Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
File: AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft (raw, json)
Hash identifier: TSnr+tRu0rHxfyeQX2gBzmFcmQP85hC3ErUUmrTojKo=
Subject key identifier: 8D:E5:AE:97:A2:B3:84:E6:9E:F4:13:9A:6B:91:C6:56:E7:F3:7F:13
Authority key identifier: 03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
Certificate issuer: /CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Certificate serial: 019D284E668F8C86768F8E12CEDB62242C29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
Manifest number: 034A
Signing time: Thu 26 Mar 2026 04:01:59 +0000
Manifest this update: Thu 26 Mar 2026 04:01:59 +0000
Manifest next update: Fri 27 Mar 2026 04:01:59 +0000
Files and hashes: 1: AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl (hash: PUtNoqxDxeE2WuZ+IXP4ynsjuY0DT/9Y9n4M8TJWhb0=)
2: vYbe5i0abM5OKc80hhLHQSxkx6I.roa (hash: 11dpUJpj4Md28m8DN1pCtjlW/06S3TdKsIGJmsfc4nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:66:8f:8c:86:76:8f:8e:12:ce:db:62:24:2c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bf24ff0257b3d05cf70290a1acf87cea6439
Validity
Not Before: Mar 26 04:01:59 2026 GMT
Not After : Mar 27 04:01:59 2026 GMT
Subject: CN=8de5ae97a2b384e69ef4139a6b91c656e7f37f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:b8:a0:2f:0c:01:ba:fb:f3:dc:bd:4d:82:
a8:4e:8f:f1:7e:b3:f2:af:52:bd:b0:86:e3:34:8b:
16:a7:07:ee:5f:a3:7e:e9:1b:07:4b:e8:57:bc:a5:
03:6f:c6:0c:45:82:66:85:53:e6:48:e1:d4:7c:e6:
31:82:c4:71:c5:c7:70:43:6f:00:50:47:94:94:ba:
e3:55:45:59:c8:15:99:56:9e:ab:76:b9:c1:cf:6d:
6c:d7:b1:4f:65:88:07:9e:04:35:bc:e6:30:e9:41:
40:01:85:b2:db:8f:1d:2d:7e:5a:72:46:86:a0:27:
b8:36:dc:f0:1e:78:78:81:3e:d9:c2:ab:5b:0c:92:
61:ab:0f:3e:bf:72:34:2a:a2:c7:1a:00:5b:16:91:
aa:b9:42:59:a0:4c:28:e9:20:34:e6:a4:ec:53:4a:
38:d7:c5:46:da:2e:68:00:3b:42:f1:91:90:20:04:
6d:47:d0:46:a9:0d:8f:43:55:ae:4f:b9:cf:12:1f:
64:a1:7e:8e:34:dd:4d:a6:45:f1:4b:eb:d1:ad:98:
4f:bd:80:b8:43:49:fb:95:d9:ed:66:f1:c0:f3:0a:
ea:5f:2d:e0:ee:5f:27:fa:db:dd:bd:0d:91:ea:85:
00:ff:1d:88:c5:0f:43:3d:72:cd:c8:75:fb:25:b0:
99:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E5:AE:97:A2:B3:84:E6:9E:F4:13:9A:6B:91:C6:56:E7:F3:7F:13
X509v3 Authority Key Identifier:
keyid:03:21:BF:24:FF:02:57:B3:D0:5C:F7:02:90:A1:AC:F8:7C:EA:64:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_JP8CV7PQXPcCkKGs-HzqZDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b3cb4c-6e36-4c48-8fde-94046aabff9d/1/AyG_JP8CV7PQXPcCkKGs-HzqZDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:74:bb:ab:cc:a3:48:ad:80:db:09:7b:3c:78:33:89:1f:6a:
74:da:27:ed:6f:fb:d4:b6:75:86:a1:64:e1:fe:f1:f8:c5:a4:
92:09:d9:12:71:2f:5c:b1:4b:38:d3:20:71:70:45:03:6d:08:
cd:d1:0a:33:28:21:7f:69:bf:39:39:79:54:aa:d7:00:51:65:
b0:33:83:39:39:71:8c:6b:ab:b3:07:94:06:23:51:c8:21:0d:
7b:1c:92:2d:ef:9e:19:f9:ff:70:1d:36:b0:7d:4b:67:ef:ad:
54:3f:2e:22:16:f7:6b:ff:83:ce:9a:ff:8e:d9:47:c3:1b:ff:
02:de:52:97:1d:4f:db:8c:a6:83:e7:80:0d:81:05:fe:41:37:
af:74:f2:39:ce:03:cc:cb:6c:e5:b5:ee:ba:18:0e:ad:7c:52:
e7:16:04:8a:f1:d5:a9:03:cc:df:22:33:c9:fa:00:45:bb:12:
6a:30:df:95:bb:29:27:e3:d4:20:22:31:fd:4b:90:7a:dc:3c:
de:ca:ca:df:ea:6e:0a:53:58:f7:2b:75:10:6e:68:22:02:66:
76:3a:28:00:50:5e:af:94:90:f8:03:4f:72:cf:97:5d:d6:03:
50:c0:b5:65:f5:f3:03:bf:ea:10:cd:36:47:e0:fe:5b:81:86:
53:1e:c4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:49 2026 by rpki-client