
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
File: AYZ9mLBSF68a-spyJrvWEzcHSfA.mft (raw, json)
Hash identifier: +Wu81tivdaYJTtWj0l5ocetwfVjMqTU6mebXgmr4B9I=
Subject key identifier: DE:F5:CC:20:72:FC:A1:FE:D4:E8:CB:D9:DE:EB:2A:64:63:90:22:A4
Authority key identifier: 01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
Certificate issuer: /CN=01867d98b05217af1afaca7226bbd613370749f0
Certificate serial: 019F9090D52B7723040C3537129B1BB91016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
Manifest number: 06AC
Signing time: Thu 23 Jul 2026 20:00:38 +0000
Manifest this update: Thu 23 Jul 2026 20:00:38 +0000
Manifest next update: Fri 24 Jul 2026 20:00:38 +0000
Files and hashes: 1: AYZ9mLBSF68a-spyJrvWEzcHSfA.crl (hash: YeDnW7jzT7Ww+BluxbcVfvHOBsRbSSb2zvXoAHhA18c=)
2: Ezve964v81lYlWQeavbK7g7CJGk.roa (hash: iRAr6mZP/rQywgyAaTeChLJgFIykzhfGwc22gfj7mcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:d5:2b:77:23:04:0c:35:37:12:9b:1b:b9:10:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01867d98b05217af1afaca7226bbd613370749f0
Validity
Not Before: Jul 23 20:00:38 2026 GMT
Not After : Jul 24 20:00:38 2026 GMT
Subject: CN=def5cc2072fca1fed4e8cbd9deeb2a64639022a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:89:87:55:61:c0:16:38:0d:55:f8:26:f6:
8f:03:06:bb:5e:45:91:4c:68:d6:df:20:64:36:87:
d2:58:03:4b:dc:3b:98:b6:ee:16:f4:73:5b:0a:53:
c6:b2:2e:5e:18:5e:a2:0d:d9:c8:64:ca:30:f0:f7:
41:46:b4:09:eb:a0:0e:db:82:be:d0:5c:92:ae:e8:
53:d2:7a:09:48:5c:c6:ce:fe:a9:6d:ac:8b:84:26:
91:f2:8d:3e:15:6b:cb:1d:5f:0f:ca:89:71:15:93:
4d:81:75:64:eb:9a:53:4d:60:25:88:e9:36:59:15:
79:d0:5c:84:75:56:db:92:04:e9:37:79:01:26:8b:
5b:0b:e5:94:4a:81:12:39:74:4f:dd:ff:1a:78:f0:
5e:73:06:7b:32:34:f8:ab:05:0c:7a:b7:5e:53:25:
e3:bb:d7:6f:d7:a9:2f:1f:a9:02:6c:db:16:31:69:
96:71:a0:c3:3d:0b:10:3e:80:34:fe:a4:73:28:67:
db:68:63:6c:c7:93:93:a9:61:7d:d8:72:4c:59:96:
0c:5c:13:8e:9f:60:ee:c7:35:62:71:32:6b:5c:a2:
b8:8f:75:90:57:9e:93:6b:32:47:88:86:aa:44:0b:
69:9c:62:ef:29:c8:59:70:20:af:56:1c:c7:ea:82:
4e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F5:CC:20:72:FC:A1:FE:D4:E8:CB:D9:DE:EB:2A:64:63:90:22:A4
X509v3 Authority Key Identifier:
keyid:01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d5:a3:24:39:b9:d8:c4:21:77:6d:7d:e4:13:82:1f:c7:c7:
08:b0:da:8f:37:17:af:bd:e0:57:d3:0a:57:40:d0:11:5d:de:
40:ac:f4:73:ff:14:14:87:87:45:0c:52:bd:78:92:2a:0a:38:
91:73:09:c3:e7:8e:86:c7:dc:83:60:50:0d:e0:ec:6d:ec:ed:
d9:d8:60:f2:00:64:a7:68:5b:b4:18:8c:c6:76:ba:55:ac:a3:
fc:9f:44:f4:cb:98:64:19:c1:c3:20:64:e1:0d:c4:f7:8f:24:
2c:92:78:b7:f7:37:6a:1e:b1:8c:99:4d:0c:c3:e7:4c:a6:fd:
10:73:bc:82:7c:d7:04:fe:4c:c2:ac:2a:39:86:0c:46:b1:86:
0d:a7:b2:3a:16:35:cd:10:09:7a:7f:b6:24:7f:93:80:4b:2d:
fb:0f:e9:c8:0d:61:b6:73:4d:3a:ba:76:18:7c:53:97:69:cf:
f9:07:d2:6f:42:84:70:e4:53:9e:a1:d3:06:1a:a8:c9:fb:f4:
75:ad:cf:53:5b:85:a4:99:29:1e:85:7d:f1:c2:68:46:49:c6:
54:5c:fb:ef:30:69:24:47:f0:ee:43:57:43:2d:69:31:c5:cf:
55:0f:7c:dd:5e:e4:b9:49:d9:1e:ae:06:b9:ed:cf:f6:21:bf:
51:59:62:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:16:51 2026 by rpki-client