Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: lUHFHrmY9dFFBIvCLcI7caFxkG4lDCDDz5poAvnhIrk=
Subject key identifier: 37:B9:5B:95:D7:A4:7E:C9:D0:56:EE:AD:61:35:2A:58:E2:62:76:6D
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 019E1C0FF35F65BA871871EE735086D9B6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 116D
Signing time: Tue 12 May 2026 12:01:07 +0000
Manifest this update: Tue 12 May 2026 12:01:07 +0000
Manifest next update: Wed 13 May 2026 12:01:07 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: 459h+cg3xY4JdmDe4cipdsRj3v2VwKOIO1o+Lq5Mh4s=)
2: PgXrvWBADSv7xH4LgHKpTQQ0144.roa (hash: rmC8h6+zobbErP+gvycV1mNmmNbI0Zsk3t4WrqWuDNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:f3:5f:65:ba:87:18:71:ee:73:50:86:d9:b6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: May 12 12:01:07 2026 GMT
Not After : May 13 12:01:07 2026 GMT
Subject: CN=37b95b95d7a47ec9d056eead61352a58e262766d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:ce:0a:ed:c5:62:9a:36:de:19:c3:48:b2:
6d:66:68:b3:1a:23:6d:f7:6f:f2:d0:1e:ea:e6:56:
5c:e1:d4:49:fc:13:e5:90:b6:cb:7f:ba:ef:24:a4:
c2:e9:8c:d7:b4:7d:17:9e:97:5d:5f:c8:c6:a9:c2:
73:97:f4:50:d6:a6:4c:6b:85:a5:58:3a:35:93:90:
66:7a:19:95:7d:d0:1c:76:0a:92:f6:ee:0d:15:fd:
ed:bf:3e:78:d3:76:fe:0e:88:ac:22:a8:b8:1f:03:
5b:d0:28:ce:4a:ed:61:1c:c7:78:63:2f:b1:dd:18:
cd:ca:7b:f8:37:a4:9e:3d:60:90:ea:8d:48:70:af:
d6:18:e8:3e:3f:8a:df:e7:ea:fd:4b:bd:10:07:74:
9e:f3:8a:bd:be:39:fd:94:41:87:40:90:1c:1c:7a:
db:28:70:be:23:9a:c6:11:1a:ff:43:0f:df:27:64:
fd:77:0e:4e:fd:73:b2:ca:77:0f:64:7a:6e:aa:75:
a7:e0:fe:ea:03:71:0a:dc:bb:99:cf:ad:a5:a1:8f:
0e:d2:f5:fb:58:35:13:9e:0e:bb:95:84:44:0f:6e:
cc:b3:a8:84:93:21:f3:28:3b:81:84:53:33:85:03:
e8:e3:18:d9:b8:d0:ae:6c:dc:7a:b4:fc:11:74:12:
90:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B9:5B:95:D7:A4:7E:C9:D0:56:EE:AD:61:35:2A:58:E2:62:76:6D
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:9a:69:56:41:26:80:98:f3:95:b4:7e:99:e3:99:85:c6:08:
2c:62:46:81:80:46:22:04:5f:ac:bc:26:fb:0e:66:07:a3:37:
7c:21:00:ea:2d:4f:1c:9e:ba:13:d9:d1:af:46:a2:d2:dc:1d:
73:60:aa:46:be:6d:ff:1b:58:03:5d:97:eb:f4:e4:b3:f5:44:
9a:fe:3f:4f:a7:ef:e9:3c:5e:9b:6a:71:49:aa:c4:bb:0c:8a:
e5:4c:7f:58:ab:3f:0d:5f:45:9f:e5:fd:b4:06:b3:9f:a8:3c:
7e:3f:01:d6:03:4e:12:13:7b:3f:d2:dd:d0:36:a8:f2:4c:a2:
90:f6:35:be:37:48:f0:77:b9:a9:b4:2a:6b:34:51:7a:68:60:
ef:08:ec:cb:79:ca:e8:cc:59:d1:61:63:51:d3:cf:e8:01:59:
dd:4a:62:f2:3d:3c:1a:a8:2b:e6:06:e0:35:8e:e2:df:0d:05:
fb:fb:e0:73:c2:c2:ef:a0:1f:0c:f5:1e:73:32:c1:9f:81:db:
c2:4d:73:08:76:af:34:83:57:5c:4b:33:af:cb:b9:c1:85:9b:
c9:f6:8f:49:3b:ac:2d:79:79:42:94:01:c9:6e:9c:da:f7:68:
b8:ba:8c:16:31:21:3b:90:79:80:e6:a4:84:9e:98:3e:4f:a0:
a7:c2:60:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:17 2026 by rpki-client