Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
File: AYJcep4nAba6NnDQjSoQqeoV0-M.mft (raw, json)
Hash identifier: gTql7s7kAWZFFx6czYheF+W6oWrCw3CvqHUTLySazg0=
Subject key identifier: F6:E4:03:8E:98:32:24:C9:47:C7:48:DB:FB:5E:42:26:EA:9C:E5:E6
Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Certificate issuer: /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Certificate serial: 019CAB347D70AC46FB764380E3B2CF6F026F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
Manifest number: 098D
Signing time: Sun 01 Mar 2026 21:01:09 +0000
Manifest this update: Sun 01 Mar 2026 21:01:09 +0000
Manifest next update: Mon 02 Mar 2026 21:01:09 +0000
Files and hashes: 1: AYJcep4nAba6NnDQjSoQqeoV0-M.crl (hash: gHM+bMTjKEl04p2lYy8VATzLoA0+3LbbQqfis/w2KCQ=)
2: MZejqw04W8XvDSTgyhF_vZtjtHk.roa (hash: y+X1OSPqc8Aw+l04NXTCLvm9a9sOckjKF5RYXVztnSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:7d:70:ac:46:fb:76:43:80:e3:b2:cf:6f:02:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Validity
Not Before: Mar 1 21:01:09 2026 GMT
Not After : Mar 2 21:01:09 2026 GMT
Subject: CN=f6e4038e983224c947c748dbfb5e4226ea9ce5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:78:0d:af:a5:23:92:57:a3:63:51:f3:01:
71:e6:46:00:a0:b0:69:0a:6b:74:74:0c:76:20:87:
fd:bb:72:30:01:05:63:1a:87:09:6d:49:20:7c:b1:
60:d6:ea:13:7d:67:43:46:15:ec:0c:b2:a8:e1:25:
64:28:e2:c9:93:ca:f2:83:a8:6a:12:a1:49:2d:ff:
9c:2d:fd:bd:17:f0:45:bf:c8:1b:18:40:39:fc:0d:
32:2d:9f:ba:9f:62:59:83:21:f1:c6:88:32:f5:5b:
53:a9:30:31:92:b4:43:04:5a:66:78:b8:fc:6b:73:
cf:b8:ca:52:b8:24:46:10:43:0a:ca:54:d4:c6:6b:
17:28:ab:bd:5b:e1:e3:8c:fb:71:4b:c0:cf:38:2b:
26:f0:fc:04:94:9c:61:38:38:58:00:93:62:03:cd:
f2:75:d7:e3:89:e1:3d:e0:ea:4a:fd:93:fb:9c:28:
bc:93:b6:36:23:07:3c:f3:af:da:14:e5:15:be:4c:
ac:44:74:fd:d5:9d:ec:02:42:10:ff:e7:bc:db:89:
bd:53:39:f4:b6:e1:07:ab:aa:b8:88:2e:2b:48:15:
ac:b2:c0:1a:5a:93:13:30:75:03:67:8f:79:33:6e:
a4:ee:74:c4:05:aa:ea:b2:ba:54:4e:e0:67:84:e7:
e9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E4:03:8E:98:32:24:C9:47:C7:48:DB:FB:5E:42:26:EA:9C:E5:E6
X509v3 Authority Key Identifier:
keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:38:1d:14:48:6b:e8:d2:ee:17:7c:f6:20:3a:dd:88:80:be:
55:9c:eb:be:bc:68:b0:de:4f:41:68:88:3e:b0:2e:43:d7:04:
