Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
File: AYZ9mLBSF68a-spyJrvWEzcHSfA.mft (raw, json)
Hash identifier: pQXFJDkQqiDkcFq85kBik7K4UxCbCevyV7BNCW18KGY=
Subject key identifier: 71:11:33:D7:B1:D9:EA:26:90:0E:13:4B:53:B6:39:86:7D:65:D1:F8
Authority key identifier: 01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
Certificate issuer: /CN=01867d98b05217af1afaca7226bbd613370749f0
Certificate serial: 019D2696413C0275BE49BFDC09A295330B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
Manifest number: 056C
Signing time: Wed 25 Mar 2026 20:01:14 +0000
Manifest this update: Wed 25 Mar 2026 20:01:14 +0000
Manifest next update: Thu 26 Mar 2026 20:01:14 +0000
Files and hashes: 1: AYZ9mLBSF68a-spyJrvWEzcHSfA.crl (hash: HOChFKfg6NsF9YWabIsyHY7dnPlNh7keqcVsbKPNo1o=)
2: Ezve964v81lYlWQeavbK7g7CJGk.roa (hash: iRAr6mZP/rQywgyAaTeChLJgFIykzhfGwc22gfj7mcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:41:3c:02:75:be:49:bf:dc:09:a2:95:33:0b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01867d98b05217af1afaca7226bbd613370749f0
Validity
Not Before: Mar 25 20:01:14 2026 GMT
Not After : Mar 26 20:01:14 2026 GMT
Subject: CN=711133d7b1d9ea26900e134b53b639867d65d1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f2:76:2d:9c:54:c5:6d:b6:b1:33:bb:72:c4:
41:64:ce:50:b7:a6:e8:90:fe:99:51:cf:8c:e5:a3:
cb:fb:2c:d7:59:30:dd:eb:f7:f3:06:55:d1:44:16:
90:e0:d5:9f:db:0d:53:7a:3c:8b:16:ef:ce:ba:89:
15:93:e3:9b:5b:b8:90:e8:23:a2:b8:99:86:88:8f:
74:16:5c:9d:bf:b9:be:a1:c8:b1:e0:1e:e9:a8:ba:
95:99:0e:43:2c:c9:96:ab:c9:7f:45:1d:39:45:de:
e6:44:9f:07:d5:96:0b:7c:dc:e8:81:6b:49:88:b6:
68:a5:57:c9:05:af:c0:6b:d1:e4:f8:9e:a8:53:b4:
b4:49:3a:0b:22:fd:aa:31:2f:14:ec:6e:5c:64:8f:
70:ac:57:eb:92:2d:44:18:cb:79:51:0d:05:4a:5c:
66:cc:99:b4:4c:61:72:5b:48:40:da:0e:9b:18:39:
dd:82:3f:e8:bf:2f:25:d9:8b:9e:ad:33:fe:ae:9f:
dc:c3:8e:ab:8f:ac:bf:72:84:af:f9:70:db:d7:a6:
1c:e1:d2:33:2c:b7:9b:f4:0e:14:62:d7:60:f7:5e:
a9:15:82:6a:81:ec:3d:1e:70:d5:4c:95:8d:d3:04:
ed:82:fe:87:15:91:7d:c1:33:75:70:98:a9:be:6b:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:11:33:D7:B1:D9:EA:26:90:0E:13:4B:53:B6:39:86:7D:65:D1:F8
X509v3 Authority Key Identifier:
keyid:01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f9:aa:8c:b0:e7:86:2a:ac:60:73:1a:94:9e:8c:2a:3b:02:
e3:64:d0:39:40:0b:41:35:82:b6:8a:cf:c0:e5:74:89:58:05:
b9:22:ee:ab:14:d0:a2:07:b1:b9:01:3a:30:83:c7:a0:09:aa:
d9:b8:29:7c:fd:b4:e8:ba:4e:3c:3c:6b:f3:9d:1f:3e:e2:34:
9e:96:e5:1e:e6:a6:89:2b:38:59:38:5b:8e:2d:e1:dd:6f:26:
a6:ac:10:10:ee:51:15:88:d3:bb:f3:7e:2d:43:ca:7b:ae:e2:
2d:4e:ef:be:fc:20:ca:ba:3a:06:6f:33:a3:da:c9:2b:fa:74:
41:74:22:8e:bb:11:25:fb:83:31:ce:e4:4c:f4:e0:4a:8d:9a:
cc:3d:d7:f0:dd:c3:8b:63:13:f0:ee:8a:a4:ae:be:09:9d:c2:
9b:b4:6e:36:ef:5f:37:05:63:48:51:f9:dd:82:aa:f3:8b:c6:
9c:9a:df:72:ce:23:72:2f:bb:c8:a2:dd:87:27:48:5b:f2:ab:
fa:33:2c:37:91:bf:ae:27:1c:fa:e5:35:29:6e:5d:89:38:73:
0f:99:ce:1c:b1:d2:2b:4c:fd:7d:8b:a6:0a:7c:52:52:2f:9f:
6d:b2:5d:3e:c2:69:0d:15:8c:25:7d:03:6a:48:51:90:45:e7:
38:d2:fb:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlkE8AnW+Sb/cCaKVMwtrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxODY3ZDk4YjA1MjE3YWYxYWZhY2E3MjI2YmJkNjEzMzcw
NzQ5ZjAwHhcNMjYwMzI1MjAwMTE0WhcNMjYwMzI2MjAwMTE0WjAzMTEwLwYDVQQD
Eyg3MTExMzNkN2IxZDllYTI2OTAwZTEzNGI1M2I2Mzk4NjdkNjVkMWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfJ2LZxUxW22sTO7csRBZM5Qt6bo
kP6ZUc+M5aPL+yzXWTDd6/fzBlXRRBaQ4NWf2w1TejyLFu/OuokVk+ObW7iQ6COi
uJmGiI90Flydv7m+ocix4B7pqLqVmQ5DLMmWq8l/RR05Rd7mRJ8H1ZYLfNzogWtJ
iLZopVfJBa/Aa9Hk+J6oU7S0SToLIv2qMS8U7G5cZI9wrFfrki1EGMt5UQ0FSlxm
zJm0TGFyW0hA2g6bGDndgj/ovy8l2YuerTP+rp/cw46rj6y/coSv+XDb16Yc4dIz
LLeb9A4UYtdg916pFYJqgew9HnDVTJWN0wTtgv6HFZF9wTN1cJipvmtgRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHERM9ex2eomkA4TS1O2OYZ9ZdH4MB8GA1UdIwQY
MBaAFAGGfZiwUhevGvrKcia71hM3B0nwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlaOW1MQlNGNjhhLXNweUpydldFemNIU2ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC81MmJlYTQtMGFiZC00NzE5LWE2NGIt
ZTQ3YzU4Y2U1MzNjLzEvQVlaOW1MQlNGNjhhLXNweUpydldFemNIU2ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC81MmJlYTQtMGFiZC00NzE5LWE2NGItZTQ3YzU4Y2U1MzNj
LzEvQVlaOW1MQlNGNjhhLXNweUpydldFemNIU2ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvmqjLDn
hiqsYHMalJ6MKjsC42TQOUALQTWCtorPwOV0iVgFuSLuqxTQogexuQE6MIPHoAmq
2bgpfP206LpOPDxr850fPuI0npblHuamiSs4WThbji3h3W8mpqwQEO5RFYjTu/N+
LUPKe67iLU7vvvwgyro6Bm8zo9rJK/p0QXQijrsRJfuDMc7kTPTgSo2azD3X8N3D
i2MT8O6KpK6+CZ3Cm7RuNu9fNwVjSFH53YKq84vGnJrfcs4jci+7yKLdhydIW/Kr
+jMsN5G/ricc+uU1KW5diThzD5nOHLHSK0z9fYumCnxSUi+fbbJdPsJpDRWMJX0D
akhRkEXnONL7GQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:34 2026 by rpki-client