Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft
File: AY9TOgxHePOMEstY3Xtq8l-MrOc.mft (raw, json)
Hash identifier: rfr441B9DXcmNpg5vUvi0NMwQ9g0FcB8GuKv4bZOf48=
Subject key identifier: 6B:E7:79:3C:34:EF:86:D1:9E:B2:62:F5:BC:A8:9C:7F:59:C8:45:76
Authority key identifier: 01:8F:53:3A:0C:47:78:F3:8C:12:CB:58:DD:7B:6A:F2:5F:8C:AC:E7
Certificate issuer: /CN=018f533a0c4778f38c12cb58dd7b6af25f8cace7
Certificate serial: 019F8F4720925ED15BBE6F371AF5EE6A4E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AY9TOgxHePOMEstY3Xtq8l-MrOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft
Manifest number: 028E
Signing time: Thu 23 Jul 2026 14:00:30 +0000
Manifest this update: Thu 23 Jul 2026 14:00:30 +0000
Manifest next update: Fri 24 Jul 2026 14:00:30 +0000
Files and hashes: 1: AY9TOgxHePOMEstY3Xtq8l-MrOc.crl (hash: JzEJdo1GZwTmXLiCdntNKSpWSGXdtkp1o2OkPnNM4t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AY9TOgxHePOMEstY3Xtq8l-MrOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:20:92:5e:d1:5b:be:6f:37:1a:f5:ee:6a:4e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018f533a0c4778f38c12cb58dd7b6af25f8cace7
Validity
Not Before: Jul 23 14:00:30 2026 GMT
Not After : Jul 24 14:00:30 2026 GMT
Subject: CN=6be7793c34ef86d19eb262f5bca89c7f59c84576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:4b:bb:d8:51:96:ee:bb:42:36:3a:75:4a:
c2:c1:64:6c:62:ef:36:c0:02:18:d1:c4:5a:51:44:
e1:7e:76:1f:a1:e5:83:78:71:c9:fc:65:12:c1:01:
e1:50:76:7e:8d:f5:6d:b5:cc:56:fb:6a:e8:f1:23:
2b:00:8d:bc:78:f1:52:bd:1f:77:66:c7:91:52:3b:
d9:8c:63:1e:a2:dd:04:81:7e:a4:66:11:11:7c:56:
1b:37:09:eb:3d:02:d0:80:2d:63:94:2d:8d:cf:82:
d2:53:a1:86:7d:9a:d0:8e:c9:0e:6e:63:fe:8f:30:
63:5d:a6:8a:ba:c3:5d:00:47:50:6f:20:71:8e:51:
6c:89:9e:37:99:83:82:79:41:0c:5a:f5:20:a8:8b:
42:ee:1f:5a:57:62:5f:27:c2:10:26:1c:1e:74:6a:
d9:6e:ee:b4:7d:54:79:c7:97:2e:a0:8b:a4:60:b9:
a9:97:fd:19:c8:65:7d:00:4c:52:8c:7d:25:04:34:
53:52:8b:aa:f4:09:41:57:62:b5:90:87:ed:ec:7c:
72:1f:5f:1f:f5:ad:37:77:f9:7c:b9:25:9f:63:f8:
9c:2a:6b:9e:58:8d:92:8e:c2:84:a6:bf:03:cf:19:
18:70:e6:7d:76:2c:2f:1f:1a:8b:aa:75:fc:0d:bf:
8e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E7:79:3C:34:EF:86:D1:9E:B2:62:F5:BC:A8:9C:7F:59:C8:45:76
X509v3 Authority Key Identifier:
keyid:01:8F:53:3A:0C:47:78:F3:8C:12:CB:58:DD:7B:6A:F2:5F:8C:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AY9TOgxHePOMEstY3Xtq8l-MrOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ed4bac-e0e2-4e29-98a7-ef862e3e7128/1/AY9TOgxHePOMEstY3Xtq8l-MrOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:02:86:23:87:cf:61:ea:0d:6e:89:29:b6:65:f7:13:24:28:
