Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: tUbQpbFAfgmPwtlb4pvN6eWqyGgy8VJpFlvqSRI3TsM=
Subject key identifier: BC:4A:C3:84:0D:43:57:F3:BC:B0:F5:E9:97:E0:5D:78:4E:4D:3E:A0
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 019EBF238A0B59C321DBB9FD835B0403884E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 049F
Signing time: Sat 13 Jun 2026 04:00:37 +0000
Manifest this update: Sat 13 Jun 2026 04:00:37 +0000
Manifest next update: Sun 14 Jun 2026 04:00:37 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: mSx1LDouCNOcreOOZIyy1g22G8cfbYPlMyCDJyPmUnQ=)
2: Ys_4DR1wULGBNA_eDYgXZEWOD2Q.roa (hash: qjKc7M+pEY0qhXBmrNC0EBe740v+5vXbrYaxAIWy74Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:8a:0b:59:c3:21:db:b9:fd:83:5b:04:03:88:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Jun 13 04:00:37 2026 GMT
Not After : Jun 14 04:00:37 2026 GMT
Subject: CN=bc4ac3840d4357f3bcb0f5e997e05d784e4d3ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:92:e0:3b:d7:41:e5:c0:cb:87:a3:17:c8:
27:03:b5:42:aa:39:ad:e4:69:a6:76:d7:c4:4f:9e:
90:c6:e7:ca:72:47:a2:8e:5a:59:32:e4:18:cd:20:
36:6e:cb:54:33:b9:16:03:97:11:e5:22:54:20:3f:
f5:f1:fe:4c:c6:1a:ae:f1:86:57:b1:42:7f:db:f1:
c3:92:fc:77:9a:49:49:50:89:37:a2:8b:5a:14:2a:
37:31:64:81:e0:81:20:7d:cb:59:e2:49:76:e0:d3:
69:dd:86:27:cb:c1:80:40:03:25:e4:7c:31:c3:55:
f4:45:5a:d8:15:13:09:ab:b4:94:9a:0a:1d:82:57:
f2:1c:e7:bf:e1:9a:2a:07:2c:77:85:ce:7e:7d:61:
6d:20:9e:d0:5b:76:ae:74:c4:fd:87:f0:c2:e1:23:
8f:4f:ad:71:8b:05:0a:43:97:df:13:c3:b6:77:60:
bd:a2:52:3a:c1:f5:d0:f4:70:b3:0b:ff:f4:7a:1d:
b7:fe:cf:ed:13:c2:75:d2:41:ff:6a:f4:f5:48:11:
c9:be:58:32:17:d8:09:e8:af:fd:a9:70:dd:83:20:
af:23:55:04:9a:b2:2b:7d:02:36:9b:7b:8a:12:9d:
c3:6d:8b:e8:d2:a3:86:f3:c4:94:4f:a1:4e:62:86:
e0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4A:C3:84:0D:43:57:F3:BC:B0:F5:E9:97:E0:5D:78:4E:4D:3E:A0
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cc:82:13:59:fb:d7:fd:da:76:05:bf:ae:99:3b:dd:43:f1:
62:ba:c5:38:db:49:2d:c3:fd:84:6a:f0:3e:c6:50:ea:46:a7:
00:3e:38:83:99:06:8a:11:69:54:53:f6:25:28:a2:b1:62:e1:
3e:90:e4:16:18:1a:9f:df:40:fc:f6:d4:89:92:01:73:eb:09:
3d:15:09:89:70:eb:73:3b:e9:75:32:f1:13:db:8b:cf:0d:5c:
93:8d:a3:fe:81:18:93:1f:93:29:15:99:54:82:7d:cd:66:b3:
f2:dd:62:94:2e:eb:37:9b:66:18:5a:ac:be:c4:37:83:4d:0a:
80:40:3f:bc:ab:e6:8f:48:ca:8f:e6:ca:7b:03:87:d6:46:1c:
ee:1a:3f:ee:04:51:f9:e0:dc:86:5b:5e:27:27:b3:41:8d:71:
5e:2a:bc:27:f6:31:f5:a6:c7:a1:0b:7b:8c:7d:b2:a7:e3:78:
70:4e:62:68:73:3f:8b:b0:26:0e:bd:72:6c:cc:5d:a5:df:0c:
f6:e1:22:be:f5:d4:ef:f3:1b:cf:18:98:16:4c:be:ba:27:36:
34:95:01:ad:05:e8:4f:66:4d:60:de:8b:b9:39:6c:4e:cc:a7:
06:a1:0d:0f:00:ec:51:a3:46:d9:79:0b:9c:93:ef:cb:83:90:
ae:4b:56:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:48:25 2026 by rpki-client