Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
File: ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft (raw, json)
Hash identifier: XGJ+sKcJsxLrOHzZ/zW3K8hVzHLhucb7wVFFo/XsUh0=
Subject key identifier: 55:D2:32:F4:D0:32:42:2B:C5:E3:62:E3:6E:77:08:73:A1:F5:F3:59
Authority key identifier: 6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
Certificate issuer: /CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Certificate serial: 01A0D94D76D388AA3B8815CA2F9A16FAA9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
Manifest number: 1A73
Signing time: Fri 25 Sep 2026 16:02:07 +0000
Manifest this update: Fri 25 Sep 2026 16:02:07 +0000
Manifest next update: Sat 26 Sep 2026 16:02:07 +0000
Files and hashes: 1: ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl (hash: zpjPPt0JERDM4Z/gVgDokTdj/zKECZ6ROH/N63X6dX8=)
2: goauVICOFKFE1porgUT28qkrY40.roa (hash: FzUBYAt3u7B+H1TQuJndqSy/KOs9unqwMiMZuvpu6gk=)
3: l1p9d37mhsD_IWnIJc4cSBJLrUM.roa (hash: Q8Y0ag669YkYUSjUykWCZbogQyThUrghrFi6sY9b6+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:76:d3:88:aa:3b:88:15:ca:2f:9a:16:fa:a9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Validity
Not Before: Sep 25 16:02:07 2026 GMT
Not After : Sep 26 16:02:07 2026 GMT
Subject: CN=55d232f4d032422bc5e362e36e770873a1f5f359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:e6:f8:a8:b6:1b:72:3f:c5:22:a0:0c:14:
c1:b5:b5:51:04:8c:54:58:2f:ae:d5:73:48:d0:08:
9a:85:75:85:d5:72:4c:45:91:a5:b0:5f:05:9e:44:
e1:16:57:83:ac:a9:97:40:91:88:83:24:17:b9:d3:
4f:03:23:28:06:46:a5:d6:30:87:92:63:87:52:22:
1c:3f:94:4b:b1:1c:a0:4f:46:72:ce:c1:54:09:ee:
80:23:65:d1:4f:d0:8f:4e:10:c6:9d:78:62:fc:9f:
b6:0c:bf:ef:f6:34:4c:f9:8e:a1:39:15:4f:db:a1:
d2:73:13:c3:ab:b3:e8:72:92:64:aa:bd:d8:f2:6b:
05:f2:19:1a:4d:88:98:02:54:0b:c4:9c:da:b9:f2:
7e:cc:11:a4:f0:d8:1c:53:b2:c1:fb:bb:19:83:36:
5b:ab:42:af:aa:3f:0e:3a:aa:31:b4:2e:5b:23:c7:
3d:58:85:6d:c6:21:b4:05:2f:de:97:18:a9:e8:bb:
90:94:90:66:27:d8:de:cf:19:4b:cc:4f:49:6e:f8:
d1:02:ac:17:f5:57:76:74:4c:72:26:91:8f:b6:45:
59:24:cb:25:64:34:d2:44:dd:96:a7:06:6e:22:17:
f3:4d:a6:70:47:f3:3a:50:52:1f:e0:00:42:7b:ab:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D2:32:F4:D0:32:42:2B:C5:E3:62:E3:6E:77:08:73:A1:F5:F3:59
X509v3 Authority Key Identifier:
keyid:6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4c:f6:e5:3c:79:12:e2:1c:61:05:96:d0:71:8d:c7:56:7f:
fe:ce:53:f5:dd:aa:9c:92:25:ff:b0:83:95:33:e6:f7:54:89:
f1:74:86:72:c2:7f:fa:10:dd:0c:7d:b0:99:e1:3e:fe:7c:a2:
e8:cf:82:fe:19:5a:30:b6:9b:d8:c2:4d:d0:71:6e:6c:30:35:
a2:09:bf:17:3e:76:e7:8e:7a:91:1c:47:83:1c:1d:95:24:77:
33:fe:af:a5:54:14:8a:05:5c:97:e2:4a:9a:ba:0b:45:0b:1c:
e9:65:75:e0:d7:3e:20:a5:6e:12:c2:ad:eb:41:ab:6d:51:85:
f9:9c:44:9f:af:ec:dc:09:ec:37:2b:8b:9c:fb:08:65:5b:a7:
dc:14:44:4a:f6:20:44:88:be:ae:27:93:aa:5c:7d:c3:37:8d:
36:bc:11:d1:28:88:86:1c:ba:d9:97:ac:94:9e:61:95:10:02:
35:4e:d8:39:aa:61:a6:92:2f:56:54:98:17:b7:81:30:fa:ca:
5e:2a:46:d5:43:b8:3a:df:d1:ec:37:59:6c:5e:aa:e3:03:51:
b6:ac:8a:1d:d4:dd:a7:93:df:fd:df:40:21:4c:57:b2:7b:48:
b2:05:a4:0d:fd:be:bd:14:03:a2:d4:40:cf:3d:32:92:e3:91:
c0:d5:f3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:31:47 2026 by rpki-client