f6:b3:37:64:75:c3:a6:04:0b:76:84:5c:78:c7:cd:66:6f:91:
62:e8:90:e8:c3:fd:7b:77:50:c2:e0:74:c1:44:ed:be:f7:fa:
da:7b:4f:8d:f6:07:ea:ad:a6:18:36:83:9f:b4:f9:f8:37:cc:
a9:b2:87:2a:b2:6f:70:bd:11:35:f7:ee:dc:81:35:86:b2:75:
8d:d3:d4:25:68:a7:e2:43:d7:52:26:cd:50:bb:cc:b5:09:ca:
96:92:eb:65:43:07:ce:2b:26:51:e4:28:2c:ac:05:1b:1a:ef:
b9:c3:f0:f1:0f:be:98:58:4b:ba:f1:c7:72:14:f7:a5:e0:01:
d4:3a:52:e2:15:7d:c4:26:b6:c8:a0:e6:45:07:f0:f8:a0:d7:
47:cf:68:d4:7d:8a:23:89:e5:6b:5c:5a:9c:57:ca:59:44:fa:
f6:11:47:4d:d7:c6:3c:d9:c8:a9:1d:48:d8:ba:61:89:53:99:
bf:32:ab:7e:9e:2a:92:a2:8c:e7:0a:9e:a9:5c:a4:97:12:84:
b8:21:7d:81:b0:40:5e:96:b4:00:02:8c:54:e5:79:0a:5e:55:
c3:eb:a9:0f:90:c2:92:d2:fc:81:e9:32:42:28:5c:23:21:de:
f7:3f:f6:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PRyCSXtFbvm83GvXuak5PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOGY1MzNhMGM0Nzc4ZjM4YzEyY2I1OGRkN2I2YWYyNWY4
Y2FjZTcwHhcNMjYwNzIzMTQwMDMwWhcNMjYwNzI0MTQwMDMwWjAzMTEwLwYDVQQD
Eyg2YmU3NzkzYzM0ZWY4NmQxOWViMjYyZjViY2E4OWM3ZjU5Yzg0NTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+5Lu9hRlu67QjY6dUrCwWRsYu82
wAIY0cRaUUThfnYfoeWDeHHJ/GUSwQHhUHZ+jfVttcxW+2ro8SMrAI28ePFSvR93
ZseRUjvZjGMeot0EgX6kZhERfFYbNwnrPQLQgC1jlC2Nz4LSU6GGfZrQjskObmP+
jzBjXaaKusNdAEdQbyBxjlFsiZ43mYOCeUEMWvUgqItC7h9aV2JfJ8IQJhwedGrZ
bu60fVR5x5cuoIukYLmpl/0ZyGV9AExSjH0lBDRTUouq9AlBV2K1kIft7HxyH18f
9a03d/l8uSWfY/icKmueWI2SjsKEpr8DzxkYcOZ9diwvHxqLqnX8Db+OHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvneTw074bRnrJi9byonH9ZyEV2MB8GA1UdIwQY
MBaAFAGPUzoMR3jzjBLLWN17avJfjKznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVk5VE9neEhlUE9NRXN0WTNYdHE4bC1Nck9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lZDRiYWMtZTBlMi00ZTI5LTk4YTct
ZWY4NjJlM2U3MTI4LzEvQVk5VE9neEhlUE9NRXN0WTNYdHE4bC1Nck9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lZDRiYWMtZTBlMi00ZTI5LTk4YTctZWY4NjJlM2U3MTI4
LzEvQVk5VE9neEhlUE9NRXN0WTNYdHE4bC1Nck9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgKGI4fP
YeoNbokptmX3EyQo9rM3ZHXDpgQLdoRceMfNZm+RYuiQ6MP9e3dQwuB0wUTtvvf6
2ntPjfYH6q2mGDaDn7T5+DfMqbKHKrJvcL0RNffu3IE1hrJ1jdPUJWin4kPXUibN
ULvMtQnKlpLrZUMHzismUeQoLKwFGxrvucPw8Q++mFhLuvHHchT3peAB1DpS4hV9
xCa2yKDmRQfw+KDXR89o1H2KI4nla1xanFfKWUT69hFHTdfGPNnIqR1I2LphiVOZ
vzKrfp4qkqKM5wqeqVyklxKEuCF9gbBAXpa0AAKMVOV5Cl5Vw+upD5DCktL8geky
QihcIyHe9z/2fw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:01:47 2026 by rpki-client