Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
File: AyHqOVCODhemUf6SrCnqOIMtC_8.mft (raw, json)
Hash identifier: cujVFb+HvWK9FdpPu141XqqruAixBxN6VECwAFXFiMM=
Subject key identifier: 1D:FF:0B:91:72:BB:57:1D:F8:9F:D9:9B:A4:B9:1D:52:D5:10:D0:F2
Authority key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
Certificate issuer: /CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Certificate serial: 019F8FB5685D2C303DF60D422031E4B13BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
Manifest number: 1864
Signing time: Thu 23 Jul 2026 16:00:57 +0000
Manifest this update: Thu 23 Jul 2026 16:00:57 +0000
Manifest next update: Fri 24 Jul 2026 16:00:57 +0000
Files and hashes: 1: 8UGI1s0WR4wlzQNu5QcJqIgdD6o.roa (hash: 0o0yTMQX8eIMkMe3RKQudDE1yMjJHai1D53A4eswsuo=)
2: AyHqOVCODhemUf6SrCnqOIMtC_8.crl (hash: 8byFwBIxPezjrj4a+NY3a49uEmT5tbbPad95y+BaJ88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:68:5d:2c:30:3d:f6:0d:42:20:31:e4:b1:3b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Validity
Not Before: Jul 23 16:00:57 2026 GMT
Not After : Jul 24 16:00:57 2026 GMT
Subject: CN=1dff0b9172bb571df89fd99ba4b91d52d510d0f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:aa:59:8d:60:37:66:e1:d1:86:df:87:40:1f:
ab:0c:3a:88:d8:35:76:87:cd:3f:88:91:a8:4b:20:
a3:f8:c6:d4:ec:fe:ab:56:e8:da:86:04:ae:59:df:
34:b7:bf:37:e1:35:85:91:74:6a:ed:db:c6:0a:ec:
8c:a1:50:7e:e1:b0:d3:29:6c:4b:f4:42:f6:54:80:
5e:4a:e4:66:4b:a6:80:35:0d:42:5b:9d:05:a1:83:
d2:46:ed:5a:ff:f3:0e:68:f7:b0:47:ab:4d:09:56:
35:d7:a0:1d:86:d5:ef:0e:e2:ba:5d:5a:dc:02:ae:
8f:66:31:66:b1:62:44:1b:6d:cc:d9:43:d6:90:c1:
5b:1c:3b:d2:8c:f2:12:ec:54:cb:82:60:8d:bb:78:
67:00:cc:b9:ef:0f:ab:53:a2:60:f9:b9:1a:6f:3c:
14:db:39:47:36:89:bc:7d:46:5b:22:7d:df:2b:67:
16:04:42:b2:3c:9d:8f:9b:2b:4a:fd:bf:8c:5e:68:
6e:ed:d0:f8:59:b1:12:44:c4:6b:81:2f:53:96:09:
0b:4e:0b:c2:9c:52:70:74:31:74:7a:24:1a:b9:2d:
fe:ac:55:20:45:c1:eb:2d:bb:d6:c3:79:75:08:10:
5a:3f:4b:3c:b3:98:1b:42:bd:bf:c1:93:14:d0:2b:
80:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FF:0B:91:72:BB:57:1D:F8:9F:D9:9B:A4:B9:1D:52:D5:10:D0:F2
X509v3 Authority Key Identifier:
keyid:03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ac:ac:3d:c5:23:ac:ec:c8:81:70:b1:a3:96:59:65:a7:b1:
9c:8c:8a:76:0f:8d:0e:75:49:dc:03:37:96:16:7e:e5:77:a9:
7b:18:69:73:24:97:81:37:2a:0e:ed:19:bb:74:a8:a3:16:7d:
ef:d1:a0:ac:81:6a:be:14:ac:c9:dc:ac:2a:de:98:92:43:14:
77:61:6a:d3:ca:e0:59:0a:31:a9:c3:77:74:9e:f4:e8:93:ab:
04:24:bb:9d:54:99:9e:40:fb:e3:17:03:8b:cb:d6:f4:7e:17:
35:c5:1d:93:c4:a2:dd:dd:ee:22:42:06:8a:8b:c3:16:85:a5:
75:19:d4:9a:5c:b2:90:88:c2:6a:23:ef:34:73:52:bf:a3:d4:
4b:4f:c7:87:78:78:c3:55:96:f6:59:08:8f:73:41:8f:d0:60:
72:74:6e:2f:0b:81:c2:1b:68:90:8a:97:bf:89:f8:7c:e3:53:
0b:f9:c5:c3:b7:a5:00:9e:b4:65:b1:b1:d7:dd:9e:cd:04:83:
56:08:f0:88:38:da:1c:55:1b:80:66:36:ce:4c:9b:24:7c:37:
3b:5f:ae:b2:29:54:ba:cc:c9:e0:3b:8f:c4:8c:10:2e:b9:0d:
88:47:b3:bc:41:e3:8a:d0:fb:e3:8e:17:85:bf:4c:83:66:4f:
6f:79:c5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:13 2026 by rpki-client