Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
File: AYJcep4nAba6NnDQjSoQqeoV0-M.mft (raw, json)
Hash identifier: Mw85wqEe409ppvGoDBKyPZSfR6LnrY+xpl1euxKrLzU=
Subject key identifier: 07:D9:61:CC:42:A1:E6:50:DB:E5:79:FC:06:E0:A6:89:39:78:FC:BE
Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Certificate issuer: /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Certificate serial: 019D98BD995A4C6B0A2487B4BBC30E036A7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
Manifest number: 0A08
Signing time: Fri 17 Apr 2026 00:00:55 +0000
Manifest this update: Fri 17 Apr 2026 00:00:55 +0000
Manifest next update: Sat 18 Apr 2026 00:00:55 +0000
Files and hashes: 1: AYJcep4nAba6NnDQjSoQqeoV0-M.crl (hash: Xp1DrwcOS9+AM3UfOIqwntnz9ZyTn/Lo8xIYqmCDjNo=)
2: MZejqw04W8XvDSTgyhF_vZtjtHk.roa (hash: y+X1OSPqc8Aw+l04NXTCLvm9a9sOckjKF5RYXVztnSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:99:5a:4c:6b:0a:24:87:b4:bb:c3:0e:03:6a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Validity
Not Before: Apr 17 00:00:55 2026 GMT
Not After : Apr 18 00:00:55 2026 GMT
Subject: CN=07d961cc42a1e650dbe579fc06e0a6893978fcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:d2:aa:4e:36:d7:98:93:6e:f2:d0:bf:91:
78:cb:12:a5:2b:27:a2:e0:d6:80:b0:80:b1:41:7a:
04:40:4a:40:8f:c3:20:38:c5:df:60:09:a3:2a:1d:
98:60:85:03:3d:f6:3f:96:13:d0:a7:57:e3:52:f2:
c3:f4:37:b9:54:0e:bc:7b:0f:4d:ba:93:29:42:be:
a3:09:ef:5c:de:2b:c4:7e:64:20:2b:a5:08:a5:59:
a6:36:1f:22:4b:f1:83:cb:15:2b:cb:b6:9b:10:6f:
9e:52:88:63:74:a8:81:f1:56:02:7f:d1:ea:0a:71:
be:8b:49:08:11:2c:ad:0d:76:95:ba:1f:2f:40:51:
a2:68:03:5e:2c:68:5a:e7:c3:d5:33:23:16:78:43:
09:ce:33:07:35:66:2c:bc:b8:9d:89:a8:5f:c1:67:
7b:8a:95:fb:55:66:d7:05:a1:f0:7a:b2:b7:3e:bb:
8f:21:bb:60:aa:96:9c:f8:40:8a:86:5f:e0:f5:af:
a9:73:f6:66:03:bb:33:63:12:cf:7b:c3:b7:66:53:
50:4d:55:74:9e:46:38:ce:39:1c:b7:be:44:df:73:
b3:da:ac:e7:d2:dc:f1:2c:c4:d3:f7:9a:1f:7f:41:
2f:49:0d:e8:a6:02:31:c1:f5:de:db:01:82:2e:b5:
fb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D9:61:CC:42:A1:E6:50:DB:E5:79:FC:06:E0:A6:89:39:78:FC:BE
X509v3 Authority Key Identifier:
keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:33:b2:99:e0:09:07:9d:96:6e:57:b3:0b:c3:9e:c0:19:21:
f6:8d:f7:95:17:5a:c5:db:c9:3c:cb:bc:9c:30:e1:6b:ae:fb:
f3:f6:d1:f3:2a:77:9d:d2:5d:0c:02:e7:9a:2a:72:74:9a:76:
d6:8b:47:0f:c6:6d:f5:3a:d1:a7:b7:54:d9:87:be:2f:02:d0:
68:34:c0:8d:4a:60:84:e6:0e:7d:b6:79:1e:5c:59:ef:e4:11:
2a:94:fa:62:4c:67:08:53:67:b5:99:42:9f:5e:00:86:b6:90:
5e:82:c5:ec:6b:e3:7e:c7:99:69:d0:0b:9b:bf:cc:60:43:79:
a4:6b:07:42:ac:b0:e9:b1:08:8f:c0:bd:e5:14:85:2c:85:47:
ff:5f:1c:40:a2:0e:44:18:7f:b1:54:51:d7:58:5b:c7:13:04:
65:86:89:f8:17:c9:20:3d:7d:63:07:b8:39:66:48:8c:08:6f:
4b:af:12:10:42:fb:16:41:ca:2c:4b:4e:60:48:b3:8b:26:ce:
e5:e9:74:5c:62:8e:e8:a0:c0:33:d5:ec:6d:ac:5b:3c:1d:be:
3a:f9:5d:fc:eb:d7:82:c8:50:7a:d8:93:18:f9:09:8c:ab:da:
a1:8f:c4:e7:db:b0:8a:fb:d0:dd:3c:18:c0:f5:f8:95:66:65:
00:3c:d9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:26 2026 by rpki-client