Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
File: Ay1SsyOaHOPN00MxNIzngN3xZMA.mft (raw, json)
Hash identifier: hpTNamAe9xxU59wl+x6iJuOv8SvZKLHM6nRDxz8E+0w=
Subject key identifier: EC:DF:3C:9A:95:0A:FE:67:49:F2:76:00:8B:96:E7:79:3E:34:60:9D
Authority key identifier: 03:2D:52:B3:23:9A:1C:E3:CD:D3:43:31:34:8C:E7:80:DD:F1:64:C0
Certificate issuer: /CN=032d52b3239a1ce3cdd34331348ce780ddf164c0
Certificate serial: 019FA82B75F890C75F64D4AF0CF05FA07477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
Manifest number: 0A83
Signing time: Tue 28 Jul 2026 10:00:48 +0000
Manifest this update: Tue 28 Jul 2026 10:00:48 +0000
Manifest next update: Wed 29 Jul 2026 10:00:48 +0000
Files and hashes: 1: Ay1SsyOaHOPN00MxNIzngN3xZMA.crl (hash: 1GvPlzCYpp7NzDWZhsNv+sf2CsXG0nWu8O36FAVjkNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:75:f8:90:c7:5f:64:d4:af:0c:f0:5f:a0:74:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032d52b3239a1ce3cdd34331348ce780ddf164c0
Validity
Not Before: Jul 28 10:00:48 2026 GMT
Not After : Jul 29 10:00:48 2026 GMT
Subject: CN=ecdf3c9a950afe6749f276008b96e7793e34609d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e7:bb:8b:0c:01:35:30:70:7a:3d:22:1a:0b:
db:4b:a6:63:c8:ef:54:93:f3:19:77:dc:92:11:50:
62:8d:e9:16:5d:c1:42:e4:e8:b8:d3:2f:76:27:af:
71:08:10:e7:57:e9:fe:46:7f:56:c8:ef:61:c7:71:
fe:de:eb:15:04:15:18:c5:49:d6:d8:99:56:12:75:
1e:f1:d4:77:4c:a1:c9:94:18:f3:57:c2:23:59:c6:
36:43:67:2a:fb:fd:6e:6e:25:70:f6:55:4a:7d:c4:
df:90:e0:f2:64:dd:1d:0c:53:15:89:7e:05:ef:4d:
3a:65:e7:eb:b7:13:e1:f5:2a:7f:c7:61:35:b8:a7:
28:d8:5c:e9:41:21:a8:31:c5:2c:d9:c6:7e:f2:5e:
50:7e:2b:4c:94:e1:86:35:da:a7:d6:9e:45:76:4a:
1e:53:99:34:8d:ae:77:3a:f3:f1:21:9f:d9:83:aa:
40:02:99:61:d5:b0:10:5a:dd:c7:c0:18:71:2e:11:
ac:20:76:df:9f:c1:4c:99:a6:81:6c:83:38:3a:17:
84:00:e5:05:bf:26:ae:95:28:28:c1:37:1e:34:cf:
bc:0f:2f:87:97:e8:db:b7:de:ce:92:40:db:fc:6b:
66:57:a4:fb:2b:69:dd:14:2c:d6:46:38:dd:cd:59:
5b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DF:3C:9A:95:0A:FE:67:49:F2:76:00:8B:96:E7:79:3E:34:60:9D
X509v3 Authority Key Identifier:
keyid:03:2D:52:B3:23:9A:1C:E3:CD:D3:43:31:34:8C:E7:80:DD:F1:64:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7c:58:7f:af:c4:a6:4e:c7:bf:9b:db:9c:f4:e3:22:72:57:
ce:86:ce:a3:b5:36:99:95:a4:dd:7f:48:66:e5:d6:44:94:80:
