Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
File: AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft (raw, json)
Hash identifier: +yena/yoHRmUrQ29SRyWpzowlqkLmRWPJXvNG4Kr17Q=
Subject key identifier: 8C:EF:AA:63:A2:91:72:F3:DB:D6:76:F3:DE:8D:4F:11:85:5B:9D:39
Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
Certificate issuer: /CN=0321bfea0305c48e949e6c249f4810b46905c886
Certificate serial: 019D9B50CB13E983687A8104279D802A0468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 12:00:56 +0000
Manifest this update: Fri 17 Apr 2026 12:00:56 +0000
Manifest next update: Sat 18 Apr 2026 12:00:56 +0000
Files and hashes: 1: AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl (hash: 7H00hKV0/VZfXvXZ57pJiwNdy/TDGCkt4S7Dv/f1ue4=)
2: WAWNpiY2vwMuD_j8ek6kZ6L9jDw.roa (hash: Aqg/w+ScPNsoJT+d0QU5LliDLOZxPSYw1XwmYdmE6pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:cb:13:e9:83:68:7a:81:04:27:9d:80:2a:04:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886
Validity
Not Before: Apr 17 12:00:56 2026 GMT
Not After : Apr 18 12:00:56 2026 GMT
Subject: CN=8cefaa63a29172f3dbd676f3de8d4f11855b9d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:a9:69:d4:f7:8b:10:26:2d:78:c9:a8:80:
0f:55:0d:cf:ac:0a:d4:6d:73:a6:10:39:f7:a8:a0:
52:66:4a:03:81:38:cc:2f:16:17:ee:d1:79:ba:b6:
3f:b5:3a:dc:28:8a:4b:e6:de:b6:b7:b5:67:62:1e:
1b:d0:b7:9a:d6:6e:7d:f0:ae:17:9d:d0:1f:4a:0e:
07:93:79:92:20:0b:a8:23:3b:b3:5b:89:2a:c9:45:
47:b6:9e:e2:d9:54:04:1f:03:db:fd:2a:09:63:b1:
14:51:a1:96:e4:b7:cd:e6:3d:21:83:66:2b:f4:fe:
96:ae:c4:59:b9:59:9d:d9:b9:c1:72:73:48:26:d2:
06:16:11:c4:73:cb:47:11:bc:80:cd:f6:4d:e1:e1:
45:28:41:d3:d2:b5:e4:dc:8d:17:c8:ec:54:f8:9d:
e3:bc:7e:ce:4d:de:fb:eb:f9:86:88:45:ae:f5:5d:
c2:72:51:5d:26:79:b3:b2:24:ec:08:f8:12:08:70:
4f:6d:c7:2f:b0:e8:bb:3a:46:6d:24:7a:0f:ff:33:
39:3b:02:fd:42:5c:da:7e:e2:3b:ef:56:57:d9:25:
63:f8:f8:e2:3c:8c:d3:e6:3f:69:f2:7e:eb:f1:b9:
90:12:4d:59:89:19:c8:00:51:36:ec:6a:ca:c8:33:
16:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EF:AA:63:A2:91:72:F3:DB:D6:76:F3:DE:8D:4F:11:85:5B:9D:39
X509v3 Authority Key Identifier:
keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:36:e3:a5:68:9c:bb:a9:de:bf:64:fb:97:0f:3c:19:d3:59:
5e:30:59:dd:cc:6f:a3:7c:94:bc:ab:f7:d7:76:af:f1:6a:32:
29:2c:7a:6c:a1:26:bc:82:fd:a6:8d:2c:cc:a2:88:71:5b:25:
83:fd:2f:bf:5f:5c:de:6a:28:01:aa:ce:ce:b8:1b:19:a3:14:
df:d6:da:74:ed:6f:73:01:42:50:03:ee:c7:e9:00:e3:6a:ca:
33:a2:f9:08:44:ed:9c:95:ce:1c:bb:43:23:3f:ed:55:66:80:
1a:36:dd:28:0f:d0:98:34:64:9d:e9:5d:c7:e2:5a:e2:4e:a6:
ca:f4:7d:63:98:42:fa:07:af:92:6a:5e:77:1a:97:e0:85:32:
ac:72:5a:b4:ce:c0:7c:7f:df:95:05:ca:f7:b9:83:9c:c1:20:
39:83:42:bf:18:42:42:e6:8d:74:15:43:0e:48:ea:d4:3d:f5:
9a:cc:7b:15:c1:7f:90:cf:2b:65:87:41:e2:ed:c3:25:9a:43:
6c:3b:a3:ee:1c:79:dc:46:9d:8f:b4:ef:2f:d8:65:94:00:72:
77:35:11:28:da:30:5b:2a:63:b2:88:7c:97:78:4d:a5:6f:54:
11:94:23:84:bf:43:e4:8a:f7:0d:cb:20:f7:fc:df:1c:dd:be:
47:e2:aa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:28:49 2026 by rpki-client