Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
File: AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft (raw, json)
Hash identifier: MVKGiUiPpKc1K4H/pUeQcCA5bcVz0kKaoVdETYQaj6w=
Subject key identifier: D4:66:1E:BB:7C:AD:CE:84:51:08:6C:2D:1A:8D:2B:EC:53:16:A1:FE
Authority key identifier: 03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
Certificate issuer: /CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Certificate serial: 01A0CB230E3179A9C65E2A4B290E5D21B926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
Manifest number: 052C
Signing time: Tue 22 Sep 2026 22:01:07 +0000
Manifest this update: Tue 22 Sep 2026 22:01:07 +0000
Manifest next update: Wed 23 Sep 2026 22:01:07 +0000
Files and hashes: 1: AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl (hash: +UIVFI9Y2IPmGNX5iFxHpUIor+5GNew2svZn5yI+A4o=)
2: vYbe5i0abM5OKc80hhLHQSxkx6I.roa (hash: 11dpUJpj4Md28m8DN1pCtjlW/06S3TdKsIGJmsfc4nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:23:0e:31:79:a9:c6:5e:2a:4b:29:0e:5d:21:b9:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Validity
Not Before: Sep 22 22:01:07 2026 GMT
Not After : Sep 23 22:01:07 2026 GMT
Subject: CN=d4661ebb7cadce8451086c2d1a8d2bec5316a1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f8:47:36:46:12:d0:a9:85:54:b7:88:50:9f:
d2:cc:d5:80:f1:b5:cc:82:eb:63:50:63:c6:5b:65:
f6:16:bb:99:60:33:d4:b7:30:98:c3:58:df:51:bb:
6b:10:6d:b6:2e:ab:78:ea:41:78:a5:90:fc:b7:d0:
59:fa:18:07:74:ea:51:2a:16:c9:85:2c:02:59:c2:
5f:93:9d:a4:b7:bd:5e:1b:ff:70:f8:b0:e0:25:39:
aa:a2:8d:f5:cb:73:eb:cc:77:d8:e2:37:cf:4f:cd:
1a:13:46:b1:3c:36:2b:6d:cb:66:f6:89:9f:3f:c3:
d9:99:38:c5:cd:66:67:5e:a9:27:bb:51:e9:c6:7b:
1d:84:bb:80:6a:7e:39:9f:ef:3a:4c:81:ee:16:6b:
da:d4:19:3a:d9:a1:4d:6f:60:a0:7e:e4:d4:33:5f:
a1:d4:76:5e:89:04:42:54:fe:48:da:b7:d9:6e:5d:
96:37:6b:67:a0:77:d8:7e:31:22:c8:d8:06:08:c9:
dd:12:bb:1e:92:17:4f:1a:42:f8:d6:49:cd:8d:f6:
a4:c2:39:d5:e8:37:10:74:b4:29:68:87:ca:66:ca:
82:f4:81:02:ef:e3:0b:42:d0:14:47:dc:be:cf:05:
2b:d5:99:64:71:dc:bc:4f:a9:d2:45:30:5e:4c:5f:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:66:1E:BB:7C:AD:CE:84:51:08:6C:2D:1A:8D:2B:EC:53:16:A1:FE
X509v3 Authority Key Identifier:
keyid:03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:84:5a:de:5f:15:41:46:c0:d0:b2:1f:50:94:07:60:d0:95:
6f:ca:0d:5b:63:57:6a:eb:de:c6:10:8e:cd:c9:56:dd:4d:29:
be:37:e7:40:34:14:5b:94:44:33:46:2a:35:e0:99:3d:4b:21:
ae:00:f3:66:1e:3f:d9:f9:3e:b6:5a:5d:56:b5:ea:fc:2e:1a:
41:72:03:1a:ed:6b:f8:9d:3f:20:5d:87:95:8e:82:23:11:dd:
9b:ee:b3:bb:f6:a1:ac:a5:7d:77:68:56:76:0f:a9:80:8b:68:
87:57:14:a9:f8:87:9d:36:7a:c2:2e:3f:83:bd:dc:76:c0:01:
40:9c:c3:52:93:bf:b5:c4:a5:cc:57:e9:c2:e0:7e:eb:a2:68:
01:50:76:b3:bc:2f:3f:f9:1e:c2:cf:f0:13:74:d5:37:f1:d2:
d6:5e:57:6c:16:6c:c0:23:59:0f:dd:6b:d8:76:43:92:04:f7:
60:de:8f:6e:5e:14:3a:ae:c2:ad:7d:63:b9:45:0e:cc:2f:85:
bb:ae:a9:1a:b8:6c:90:fa:a5:9e:7a:15:e7:21:f9:dd:2d:71:
f3:33:6d:b8:08:02:05:09:5d:af:42:e6:5a:6d:d7:be:c3:a5:
33:93:3c:26:07:73:e9:e5:e7:53:49:22:18:be:39:f4:d0:aa:
46:2b:72:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:17:01 2026 by rpki-client