Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
File: AyHqOVCODhemUf6SrCnqOIMtC_8.mft (raw, json)
Hash identifier: 3i5Kw+TF39PFwEu0PO403udG6YJh+lQGQEDwh1Wcj9U=
Subject key identifier: 41:E6:42:77:C8:0F:54:13:28:41:59:00:91:E5:E6:94:03:34:BF:38
Authority key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
Certificate issuer: /CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Certificate serial: 01A0DBDF8B4CAB8DBF71A0C2447879D15EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
Manifest number: 1910
Signing time: Sat 26 Sep 2026 04:00:55 +0000
Manifest this update: Sat 26 Sep 2026 04:00:55 +0000
Manifest next update: Sun 27 Sep 2026 04:00:55 +0000
Files and hashes: 1: 8UGI1s0WR4wlzQNu5QcJqIgdD6o.roa (hash: 0o0yTMQX8eIMkMe3RKQudDE1yMjJHai1D53A4eswsuo=)
2: AyHqOVCODhemUf6SrCnqOIMtC_8.crl (hash: Gqg+AMq7GrTI+qpX9OBnj7FT3Dze+AwD11/jJic3B6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:8b:4c:ab:8d:bf:71:a0:c2:44:78:79:d1:5e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Validity
Not Before: Sep 26 04:00:55 2026 GMT
Not After : Sep 27 04:00:55 2026 GMT
Subject: CN=41e64277c80f54132841590091e5e6940334bf38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:34:b0:23:d0:9a:34:87:df:fe:40:25:66:
42:60:26:12:99:f4:77:d1:2e:63:f4:b1:ce:ae:40:
45:71:fe:48:10:57:30:85:ba:ab:15:a0:7b:c5:de:
91:75:cb:ee:db:1e:17:e8:51:54:34:f1:ee:c9:df:
0e:70:04:b9:9d:d1:07:92:a4:4b:ca:d0:d6:b2:4b:
48:97:03:a4:c8:16:68:48:9b:0e:fe:fa:59:4c:4f:
3d:05:48:5d:c9:72:9c:17:01:13:a9:1f:96:7a:a1:
93:56:0a:de:a2:b6:7b:60:f8:f0:85:5e:43:2b:ef:
9a:1b:4f:4f:8a:c8:4a:9d:38:93:19:f7:67:27:e6:
48:67:b2:72:75:1c:1a:5a:f9:3b:9a:98:0f:dc:6d:
bf:a5:0d:24:3d:49:3f:de:23:66:f7:65:73:d2:61:
3c:9c:db:d0:66:30:a4:42:76:b8:35:d2:a0:4a:18:
e9:b7:b3:8b:10:b6:41:76:02:84:49:e6:04:44:8c:
3f:0b:5c:66:a3:0b:95:9e:6d:ca:c4:fc:f5:d0:df:
46:7e:86:90:a9:34:d5:d2:cd:6e:ac:7a:4e:55:98:
80:26:09:44:6d:70:3b:93:cd:66:28:73:e5:e5:76:
70:03:7e:15:ab:ce:48:97:fa:12:a3:9e:e6:c9:a4:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E6:42:77:C8:0F:54:13:28:41:59:00:91:E5:E6:94:03:34:BF:38
X509v3 Authority Key Identifier:
keyid:03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8f:04:a2:82:1d:83:49:65:99:5b:15:53:95:b3:1a:9b:ef:
3c:2d:dd:c4:75:66:2d:e3:49:bb:93:ab:1f:46:4d:25:df:17:
58:28:10:89:cc:fd:a4:71:cf:d3:9b:a1:a7:df:b4:14:1a:4b:
23:6c:5d:0e:5a:82:d9:b2:d7:22:2a:10:93:fd:3c:a2:17:fc:
64:c0:29:bd:f4:05:0d:ff:ef:64:14:60:1c:ca:0a:a3:50:1c:
d7:76:f2:a7:1c:ac:04:63:4f:cc:fd:d8:35:cc:fc:48:bd:39:
09:3a:cf:8b:49:1b:26:02:d9:ae:6a:76:bc:d4:2d:25:72:ca:
5a:e0:90:e5:70:9f:9b:d0:27:f6:26:2a:12:28:ba:6c:de:9f:
17:45:83:0a:81:3c:5b:66:84:86:67:89:e6:be:92:5f:f9:ec:
aa:b2:e4:ce:d9:d2:f8:03:15:78:56:45:23:05:a8:47:6c:41:
7f:06:df:67:21:10:66:01:c7:4d:20:21:be:db:bd:9f:a2:c2:
de:dd:ab:e2:d1:6f:03:09:8f:fd:b6:cf:c3:3e:e2:22:cc:a3:
af:db:3d:56:d8:d6:e5:19:fe:f0:ba:87:1d:ed:fb:cf:08:8e:
85:c4:0a:ef:2e:3c:40:26:8f:7c:33:de:ca:3b:ee:3d:c3:a6:
6c:94:99:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:11:27 2026 by rpki-client