Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: FgAfW2GhsoVEqDvv/4FHkR95MWBtKFQwLu7lQUhZoHs=
Subject key identifier: 6F:5C:1C:76:C6:11:A8:DE:97:17:A3:26:78:70:09:E8:2F:20:54:28
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 019D28BB758DE47F4D4725A3A843FAC60DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 10EF
Signing time: Thu 26 Mar 2026 06:01:06 +0000
Manifest this update: Thu 26 Mar 2026 06:01:06 +0000
Manifest next update: Fri 27 Mar 2026 06:01:06 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: Xbveax0/2A/DsQ41XIMtkR0V9rv7vy8I0EBcXOoO7JA=)
2: PgXrvWBADSv7xH4LgHKpTQQ0144.roa (hash: rmC8h6+zobbErP+gvycV1mNmmNbI0Zsk3t4WrqWuDNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:75:8d:e4:7f:4d:47:25:a3:a8:43:fa:c6:0d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: Mar 26 06:01:06 2026 GMT
Not After : Mar 27 06:01:06 2026 GMT
Subject: CN=6f5c1c76c611a8de9717a326787009e82f205428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b9:10:83:bb:d2:8b:0a:6b:ce:70:f5:92:11:
49:a4:ee:d9:2a:d2:c5:f0:bb:4e:34:fa:b1:50:8e:
eb:11:3e:28:2d:ba:3f:90:03:95:7b:68:db:f1:1f:
4a:d2:2e:30:3e:e9:7a:7f:5b:ef:9b:f6:5a:ab:4c:
e1:84:45:b9:3b:8d:68:4a:84:77:1a:10:b4:60:e6:
41:b0:0e:e8:7e:24:7c:36:6e:e2:39:9f:b2:6b:31:
3a:92:76:e6:e4:e1:29:24:34:ed:3a:79:6d:88:74:
55:53:77:8f:2b:95:d8:aa:42:fb:87:73:d4:b9:63:
9f:a7:04:ea:fb:b9:9b:3c:30:bc:06:97:21:87:9b:
46:29:89:7c:8f:95:6b:89:9b:a2:e5:37:c2:e2:fa:
5c:cf:44:a9:b4:c6:fe:0f:66:be:a7:7c:85:55:72:
d1:f2:46:87:a1:ba:8d:63:2c:9a:b4:ef:8f:69:03:
15:f8:f7:9d:0e:59:f4:1b:3c:cb:7e:ca:76:7b:3a:
df:ea:24:9a:6d:73:9f:3a:2d:28:18:10:a3:f1:c2:
40:16:a5:66:5c:b4:96:19:7b:33:9f:ba:4f:2c:21:
e1:be:d7:07:a9:3c:fe:d1:0b:b6:c7:29:4f:aa:a6:
cc:f9:e6:f5:a6:c1:26:ce:b9:81:11:21:42:b3:a0:
c2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5C:1C:76:C6:11:A8:DE:97:17:A3:26:78:70:09:E8:2F:20:54:28
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:dc:53:1d:a3:22:26:a8:96:37:0c:a8:01:f5:d5:13:5f:c4:
4c:66:0a:5b:85:ef:35:4f:12:7d:c8:09:df:80:81:c2:a4:91:
5f:71:55:11:54:d3:78:b0:f7:1d:56:b4:3c:ef:17:e5:95:98:
8f:83:b8:f6:99:00:04:22:8b:db:ad:f6:43:60:6b:66:6f:fa:
86:30:5d:17:47:c6:f8:73:48:ec:14:5a:3a:15:25:1f:58:76:
a7:44:0d:1f:23:85:db:36:95:87:f2:00:bb:21:2e:f5:e6:ff:
9a:1d:1b:8c:95:bf:d6:78:32:57:40:c4:05:31:96:8e:3f:ee:
a7:a9:cb:69:d0:7f:e1:6c:0e:9a:9a:ad:27:4a:63:2a:60:8f:
e6:63:c7:3a:35:56:9e:11:77:fc:3d:de:e1:90:bd:b1:bd:63:
ea:67:20:c2:af:96:27:5d:50:aa:90:ec:47:ca:04:0f:a6:b8:
78:c8:a7:52:99:f2:eb:1e:8b:1e:a3:77:66:42:f3:30:57:82:
24:e8:3a:33:42:5a:86:4a:c8:cf:39:1c:3f:8b:50:99:d1:0d:
d3:3a:50:41:4f:66:87:67:15:b8:93:f7:ad:c8:3b:39:64:82:
0a:e9:67:62:66:f1:1c:da:86:87:88:e8:db:cb:bb:13:91:9e:
23:03:91:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:11:27 2026 by rpki-client