Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
File: AYZ9mLBSF68a-spyJrvWEzcHSfA.mft (raw, json)
Hash identifier: QCK/JXz7RTvA9lJlg/3c7uudvjbGCjScuWpHLLRA9Mc=
Subject key identifier: DB:78:C5:56:76:68:E7:A0:8A:90:5D:02:3E:A7:11:40:51:EB:6C:D5
Authority key identifier: 01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
Certificate issuer: /CN=01867d98b05217af1afaca7226bbd613370749f0
Certificate serial: 019E1BD93CFDE37471B6B97B038FAA6AC520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
Manifest number: 05EB
Signing time: Tue 12 May 2026 11:01:22 +0000
Manifest this update: Tue 12 May 2026 11:01:22 +0000
Manifest next update: Wed 13 May 2026 11:01:22 +0000
Files and hashes: 1: AYZ9mLBSF68a-spyJrvWEzcHSfA.crl (hash: MyJ3RsU0jsVAq3mMSDo78IuM4SsU6TtCIdejTf/zFjE=)
2: Ezve964v81lYlWQeavbK7g7CJGk.roa (hash: iRAr6mZP/rQywgyAaTeChLJgFIykzhfGwc22gfj7mcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:3c:fd:e3:74:71:b6:b9:7b:03:8f:aa:6a:c5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01867d98b05217af1afaca7226bbd613370749f0
Validity
Not Before: May 12 11:01:22 2026 GMT
Not After : May 13 11:01:22 2026 GMT
Subject: CN=db78c5567668e7a08a905d023ea7114051eb6cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ea:7b:2c:42:db:37:59:da:83:d9:b4:5d:43:
b3:a6:ac:46:20:95:ab:0f:49:15:b7:3c:6b:77:3f:
4e:8e:c5:9f:de:79:af:80:c9:b1:00:a5:12:dd:f2:
94:90:89:f3:e5:9d:d5:85:f5:ae:d4:3e:fb:d5:c6:
fd:9c:fc:0b:13:86:bf:7c:fc:47:a6:fa:56:6d:41:
75:af:01:5d:32:cf:93:ac:45:85:5a:47:97:76:f3:
bb:99:e3:54:cb:e8:69:83:dd:d1:a0:aa:27:0c:15:
46:c2:dd:13:cd:56:0d:a6:e2:04:8e:53:89:1d:cf:
5b:60:da:bc:ce:5f:c8:e4:4f:1f:73:ab:7f:d9:30:
de:b2:c9:1a:d4:12:69:33:92:32:47:26:1f:a3:01:
04:65:16:18:0f:2d:1d:b4:40:b8:41:d3:20:bf:a4:
d9:5e:0e:2d:3a:2d:6c:5b:b9:1c:dc:a1:57:5b:46:
47:6f:0b:e0:8e:83:4e:21:df:fd:41:94:4c:ee:df:
b2:4d:4c:86:df:43:5f:33:de:74:97:93:7b:03:8c:
8e:c2:8c:59:86:22:92:0d:e4:7c:93:87:04:17:9f:
f7:79:f1:1b:85:75:60:34:38:03:68:a3:e1:b1:7c:
11:ec:af:73:5c:f2:19:9e:6f:71:d8:36:87:fe:d5:
64:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:78:C5:56:76:68:E7:A0:8A:90:5D:02:3E:A7:11:40:51:EB:6C:D5
X509v3 Authority Key Identifier:
keyid:01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:46:59:16:29:a0:db:82:dc:18:39:ea:25:a6:d3:2f:1b:4c:
5d:13:24:d5:fe:f6:e4:ab:86:1a:99:f5:1e:2d:2e:8b:b9:e0:
fc:01:90:b0:e2:a4:61:b8:44:2b:ab:7a:3c:b3:77:ad:5b:80:
77:2f:63:9c:54:58:18:39:6e:c4:c5:28:da:dc:27:10:45:13:
d2:a8:42:9c:28:cd:ae:cd:52:53:88:58:5f:d4:ae:27:71:a4:
c5:7d:6f:b9:11:6c:2c:bf:ea:c8:fb:4a:19:21:d7:8d:c6:e0:
11:1a:35:08:ab:c8:a8:61:12:dc:9a:32:3d:60:ff:e5:36:51:
c2:af:fa:99:18:e4:07:15:73:17:a4:77:b0:fb:12:92:b6:ca:
41:95:7d:dc:12:3e:0b:ad:1b:df:90:c6:ae:70:fc:99:2b:24:
b4:56:b3:e1:e2:02:db:96:b2:95:6a:6e:72:46:8d:e9:68:df:
8d:4a:b5:81:44:3f:30:d5:b1:4f:20:85:34:a4:19:54:b2:d4:
f3:20:f3:6a:24:98:52:68:38:66:00:e6:22:1b:49:49:c1:8d:
40:07:84:46:7f:f8:7e:ca:21:28:3c:d4:92:10:b7:d2:12:62:
f0:86:a5:e7:c7:3c:a1:a6:c0:a2:84:00:05:d4:dc:0e:c1:89:
8f:5b:a7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:08:24 2026 by rpki-client