Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: FDoSmsYCKshdBhyT9M/JaHUy1Bb38mkWJfNoQk6N/lw=
Subject key identifier: 92:80:EA:59:69:E6:57:2F:0C:BC:97:DF:95:4D:D7:3B:69:C0:D8:8B
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 01A0CE5AB1026C89FD48A1B5918A4429E0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 05B0
Signing time: Wed 23 Sep 2026 13:00:44 +0000
Manifest this update: Wed 23 Sep 2026 13:00:44 +0000
Manifest next update: Thu 24 Sep 2026 13:00:44 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: mJWyJeCE0BgqCDGKx1Q4JHnBBdujoKXihq9cDpK5P1Y=)
2: Ys_4DR1wULGBNA_eDYgXZEWOD2Q.roa (hash: qjKc7M+pEY0qhXBmrNC0EBe740v+5vXbrYaxAIWy74Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:b1:02:6c:89:fd:48:a1:b5:91:8a:44:29:e0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Sep 23 13:00:44 2026 GMT
Not After : Sep 24 13:00:44 2026 GMT
Subject: CN=9280ea5969e6572f0cbc97df954dd73b69c0d88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0b:f1:e1:9d:aa:38:df:7a:01:21:0c:a0:ff:
f0:fb:35:f5:15:a6:46:a4:d1:04:6b:2b:ee:35:94:
f3:7b:a0:b9:3c:cc:f2:c6:42:d6:f5:0f:e0:99:18:
08:a9:f5:42:bf:4f:0e:2d:1f:df:78:11:c8:9d:31:
f8:aa:1d:59:1e:ab:0d:f2:c8:50:7d:b0:98:f8:03:
d1:5c:a6:86:dd:ff:fa:84:87:aa:ca:35:5b:2b:df:
3c:ed:5e:b2:9a:c0:21:c0:7f:ac:29:2b:46:ef:85:
46:3d:68:46:da:c4:56:a1:20:63:23:fd:55:d3:95:
22:74:9d:5e:06:4f:90:09:15:8e:ea:72:8c:c0:d0:
15:cc:14:61:6a:bc:74:b7:9b:70:d8:43:42:0e:0e:
40:e5:41:8e:43:53:71:ae:b6:81:b8:39:db:c7:9d:
22:8d:93:d4:b7:0b:df:cc:ba:0d:58:32:82:c0:fc:
74:6f:a9:dc:63:53:dc:87:51:59:aa:e4:45:c7:08:
78:53:0a:11:79:f8:b6:e3:47:aa:93:12:84:65:78:
32:3b:e5:7d:61:21:d3:a8:b6:7c:0b:73:25:af:7d:
a3:29:85:4d:9a:34:45:18:fb:10:63:73:29:40:b8:
d3:d0:a4:71:5f:37:10:bf:4a:3a:bc:9d:47:b1:5a:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:80:EA:59:69:E6:57:2F:0C:BC:97:DF:95:4D:D7:3B:69:C0:D8:8B
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ea:fa:ae:2f:dd:5f:a9:f6:fc:f5:d1:6e:aa:2d:85:b0:a3:
8d:9a:21:da:9a:30:f2:f7:03:44:19:a2:af:b5:c3:d6:27:c8:
45:58:cd:81:59:43:b9:83:39:82:71:b5:a5:19:a6:1f:bf:17:
27:b0:fb:9b:dc:85:fb:cc:cd:a7:38:54:44:ae:eb:55:18:e6:
f2:0f:dd:2f:a6:13:94:66:31:fb:0a:1e:8c:64:00:c6:f5:88:
e7:6d:0b:4e:b1:39:9d:c9:3f:01:a1:a1:be:b3:14:1f:17:d9:
80:e5:b7:99:af:d4:fc:94:5f:8a:0e:42:b9:71:27:18:35:1d:
6b:8a:b5:4c:2a:14:bd:02:06:df:4c:57:7b:12:47:7a:7b:ac:
03:b8:d7:fa:05:b9:88:3f:8a:37:be:94:c3:61:8a:84:56:86:
96:d3:a3:68:e6:f1:51:79:4f:d2:3e:b6:1a:78:2b:e8:25:1f:
9a:1f:81:f3:22:d5:fa:26:e5:b8:8f:bb:b7:f6:50:03:21:92:
c8:5a:5c:63:c5:e5:11:80:87:b6:9f:54:cc:2a:25:a2:95:b9:
fe:b3:77:b2:07:04:22:59:0d:da:29:9c:d7:b2:23:15:26:48:
6e:1d:f9:53:51:f3:98:5f:a2:db:96:7d:b2:78:fb:b6:84:2d:
5d:14:5b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:24:52 2026 by rpki-client