Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: Ov0H1lA+XHuEc7NvJd7xIAUGhx++2GRF5npgAwL/zXc=
Subject key identifier: FE:25:14:72:C6:3C:29:F0:E5:8D:B6:91:DA:CF:19:C4:98:A4:3E:5F
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 019F90C7D5FBE76CE9EF72083ADE6285D650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 122E
Signing time: Thu 23 Jul 2026 21:00:43 +0000
Manifest this update: Thu 23 Jul 2026 21:00:43 +0000
Manifest next update: Fri 24 Jul 2026 21:00:43 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: qs7m5JP63u2mHTn9+wP9qxXF74MdUxgZMUWliZYOoMM=)
2: PgXrvWBADSv7xH4LgHKpTQQ0144.roa (hash: rmC8h6+zobbErP+gvycV1mNmmNbI0Zsk3t4WrqWuDNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:d5:fb:e7:6c:e9:ef:72:08:3a:de:62:85:d6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: Jul 23 21:00:43 2026 GMT
Not After : Jul 24 21:00:43 2026 GMT
Subject: CN=fe251472c63c29f0e58db691dacf19c498a43e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:84:35:86:ee:bc:fe:af:ba:30:71:0c:0c:1c:
35:08:55:94:b8:b7:a5:35:77:9a:7d:06:3b:dc:63:
0b:31:64:91:c8:37:ba:0b:89:fa:be:44:57:7d:10:
d2:bf:f9:ae:8f:cb:f2:57:a9:e5:0f:76:d9:0f:7d:
a1:3e:7a:a9:0d:42:89:bf:d2:90:da:da:40:ca:d5:
5c:db:a4:d6:c4:e6:d8:5b:8e:03:e7:a3:30:0d:c7:
be:d8:58:b6:8e:5c:3c:6c:d9:c9:19:1e:17:56:23:
5f:f5:5d:20:e2:d4:fb:05:ff:4a:5e:d2:13:c6:a7:
5e:5b:75:68:e0:35:67:a1:7b:46:95:f5:35:74:54:
95:0d:1d:82:b1:b8:94:42:18:2d:3b:f3:25:22:1f:
5e:24:90:61:01:a2:51:bb:32:01:4c:b9:32:c3:ee:
d4:df:78:3c:ee:2f:68:3b:12:4e:b2:23:f1:13:20:
7f:f5:22:de:12:48:f1:8c:ad:14:db:a8:5b:41:79:
e7:50:26:02:ce:78:9e:14:9f:97:4c:4f:0a:4e:de:
47:cf:4d:b3:4e:3f:60:9e:3a:ce:e5:9c:db:cc:22:
42:b2:c8:3b:2a:54:a8:48:56:56:3a:bd:6a:f8:f8:
cc:c6:2d:c9:5c:ce:62:8a:f6:2f:ae:b1:19:f3:ed:
7e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:25:14:72:C6:3C:29:F0:E5:8D:B6:91:DA:CF:19:C4:98:A4:3E:5F
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ab:4f:f0:57:42:4a:d0:e0:83:0a:c7:8e:0b:39:9e:d2:32:
51:35:24:df:29:ef:8a:2f:67:d5:de:bd:4c:f1:01:2d:26:90:
96:d8:36:01:69:67:88:54:4d:18:d7:c8:c7:67:a3:3d:20:cf:
e4:a2:1b:f9:aa:3d:33:cc:bd:b3:b3:e7:8a:02:d3:0b:f5:6f:
67:c4:18:05:63:fd:78:ff:bc:7d:b5:91:fc:1e:49:70:42:ff:
a3:46:c9:e4:9a:67:f3:a0:3b:56:a1:bb:3b:09:e1:26:10:16:
75:cd:83:38:45:3d:75:b8:b9:bf:b8:63:d1:73:6c:d2:5f:ca:
c0:33:ec:a4:70:e7:8e:27:1e:49:a8:e3:04:33:e2:5b:b6:e7:
d1:73:a0:68:8d:6b:0a:c4:ee:0c:b8:e0:18:b2:af:3f:c5:40:
f3:ac:aa:1c:6d:a8:ea:ad:ec:29:62:a0:af:fe:07:80:e4:7d:
b6:d9:82:fd:e9:36:e1:64:52:c1:6d:27:cf:dc:ef:4d:61:09:
06:6f:50:bc:0a:f7:6d:68:fe:10:10:7b:27:22:5b:f8:a2:b8:
85:49:e9:7a:7a:30:26:6f:ea:6c:0c:ab:19:ad:ad:f8:73:49:
a1:5c:f9:9c:fb:a0:d5:ca:c0:55:ce:64:71:df:35:5a:10:56:
31:9b:86:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx9X752zp73IIOt5ihdZQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOGIyMGZmMDk4ZTZiN2NiYzhiNmFmMGQ2ODAwNjVlNmI5
MDYwMGIwHhcNMjYwNzIzMjEwMDQzWhcNMjYwNzI0MjEwMDQzWjAzMTEwLwYDVQQD
EyhmZTI1MTQ3MmM2M2MyOWYwZTU4ZGI2OTFkYWNmMTljNDk4YTQzZTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oQ1hu68/q+6MHEMDBw1CFWUuLel
NXeafQY73GMLMWSRyDe6C4n6vkRXfRDSv/muj8vyV6nlD3bZD32hPnqpDUKJv9KQ
2tpAytVc26TWxObYW44D56MwDce+2Fi2jlw8bNnJGR4XViNf9V0g4tT7Bf9KXtIT
xqdeW3Vo4DVnoXtGlfU1dFSVDR2CsbiUQhgtO/MlIh9eJJBhAaJRuzIBTLkyw+7U
33g87i9oOxJOsiPxEyB/9SLeEkjxjK0U26hbQXnnUCYCznieFJ+XTE8KTt5Hz02z
Tj9gnjrO5ZzbzCJCssg7KlSoSFZWOr1q+PjMxi3JXM5iivYvrrEZ8+1+IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4lFHLGPCnw5Y22kdrPGcSYpD5fMB8GA1UdIwQY
MBaAFAGLIP8Jjmt8vItq8NaABl5rkGALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9hNjliNDItMGY5ZC00ZjNjLWE5MzEt
OTEyN2Y0MjlhNDhkLzEvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9hNjliNDItMGY5ZC00ZjNjLWE5MzEtOTEyN2Y0MjlhNDhk
LzEvQVlzZ193bU9hM3k4aTJydzFvQUdYbXVRWUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALqtP8FdC
StDggwrHjgs5ntIyUTUk3ynvii9n1d69TPEBLSaQltg2AWlniFRNGNfIx2ejPSDP
5KIb+ao9M8y9s7PnigLTC/VvZ8QYBWP9eP+8fbWR/B5JcEL/o0bJ5Jpn86A7VqG7
OwnhJhAWdc2DOEU9dbi5v7hj0XNs0l/KwDPspHDnjiceSajjBDPiW7bn0XOgaI1r
CsTuDLjgGLKvP8VA86yqHG2o6q3sKWKgr/4HgOR9ttmC/ek24WRSwW0nz9zvTWEJ
Bm9QvAr3bWj+EBB7JyJb+KK4hUnpenowJm/qbAyrGa2t+HNJoVz5nPug1crAVc5k
cd81WhBWMZuGqA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:21:23 2026 by rpki-client