Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: EcTz3B+tSjGNoUXlJ7Xh1Uhy9plPXev9VDUaIqTyItw=
Subject key identifier: B4:8A:E3:D7:E8:05:7C:DB:52:8D:94:83:DB:7D:FD:98:5A:0C:3C:5E
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 019CADFE8DD915C5BC73F5BEF6B42280A8F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 038D
Signing time: Mon 02 Mar 2026 10:01:06 +0000
Manifest this update: Mon 02 Mar 2026 10:01:06 +0000
Manifest next update: Tue 03 Mar 2026 10:01:06 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: B+XRqY6L0vxl09YezWcwGhaMc/Sj/BmFOo5I3AmlMIk=)
2: Ys_4DR1wULGBNA_eDYgXZEWOD2Q.roa (hash: qjKc7M+pEY0qhXBmrNC0EBe740v+5vXbrYaxAIWy74Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:8d:d9:15:c5:bc:73:f5:be:f6:b4:22:80:a8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Mar 2 10:01:06 2026 GMT
Not After : Mar 3 10:01:06 2026 GMT
Subject: CN=b48ae3d7e8057cdb528d9483db7dfd985a0c3c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4a:cd:90:cd:39:4b:0b:20:22:90:1e:64:a8:
75:20:6c:ce:99:24:a6:33:92:9e:f5:f3:3a:2d:9d:
ff:71:d8:bc:b8:32:d6:da:a0:31:32:6c:bb:0a:9e:
03:d7:84:02:11:12:62:d5:bb:d9:0a:a1:88:11:c8:
83:42:1d:f5:99:68:bc:d5:c7:82:87:d2:0b:80:b4:
3a:75:0f:a7:f2:03:fa:2f:e8:e9:40:19:31:57:15:
59:ab:80:e8:a8:cc:a9:ce:6c:1a:25:bf:88:82:91:
06:f9:de:6b:0f:a9:64:d1:e4:51:b1:3c:8e:50:c0:
2a:e2:36:6b:e9:0c:af:4f:4b:a2:54:6e:dc:a6:da:
bd:ec:7f:e5:7b:78:f5:52:d3:04:c4:81:20:2a:53:
7b:76:9d:60:0c:e0:d3:13:7f:30:1f:63:7e:75:8e:
d9:ed:fa:bb:de:4b:77:9a:53:3d:0d:2a:d3:a0:d6:
38:49:ce:f2:17:ca:51:05:34:02:9c:36:73:e3:9c:
26:5c:41:87:6f:72:d2:ac:77:37:f7:36:6c:17:b7:
93:97:06:a5:9f:38:36:51:a2:35:84:55:aa:93:47:
db:61:19:2a:4d:92:a0:6c:17:48:ff:17:23:d8:4d:
7a:fa:2e:bc:d4:55:8b:9e:65:65:7f:f4:95:ae:87:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8A:E3:D7:E8:05:7C:DB:52:8D:94:83:DB:7D:FD:98:5A:0C:3C:5E
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:cb:58:b2:a3:86:f4:02:81:92:0d:48:fc:c2:8f:37:bb:98:
e8:23:d5:5f:44:2d:63:83:63:9a:ae:7a:1d:3b:46:16:5c:31:
3e:07:3d:64:90:03:45:71:e7:b9:26:c2:8a:99:63:4d:fd:1d:
6d:5d:1a:cd:8d:fb:0c:c6:50:3a:93:51:41:de:42:c6:e7:30:
1a:de:4c:bc:bd:09:ac:72:06:8b:02:d8:b2:80:3f:36:98:14:
6e:3c:0a:60:d0:bb:01:b7:32:1b:30:1b:45:3d:b1:d3:2b:f8:
73:62:8b:03:e2:b9:65:fa:3f:9d:79:5f:44:18:a1:e5:e7:75:
5e:36:ad:81:1f:f5:b5:f3:82:80:be:a7:85:2a:3b:a1:f5:50:
79:5e:91:a9:63:0d:5f:41:12:4e:41:53:19:e0:d4:3b:fa:de:
d3:04:ed:e2:01:90:5c:39:2d:59:72:10:32:59:13:c1:e3:12:
22:26:f6:02:f4:d8:32:6c:8a:30:14:0c:71:b1:3f:e7:f0:cd:
5c:01:f0:5a:ca:87:d1:90:ab:c6:99:13:e8:8b:e8:14:c8:54:
d3:d7:d6:63:d9:cf:d2:7e:70:24:2d:9b:a6:45:42:58:bd:61:
6e:ba:7e:a5:63:e0:e3:5c:bd:ce:80:0f:a1:31:5a:2e:7d:9d:
f7:64:48:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/o3ZFcW8c/W+9rQigKj2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxODE4MjJhOWNhMmEwMDhmNWNkMTFiOWY5ZGJhMTZlZTJj
NjE0NTkwHhcNMjYwMzAyMTAwMTA2WhcNMjYwMzAzMTAwMTA2WjAzMTEwLwYDVQQD
EyhiNDhhZTNkN2U4MDU3Y2RiNTI4ZDk0ODNkYjdkZmQ5ODVhMGMzYzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUrNkM05SwsgIpAeZKh1IGzOmSSm
M5Ke9fM6LZ3/cdi8uDLW2qAxMmy7Cp4D14QCERJi1bvZCqGIEciDQh31mWi81ceC
h9ILgLQ6dQ+n8gP6L+jpQBkxVxVZq4DoqMypzmwaJb+IgpEG+d5rD6lk0eRRsTyO
UMAq4jZr6QyvT0uiVG7cptq97H/le3j1UtMExIEgKlN7dp1gDODTE38wH2N+dY7Z
7fq73kt3mlM9DSrToNY4Sc7yF8pRBTQCnDZz45wmXEGHb3LSrHc39zZsF7eTlwal
nzg2UaI1hFWqk0fbYRkqTZKgbBdI/xcj2E16+i681FWLnmVlf/SVrofnAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSK49foBXzbUo2Ug9t9/ZhaDDxeMB8GA1UdIwQY
MBaAFAGBgiqcoqAI9c0RufnboW7ixhRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQt
ODBkNDk0NTkxMWRkLzEvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zZTk1MjUtYTJjZS00ZTkwLTkwMGQtODBkNDk0NTkxMWRk
LzEvQVlHQ0tweWlvQWoxelJHNS1kdWhidUxHRkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAictYsqOG
9AKBkg1I/MKPN7uY6CPVX0QtY4Njmq56HTtGFlwxPgc9ZJADRXHnuSbCipljTf0d
bV0azY37DMZQOpNRQd5CxucwGt5MvL0JrHIGiwLYsoA/NpgUbjwKYNC7AbcyGzAb
RT2x0yv4c2KLA+K5Zfo/nXlfRBih5ed1XjatgR/1tfOCgL6nhSo7ofVQeV6RqWMN
X0ESTkFTGeDUO/re0wTt4gGQXDktWXIQMlkTweMSIib2AvTYMmyKMBQMcbE/5/DN
XAHwWsqH0ZCrxpkT6IvoFMhU09fWY9nP0n5wJC2bpkVCWL1hbrp+pWPg41y9zoAP
oTFaLn2d92RIVA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:40 2026 by rpki-client