
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
File: AYZ9mLBSF68a-spyJrvWEzcHSfA.mft (raw, json)
Hash identifier: fuvRVaDwWptlD8D0XstaOR1o9ul80scigrvZ3DtbR9o=
Subject key identifier: 8F:47:29:E5:53:54:08:CF:55:2F:22:02:F5:E1:2E:EB:D4:FE:61:66
Authority key identifier: 01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
Certificate issuer: /CN=01867d98b05217af1afaca7226bbd613370749f0
Certificate serial: 01A0CF36181C34283EB898D3230095D8BCDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
Manifest number: 0751
Signing time: Wed 23 Sep 2026 17:00:23 +0000
Manifest this update: Wed 23 Sep 2026 17:00:23 +0000
Manifest next update: Thu 24 Sep 2026 17:00:23 +0000
Files and hashes: 1: AYZ9mLBSF68a-spyJrvWEzcHSfA.crl (hash: uirTZ0eTPObpwz638RCRD3C4uTUi2TNjrjVwj4P1d0Y=)
2: Ezve964v81lYlWQeavbK7g7CJGk.roa (hash: iRAr6mZP/rQywgyAaTeChLJgFIykzhfGwc22gfj7mcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:18:1c:34:28:3e:b8:98:d3:23:00:95:d8:bc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01867d98b05217af1afaca7226bbd613370749f0
Validity
Not Before: Sep 23 17:00:23 2026 GMT
Not After : Sep 24 17:00:23 2026 GMT
Subject: CN=8f4729e5535408cf552f2202f5e12eebd4fe6166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c2:8b:83:04:43:1a:28:3d:15:35:0d:28:a9:
5b:b4:61:2f:20:0e:ba:1c:20:f2:d8:9e:ab:e2:8c:
0e:81:94:73:dd:99:cc:22:34:3a:29:22:f3:87:fe:
f5:b8:2b:8f:60:e2:c1:b8:0e:d2:23:8f:55:82:93:
3d:29:a6:52:d6:49:ac:c6:29:f3:2c:d2:1c:63:a2:
c8:86:af:96:4c:b7:a0:fe:b1:07:bc:86:1a:71:d0:
a8:9f:ad:15:c8:9b:04:ff:40:dd:74:a1:df:e8:0a:
f7:be:67:b3:9b:71:4c:b8:e6:ce:ea:1a:21:3c:84:
7a:12:cd:0e:6c:13:6f:52:ec:b0:19:e0:32:46:c3:
55:6a:02:25:9a:a6:d6:87:ef:71:48:19:7f:e4:c3:
0a:b9:c8:3c:dc:7a:80:62:28:58:de:05:52:bc:4b:
c0:ac:80:19:e7:7a:1a:08:04:93:f5:bc:9f:c5:08:
3b:a1:4c:ed:08:db:cb:b8:12:c6:5d:77:e9:34:87:
a0:fd:90:b7:db:7c:ab:a9:81:3e:c3:10:1e:7a:2a:
97:3c:7e:5f:fe:87:25:23:b0:8d:85:2c:23:ea:3f:
4e:43:76:00:63:71:21:34:67:73:ed:ff:99:72:70:
e3:9b:48:54:fe:3d:de:39:dd:75:bb:eb:f3:9f:36:
45:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:47:29:E5:53:54:08:CF:55:2F:22:02:F5:E1:2E:EB:D4:FE:61:66
X509v3 Authority Key Identifier:
keyid:01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2e:09:bc:d3:00:95:9d:cd:81:09:bc:f5:2e:73:0a:23:bc:
40:7b:4d:da:6f:64:90:66:24:ea:79:2f:b5:cc:c5:0a:0b:21:
19:66:a0:37:16:56:48:6d:79:1e:be:5f:81:55:54:52:d1:c1:
ea:ea:00:20:7a:6f:8d:6f:2a:07:16:9f:3b:72:8b:20:a1:0d:
7b:e2:81:f6:c6:82:07:0a:30:b7:13:55:36:91:a5:0f:5b:a0:
27:a6:c6:54:63:df:56:d8:ef:39:70:bf:fb:41:77:8a:bb:2c:
e4:9b:7b:f2:75:4c:1c:39:a8:7b:7e:4a:8c:67:bc:57:2d:ce:
47:9b:60:fe:f5:f4:d4:d2:4f:dd:73:1c:e4:ba:92:2b:5e:cf:
4e:df:56:7d:a6:e9:e2:fb:d3:af:39:9a:27:f3:5a:b4:3b:77:
3f:b9:60:9b:44:ae:6f:34:66:de:75:52:83:5c:79:2c:e6:03:
3c:27:a2:47:df:52:59:d4:f3:f5:28:f1:68:ab:94:cb:52:7c:
a2:9c:77:0c:c6:e5:c8:46:60:93:b8:62:c2:6f:f6:39:54:a8:
08:ce:1f:ab:bf:9a:6b:32:49:3f:51:43:d2:4f:df:de:b4:a4:
d5:df:0d:5a:cd:6b:b3:52:c1:6a:fd:22:85:d1:a3:e8:65:a4:
1f:04:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:30:27 2026 by rpki-client