31:be:e6:dd:06:d1:78:3f:9e:43:06:f7:a4:7d:f1:ad:0e:a2:
d7:1d:5e:da:5c:7f:1d:25:51:d5:88:6d:55:0f:46:f3:92:d9:
92:20:33:e3:eb:43:89:f5:ea:ae:80:1b:ce:2d:37:36:58:a7:
6e:6e:0c:87:2c:d5:58:52:ce:28:ef:20:29:ee:d5:cd:06:f0:
bc:c3:2a:ad:0d:3d:74:ad:cc:68:c5:61:16:28:bc:aa:e4:ab:
b6:0f:f8:05:c9:33:19:f2:c4:84:a5:be:4b:3d:d6:1c:c3:eb:
71:4a:5c:62:3e:03:c9:d7:c3:72:ad:27:2b:56:d4:21:22:92:
aa:71:38:3f:63:5c:df:07:8e:db:d4:c8:1c:db:50:8c:f5:28:
44:eb:58:2e:fc:68:31:f0:dc:1d:a4:75:fa:f8:df:a4:95:09:
30:89:d4:22:12:0a:2e:81:29:af:ef:40:fa:d3:aa:61:76:2d:
ef:c1:5a:b8:69:ce:af:7d:8a:a8:0c:e1:b5:a7:70:51:2d:8f:
d1:3e:0a:f5:29:e3:0c:93:12:58:84:ac:91:5b:91:05:68:c3:
68:46:c4:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNH1wrEb7dkOA47LPbwJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxODI1YzdhOWUyNzAxYjZiYTM2NzBkMDhkMmExMGE5ZWEx
NWQzZTMwHhcNMjYwMzAxMjEwMTA5WhcNMjYwMzAyMjEwMTA5WjAzMTEwLwYDVQQD
EyhmNmU0MDM4ZTk4MzIyNGM5NDdjNzQ4ZGJmYjVlNDIyNmVhOWNlNWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo94Da+lI5JXo2NR8wFx5kYAoLBp
Cmt0dAx2IIf9u3IwAQVjGocJbUkgfLFg1uoTfWdDRhXsDLKo4SVkKOLJk8ryg6hq
EqFJLf+cLf29F/BFv8gbGEA5/A0yLZ+6n2JZgyHxxogy9VtTqTAxkrRDBFpmeLj8
a3PPuMpSuCRGEEMKylTUxmsXKKu9W+HjjPtxS8DPOCsm8PwElJxhODhYAJNiA83y
ddfjieE94OpK/ZP7nCi8k7Y2Iwc886/aFOUVvkysRHT91Z3sAkIQ/+e824m9Uzn0
tuEHq6q4iC4rSBWsssAaWpMTMHUDZ495M26k7nTEBarqsrpUTuBnhOfpuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbkA46YMiTJR8dI2/teQibqnOXmMB8GA1UdIwQY
MBaAFAGCXHqeJwG2ujZw0I0qEKnqFdPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlKY2VwNG5BYmE2Tm5EUWpTb1FxZW9WMC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWFjMDMtZGM2YS00MGMwLTgyY2It
OGYxMGQ1Yjk2ZmQ0LzEvQVlKY2VwNG5BYmE2Tm5EUWpTb1FxZW9WMC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83OWFjMDMtZGM2YS00MGMwLTgyY2ItOGYxMGQ1Yjk2ZmQ0
LzEvQVlKY2VwNG5BYmE2Tm5EUWpTb1FxZW9WMC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzgdFEhr
6NLuF3z2IDrdiIC+VZzrvrxosN5PQWiIPrAuQ9cEMb7m3QbReD+eQwb3pH3xrQ6i
1x1e2lx/HSVR1YhtVQ9G85LZkiAz4+tDifXqroAbzi03Nlinbm4MhyzVWFLOKO8g
Ke7VzQbwvMMqrQ09dK3MaMVhFii8quSrtg/4BckzGfLEhKW+Sz3WHMPrcUpcYj4D
ydfDcq0nK1bUISKSqnE4P2Nc3weO29TIHNtQjPUoROtYLvxoMfDcHaR1+vjfpJUJ
MInUIhIKLoEpr+9A+tOqYXYt78FauGnOr32KqAzhtadwUS2P0T4K9SnjDJMSWISs
kVuRBWjDaEbEeA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:19 2026 by rpki-client