Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
File: AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft (raw, json)
Hash identifier: N32v5qnbx9AjyD+HgXCwmVrZYPS62Vck2CBztZxCXJE=
Subject key identifier: B8:34:32:A3:87:B9:56:BE:3C:C6:04:D5:EA:C2:FC:CC:EA:47:5A:91
Authority key identifier: 03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
Certificate issuer: /CN=0321bfea0305c48e949e6c249f4810b46905c886
Certificate serial: 019CABD956257E2C1B1C96C17BDA0F216172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 00:01:13 +0000
Manifest this update: Mon 02 Mar 2026 00:01:13 +0000
Manifest next update: Tue 03 Mar 2026 00:01:13 +0000
Files and hashes: 1: AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl (hash: CstQVJ0/nVpqklFNltWTc7X22Re6Xjo6Mo7yvSZbjwc=)
2: WAWNpiY2vwMuD_j8ek6kZ6L9jDw.roa (hash: Aqg/w+ScPNsoJT+d0QU5LliDLOZxPSYw1XwmYdmE6pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:56:25:7e:2c:1b:1c:96:c1:7b:da:0f:21:61:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321bfea0305c48e949e6c249f4810b46905c886
Validity
Not Before: Mar 2 00:01:13 2026 GMT
Not After : Mar 3 00:01:13 2026 GMT
Subject: CN=b83432a387b956be3cc604d5eac2fcccea475a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e4:99:49:65:b7:95:ab:4e:45:dc:fe:d9:02:
3b:53:d9:8b:3c:df:80:27:ee:3b:ca:a5:4e:6e:51:
ec:56:ed:5f:5c:d1:de:17:cc:59:c9:c9:75:f2:85:
6a:4d:68:9d:93:b0:ef:6f:2c:e5:e9:78:17:b4:10:
3c:5f:ef:b2:93:12:03:95:f6:95:44:63:85:b0:41:
1c:06:7d:64:d8:52:f5:c8:8d:3f:9f:bb:dc:6c:05:
d2:96:bd:9a:5e:5b:70:51:03:8d:cf:06:8f:fe:46:
0b:ca:6a:d3:9d:28:82:57:fd:2b:da:25:89:d2:ac:
38:40:d9:55:65:e7:6f:d1:b2:33:a1:eb:ce:68:4a:
80:be:2b:e3:ac:8e:77:cf:04:85:cd:71:eb:20:68:
1d:40:42:58:7c:ad:57:10:a5:ba:46:a7:45:1f:d4:
18:91:28:45:12:ba:ce:b7:5c:23:88:a3:15:e7:ef:
7f:fd:95:e8:06:f9:f8:c5:30:bd:2d:a1:de:41:f7:
17:ad:f5:75:b0:2a:fd:9e:c9:fd:13:f0:02:ae:f4:
96:d2:83:f0:d0:98:0b:55:a4:b0:15:bf:d2:ba:9c:
f8:c6:25:c9:3b:af:64:0e:7e:07:c7:9a:e8:fc:ef:
e1:75:82:a1:53:27:76:73:1b:a6:a6:bf:f7:f9:f5:
d7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:34:32:A3:87:B9:56:BE:3C:C6:04:D5:EA:C2:FC:CC:EA:47:5A:91
X509v3 Authority Key Identifier:
keyid:03:21:BF:EA:03:05:C4:8E:94:9E:6C:24:9F:48:10:B4:69:05:C8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyG_6gMFxI6Unmwkn0gQtGkFyIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/11da2b-77bd-41c7-bbf3-560c9e7c0747/1/AyG_6gMFxI6Unmwkn0gQtGkFyIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7a:42:2e:2e:48:df:1a:71:22:3b:20:97:97:c0:bf:03:35:
51:fa:75:fe:10:d0:1e:d6:7f:68:59:d5:e8:bd:13:91:09:79:
09:aa:da:1e:2e:97:1e:61:c9:6c:e6:75:eb:cc:46:e4:70:d0:
cf:87:48:ca:7c:be:5b:1c:dd:4d:e5:3c:10:6e:96:3b:c4:a8:
49:b5:93:03:ef:85:60:3f:71:3a:a3:04:b9:7c:ad:fe:7d:98:
07:4e:82:25:07:f0:51:5a:7c:8d:d8:c1:f9:55:a5:a6:b3:2c:
5a:cf:9c:f2:b8:7b:39:59:fa:34:03:6e:1d:08:ab:a4:ce:53:
18:de:65:0c:b1:5f:3c:dd:ca:b4:f7:9c:0c:ba:1e:b6:f2:ac:
9a:c1:df:89:62:17:39:7f:5c:e4:ae:b6:1c:c4:10:ce:78:8a:
41:a2:f1:22:2f:8e:a0:9a:cb:97:14:9a:b1:c7:54:c8:0d:86:
7c:7e:1a:02:e8:65:d7:f7:92:81:07:cc:76:9f:4f:be:78:7c:
9d:91:64:16:18:05:69:23:11:d5:5a:78:55:1f:e6:d0:72:75:
7e:08:f3:43:f2:6a:30:ad:c9:c4:06:d0:83:f1:65:d2:77:66:
9d:dd:a1:ad:8a:6e:f5:36:e6:af:0f:23:e4:58:67:23:76:86:
7f:d1:75:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:22 2026 by rpki-client