7a:f4:4a:0c:ee:28:79:dd:25:2a:43:d9:1c:26:d2:91:e6:8d:
f5:d9:e7:63:f7:91:94:07:89:27:95:84:c5:0a:95:43:37:a9:
1b:a7:13:c8:bf:01:a3:15:66:3b:9e:e6:b8:c6:35:bc:ea:c1:
09:05:f0:9a:d0:e8:f0:ba:de:d0:bf:bb:b8:d7:17:0c:37:ff:
2e:25:53:23:d0:2c:09:e3:c3:f6:ad:f9:00:6a:49:39:58:bb:
42:e1:96:3c:e8:29:17:8a:c7:3b:a0:f4:96:08:d0:39:58:35:
4a:06:03:b5:48:f6:e2:49:a4:87:3c:ea:8f:06:4f:b2:d0:03:
d4:3b:80:09:d0:7a:d6:89:cd:ce:4d:70:10:b3:de:ff:35:5a:
9d:50:c0:1a:f2:71:a9:3d:75:88:d5:a3:85:34:0c:56:8c:09:
49:ad:3d:05:7b:8e:94:bf:56:35:10:9a:4a:f7:cd:36:a7:42:
e8:46:a8:98:eb:ce:d2:d0:a0:9d:59:7a:1b:16:2b:70:da:54:
f2:b1:97:27:3b:3e:7a:3f:e6:5c:1f:9f:4f:6a:92:ca:0a:42:
eb:3c:2d:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oK3X4kMdfZNSvDPBfoHR3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMmQ1MmIzMjM5YTFjZTNjZGQzNDMzMTM0OGNlNzgwZGRm
MTY0YzAwHhcNMjYwNzI4MTAwMDQ4WhcNMjYwNzI5MTAwMDQ4WjAzMTEwLwYDVQQD
EyhlY2RmM2M5YTk1MGFmZTY3NDlmMjc2MDA4Yjk2ZTc3OTNlMzQ2MDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ue7iwwBNTBwej0iGgvbS6ZjyO9U
k/MZd9ySEVBijekWXcFC5Oi40y92J69xCBDnV+n+Rn9WyO9hx3H+3usVBBUYxUnW
2JlWEnUe8dR3TKHJlBjzV8IjWcY2Q2cq+/1ubiVw9lVKfcTfkODyZN0dDFMViX4F
7006ZefrtxPh9Sp/x2E1uKco2FzpQSGoMcUs2cZ+8l5QfitMlOGGNdqn1p5Fdkoe
U5k0ja53OvPxIZ/Zg6pAAplh1bAQWt3HwBhxLhGsIHbfn8FMmaaBbIM4OheEAOUF
vyaulSgowTceNM+8Dy+Hl+jbt97OkkDb/GtmV6T7K2ndFCzWRjjdzVlbxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzfPJqVCv5nSfJ2AIuW53k+NGCdMB8GA1UdIwQY
MBaAFAMtUrMjmhzjzdNDMTSM54Dd8WTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXkxU3N5T2FIT1BOMDBNeE5Jem5nTjN4Wk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iYzVmMTUtNThhZS00ZGYwLTljNmQt
ZTdhZDczYmJjYzg5LzEvQXkxU3N5T2FIT1BOMDBNeE5Jem5nTjN4Wk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9iYzVmMTUtNThhZS00ZGYwLTljNmQtZTdhZDczYmJjYzg5
LzEvQXkxU3N5T2FIT1BOMDBNeE5Jem5nTjN4Wk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnxYf6/E
pk7Hv5vbnPTjInJXzobOo7U2mZWk3X9IZuXWRJSAevRKDO4oed0lKkPZHCbSkeaN
9dnnY/eRlAeJJ5WExQqVQzepG6cTyL8BoxVmO57muMY1vOrBCQXwmtDo8Lre0L+7
uNcXDDf/LiVTI9AsCePD9q35AGpJOVi7QuGWPOgpF4rHO6D0lgjQOVg1SgYDtUj2
4kmkhzzqjwZPstAD1DuACdB61onNzk1wELPe/zVanVDAGvJxqT11iNWjhTQMVowJ
Sa09BXuOlL9WNRCaSvfNNqdC6EaomOvO0tCgnVl6GxYrcNpU8rGXJzs+ej/mXB+f
T2qSygpC6zwtdQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:30:08 2026 by rpki-client