:23:6b:e7:f9:
bd:bd:9f:09:d6:88:e6:ec:b1:f8:e3:0b:f2:3f:7a:c6:dd:00:
6a:68:42:b0:9d:ce:f2:32:bf:e4:dd:f6:47:10:2d:42:94:dc:
30:0e:d6:a4:0f:79:48:fe:c4:ce:bb:f7:56:08:ef:a9:5e:17:
f9:e4:a7:a7:f9:ab:1a:1a:5f:bd:30:06:b6:8e:23:65:ea:e9:
e7:1d:25:cf:fb:f7:3e:9c:40:6e:13:ba:8b:11:ae:75:c0:c3:
56:f8:72:7b:36:02:53:7e:8b:f3:1b:94:56:13:c0:b9:e8:f1:
f7:ab:73:ce:bf:f5:3a:58:da:af:72:e8:26:60:62:c4:88:5e:
66:93:a6:b1:f4:f4:4d:cd:77:13:4c:b6:36:93:5a:d0:34:fc:
c6:ff:3f:f0:fc:71:86:0b:59:d8:0c:6b:3b:be:3d:ac:e6:f0:
b0:cd:12:cb:5e:a3:a8:3a:5d:54:6f:4c:93:34:b8:c3:d8:c1:
16:06:5e:d1:c6:46:4d:b6:00:ab:d9:38:a1:16:f0:f7:a8:bd:
67:7c:c1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:46 2026 by rpki-client