Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
File: Ay1SsyOaHOPN00MxNIzngN3xZMA.mft (raw, json)
Hash identifier: 5h/uj2pFHxSfaQ8NNuGeVnZ5vfBErBwXwrGX6sVkxZE=
Subject key identifier: CC:CC:B5:D9:8C:46:81:98:E1:5F:AE:64:6D:9E:60:36:0B:1C:22:95
Authority key identifier: 03:2D:52:B3:23:9A:1C:E3:CD:D3:43:31:34:8C:E7:80:DD:F1:64:C0
Certificate issuer: /CN=032d52b3239a1ce3cdd34331348ce780ddf164c0
Certificate serial: 01A0C7EB1348171BADCEB08756695AB7BB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
Manifest number: 0B18
Signing time: Tue 22 Sep 2026 07:01:06 +0000
Manifest this update: Tue 22 Sep 2026 07:01:06 +0000
Manifest next update: Wed 23 Sep 2026 07:01:06 +0000
Files and hashes: 1: Ay1SsyOaHOPN00MxNIzngN3xZMA.crl (hash: X2DIy3wU0RYqOk0uAU6LjfM6cdJ1x/jQ/nzSy6A9RU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:eb:13:48:17:1b:ad:ce:b0:87:56:69:5a:b7:bb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032d52b3239a1ce3cdd34331348ce780ddf164c0
Validity
Not Before: Sep 22 07:01:06 2026 GMT
Not After : Sep 23 07:01:06 2026 GMT
Subject: CN=ccccb5d98c468198e15fae646d9e60360b1c2295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:7b:23:d6:5a:58:77:2f:ce:c6:04:bb:9d:
cd:97:bf:c4:25:e6:1d:fb:a9:41:fd:ac:74:c8:74:
79:47:7f:58:78:ff:03:5f:ed:cb:ea:ee:90:05:0d:
95:9e:e9:5a:5d:f7:1f:83:4c:02:41:97:fc:69:59:
ad:a8:b8:ae:c7:5c:7c:6e:c0:44:23:3c:0f:ce:c6:
44:f8:92:48:3c:45:27:5b:ef:2d:2e:98:73:bb:ab:
2a:d7:15:e7:3e:0a:f9:2c:be:b4:96:b4:bf:d6:8a:
95:fa:2d:fc:9a:f3:e0:70:3e:8c:bb:c2:08:f1:85:
18:10:3d:70:c5:46:a2:c7:c4:83:c5:70:71:e9:25:
bc:8f:0e:ce:c7:25:2c:1b:26:0a:ba:dc:76:64:05:
57:98:07:da:49:6c:4f:4f:f9:e2:cc:2b:41:cd:9c:
21:b3:6c:92:22:62:95:ee:d3:28:9c:8f:6a:81:e3:
29:58:66:a0:1a:0a:96:19:81:bb:5c:26:a3:cb:c1:
e0:33:0b:5d:5b:e4:89:2b:83:8e:cc:47:ec:de:88:
0b:a8:b0:b9:f9:77:9e:e1:47:3a:83:29:16:1a:ce:
12:07:c9:88:d1:0f:78:db:10:9d:51:79:b7:a8:23:
cc:8b:4c:67:e2:ed:30:b2:fc:7b:db:ff:60:b5:ca:
ca:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CC:B5:D9:8C:46:81:98:E1:5F:AE:64:6D:9E:60:36:0B:1C:22:95
X509v3 Authority Key Identifier:
keyid:03:2D:52:B3:23:9A:1C:E3:CD:D3:43:31:34:8C:E7:80:DD:F1:64:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay1SsyOaHOPN00MxNIzngN3xZMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/bc5f15-58ae-4df0-9c6d-e7ad73bbcc89/1/Ay1SsyOaHOPN00MxNIzngN3xZMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:35:c7:df:be:11:69:aa:18:e6:02:d0:76:a1:ed:06:f3:68:
b2:57:4d:68:e0:af:85:30:05:4b:e8:46:84:0a:9d:91:44:3a:
22:95:e7:a0:c2:fd:5e:df:dd:83:67:79:1c:51:8b:ac:33:19:
81:ba:3e:64:49:f9:4b:81:a6:72:c4:e8:79:79:8c:80:4e:25:
0a:3e:d3:f5:ae:42:fe:94:10:3a:3c:0f:09:73:45:b7:6d:f8:
46:c9:99:fb:9e:97:62:76:36:ef:d9:e4:9d:2a:c9:85:88:6c:
1c:75:76:39:2b:16:ea:b3:96:96:be:a9:a8:22:91:d6:0e:b5:
5b:6f:ef:f4:99:d1:a9:9e:6e:43:9b:51:39:60:2c:15:a5:a0:
65:19:8d:85:c8:a7:bb:8e:06:8a:6f:61:66:57:a0:b9:bf:d1:
a4:c4:9d:97:56:8c:ca:f5:c6:c0:19:96:cb:16:cd:29:49:97:
aa:a3:c7:2f:1d:72:b8:8c:9c:d0:78:af:fb:3b:ef:8c:43:3f:
5e:28:77:5f:63:19:9d:67:b8:5e:61:ff:ea:df:52:d5:a9:35:
49:32:35:f6:6b:cf:d6:90:8c:91:e4:7d:a3:b3:9b:88:2c:4b:
8c:77:c3:be:e1:e6:a7:47:f2:9f:ea:d7:15:a8:90:e8:d7:e5:
55:bb:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:06:57 2026 by rpki-client