Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: fWOpmTV1Q1sveUF29k/ChKCRE4/tdDBDZiahz8Zmq8U=
Subject key identifier: D8:5B:54:EC:64:E0:D2:1C:E0:B3:37:E3:F2:94:58:74:B5:AA:E1:5A
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 01A0F04287815945A8C6FAE7B0B4143CEB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 12E4
Signing time: Wed 30 Sep 2026 03:01:26 +0000
Manifest this update: Wed 30 Sep 2026 03:01:26 +0000
Manifest next update: Thu 01 Oct 2026 03:01:26 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: jj7Jf3ZJc6lCURiZIp90DKhNGH46h2y6n6eNiMvF6hg=)
2: PgXrvWBADSv7xH4LgHKpTQQ0144.roa (hash: rmC8h6+zobbErP+gvycV1mNmmNbI0Zsk3t4WrqWuDNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:42:87:81:59:45:a8:c6:fa:e7:b0:b4:14:3c:eb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: Sep 30 03:01:26 2026 GMT
Not After : Oct 1 03:01:26 2026 GMT
Subject: CN=d85b54ec64e0d21ce0b337e3f2945874b5aae15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:bf:6a:5f:95:70:05:72:b9:11:28:d0:ad:
ee:0b:99:bc:82:4b:0f:e1:5d:53:26:f6:dc:5e:8b:
c9:be:a4:47:90:22:5c:be:b6:4d:09:b7:5c:fe:b6:
56:88:8a:b1:df:3e:89:6b:ff:7e:35:c5:cb:de:e1:
f4:1f:cb:82:c9:c3:06:80:77:57:3a:a1:87:51:15:
ee:35:cc:2c:8c:a4:e7:1b:a3:3b:84:1c:5d:75:52:
1e:8f:27:b3:f2:70:9f:e0:3f:2a:1e:61:0a:2d:88:
d6:71:ca:6f:85:60:4f:b6:bc:e1:01:6d:e6:24:71:
a8:16:00:7a:3d:b5:90:3b:c0:f6:69:7a:90:f7:48:
2a:7a:3f:bb:34:94:2a:a6:b7:28:33:65:93:55:7b:
76:53:dd:78:d0:8f:96:dc:27:4e:61:0c:52:e6:a0:
b2:fb:85:e0:f5:6f:60:de:fe:94:83:e7:1c:4d:54:
37:e4:9f:84:7f:c4:f0:38:f6:7f:7d:51:bb:5f:b9:
51:45:e1:02:e7:d7:5b:d0:1b:a5:5e:33:2f:2a:28:
6f:e4:d4:d7:f2:5b:ed:11:69:b5:9f:3d:0c:e6:b4:
06:cd:e5:6a:6e:5c:4b:7e:50:c7:e4:28:72:57:0c:
aa:3c:1a:8a:55:27:7c:8b:a9:02:2f:46:bc:57:68:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5B:54:EC:64:E0:D2:1C:E0:B3:37:E3:F2:94:58:74:B5:AA:E1:5A
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c1:99:94:26:4e:28:3c:68:8f:35:88:bc:52:09:ed:47:68:
77:77:d9:ba:9d:bb:da:58:17:63:eb:4c:bd:52:30:4c:cc:dd:
0d:7f:42:95:00:6f:3a:89:ce:79:39:47:82:31:e0:ff:e6:a2:
b8:e5:b2:d3:18:c1:3d:aa:a8:d0:74:89:b7:c9:85:e5:f7:af:
1a:c4:81:71:42:d2:c4:f6:65:d7:71:a1:9d:b5:b8:1a:b7:49:
15:38:1c:bf:72:29:6f:ab:9c:b4:9b:0b:63:8e:5f:d3:c7:c5:
73:b3:5a:c5:a7:af:2a:91:57:29:5c:2b:16:0b:65:fd:9d:ec:
08:9f:09:62:b9:59:fd:94:1e:77:23:65:67:b4:86:cc:bb:48:
53:99:12:cd:e5:2e:ea:09:4b:4b:82:dd:ff:5a:52:53:9b:2d:
2a:b4:9f:37:66:f4:00:78:99:90:46:63:43:67:78:3c:07:4f:
51:e2:f9:5c:44:1d:01:48:63:0e:19:a1:24:ef:48:5a:78:1e:
3a:b1:a8:0c:ff:33:8e:27:0a:ee:85:c7:07:77:0a:f2:69:09:
fb:6b:30:9e:7d:ea:fa:be:9b:2d:27:c2:a0:15:c7:b3:5e:74:
4e:7c:38:13:56:5e:aa:17:7b:82:93:6b:51:40:a8:92:93:c1:
33:9f:2c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:26:40 2026 by rpki-client