Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft
File: AY9TOgxHePOMEstY3Xtq8l-MrOc.mft (raw, json)
Hash identifier: OhPV2I+xlnjFZ4705s/S7e3A4PrH0P+OUTfvXcj9xJs=
Subject key identifier: D3:A1:43:6E:0E:92:CA:33:29:37:8C:BC:B3:61:98:1E:65:F7:1D:85
Authority key identifier: 01:8F:53:3A:0C:47:78:F3:8C:12:CB:58:DD:7B:6A:F2:5F:8C:AC:E7
Certificate issuer: /CN=018f533a0c4778f38c12cb58dd7b6af25f8cace7
Certificate serial: 01A0CDEC7AEE77E41C49ADE90F46BCD04B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AY9TOgxHePOMEstY3Xtq8l-MrOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft
Manifest number: 0333
Signing time: Wed 23 Sep 2026 11:00:22 +0000
Manifest this update: Wed 23 Sep 2026 11:00:22 +0000
Manifest next update: Thu 24 Sep 2026 11:00:22 +0000
Files and hashes: 1: AY9TOgxHePOMEstY3Xtq8l-MrOc.crl (hash: HWAWnNVlgVC4GTfrPvmTTbqk44Gno7Jr8eMwT7hkCy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AY9TOgxHePOMEstY3Xtq8l-MrOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:7a:ee:77:e4:1c:49:ad:e9:0f:46:bc:d0:4b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018f533a0c4778f38c12cb58dd7b6af25f8cace7
Validity
Not Before: Sep 23 11:00:22 2026 GMT
Not After : Sep 24 11:00:22 2026 GMT
Subject: CN=d3a1436e0e92ca3329378cbcb361981e65f71d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ad:21:b3:97:74:62:d5:75:93:d8:b6:38:0e:
76:69:c2:4a:14:57:26:58:16:09:af:2b:ae:d1:2d:
52:c7:49:ca:21:97:bc:f1:8f:bc:a3:64:4e:a7:31:
ee:b6:c8:29:12:e0:09:3c:5c:77:7b:85:ba:e9:f2:
7a:3a:4b:71:f0:dd:04:39:3b:b4:77:ad:52:f9:52:
54:47:cb:65:7c:7c:2a:a5:20:df:9f:49:f9:8a:ce:
d2:42:a2:2b:6c:21:28:f9:c7:f4:25:f0:7d:4b:1e:
cd:d1:1b:db:3f:39:43:59:e8:c1:72:90:2e:f1:10:
3b:91:e8:68:ce:5b:5d:82:cc:85:c2:43:bb:41:ca:
f7:bc:23:26:72:d6:29:76:91:e9:6e:d7:8c:43:b0:
ad:6a:39:25:07:f4:4f:c8:41:e5:fe:00:00:ae:17:
00:ec:b7:19:a8:97:2b:f5:d2:b7:e0:f9:9b:13:f2:
20:29:3c:f4:45:a7:a7:7d:b0:75:7f:6c:99:42:18:
4d:81:ed:79:1a:aa:11:1c:8d:f7:dc:38:45:83:87:
6b:a5:e1:4f:fe:96:b1:6b:04:09:2f:b5:8f:b6:3c:
4b:5f:64:ee:86:1d:df:72:35:e4:5c:4e:42:f1:62:
64:e9:84:af:59:e0:44:b0:e0:c0:22:3b:1d:08:dc:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A1:43:6E:0E:92:CA:33:29:37:8C:BC:B3:61:98:1E:65:F7:1D:85
X509v3 Authority Key Identifier:
keyid:01:8F:53:3A:0C:47:78:F3:8C:12:CB:58:DD:7B:6A:F2:5F:8C:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AY9TOgxHePOMEstY3Xtq8l-MrOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0c:bf:b7:90:cf:b5:eb:e0:d3:02:82:c9:fa:65:d3:cc:35:
d2:be:6d:b3:b1:ea:b8:33:38:60:45:62:d4:f8:82:a1:27:56:
b1:37:32:88:10:53:b2:81:a0:42:66:77:a2:b1:0b:7f:23:f7:
a2:c5:d2:a9:87:8c:56:7f:b5:96:56:49:22:32:ce:cc:7d:75:
b9:82:d0:c6:f6:a0:1d:ee:d7:0f:41:10:6f:94:12:75:da:06:
42:9c:11:6e:b5:7c:82:9c:68:4e:50:d4:33:39:c1:8e:4e:af:
49:82:fd:df:47:d3:d9:8b:e1:4f:52:f7:74:8d:d8:62:e5:13:
82:74:bc:49:06:5f:f4:94:73:59:60:6f:b5:11:d7:3c:77:dd:
f1:12:5a:63:8d:b2:97:2e:77:38:23:21:d1:fe:7b:4e:22:f5:
5b:9d:8f:7e:31:06:22:f9:a3:ed:bd:4a:81:9b:c7:68:68:ff:
49:a4:a2:5d:cf:ba:82:be:51:24:e6:01:01:54:b2:22:ed:4a:
29:cc:5a:20:75:88:a5:32:50:95:4b:ee:10:0d:78:42:6b:66:
83:0c:04:63:3c:04:9a:66:8c:8f:a7:c9:23:91:25:cb:ae:61:
4a:c8:f2:1a:5c:0b:86:78:75:85:d1:18:52:25:2e:81:1b:0e:
dd:89:e2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:38:01 2026 by rpki-client