Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
File: AYZ9mLBSF68a-spyJrvWEzcHSfA.mft (raw, json)
Hash identifier: w9B6TGMvUXqzUV/HxVxi0xOV8SybTenvdkaA+XRAYj4=
Subject key identifier: 82:5A:39:D8:2E:74:48:A1:1B:45:6B:EC:97:74:37:0A:D5:8A:69:6D
Authority key identifier: 01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
Certificate issuer: /CN=01867d98b05217af1afaca7226bbd613370749f0
Certificate serial: 01A1C28AAA32722D7D07CB8308E683C8FE91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
Manifest number: 07CF
Signing time: Mon 09 Nov 2026 23:00:29 +0000
Manifest this update: Mon 09 Nov 2026 23:00:29 +0000
Manifest next update: Tue 10 Nov 2026 23:00:29 +0000
Files and hashes: 1: AYZ9mLBSF68a-spyJrvWEzcHSfA.crl (hash: 33za43/2+9XTUWKKJGOxq+TQ5wbHBjr9YNJjWocF9/k=)
2: Ezve964v81lYlWQeavbK7g7CJGk.roa (hash: iRAr6mZP/rQywgyAaTeChLJgFIykzhfGwc22gfj7mcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:8a:aa:32:72:2d:7d:07:cb:83:08:e6:83:c8:fe:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01867d98b05217af1afaca7226bbd613370749f0
Validity
Not Before: Nov 9 23:00:29 2026 GMT
Not After : Nov 10 23:00:29 2026 GMT
Subject: CN=825a39d82e7448a11b456bec9774370ad58a696d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:37:69:e9:3b:3d:29:df:07:44:fe:ad:76:
bf:54:93:6d:a5:7d:bd:5a:02:44:6c:31:42:34:67:
0e:24:be:b8:a6:b1:62:11:1a:bb:82:f9:a9:b0:7b:
db:c4:9f:f4:ea:89:ef:5f:8b:30:7e:a1:6e:bd:73:
94:7b:dd:aa:0d:ab:98:53:c6:ba:27:33:b8:6b:30:
3b:21:e9:1e:4b:b3:c3:18:70:27:79:10:86:8b:c8:
9f:07:9a:19:a5:a1:04:f4:a6:b5:5f:77:dc:ca:67:
1b:0d:9a:0b:7b:c7:cf:dc:11:94:6b:7e:72:8f:54:
d0:5d:31:71:fa:cc:67:e2:de:02:6f:cd:00:78:9b:
a9:7c:c4:45:e9:37:5f:ba:fa:e3:68:52:9a:2d:15:
2c:1c:e5:6d:95:1e:5e:f4:9e:63:d5:f3:97:b7:87:
01:d3:6f:07:48:35:06:8d:21:ca:15:1d:73:d5:db:
15:b0:76:ee:5e:49:5e:03:30:67:f1:83:70:6f:94:
45:96:39:eb:7d:4f:27:db:cc:ef:d4:0a:8f:ca:b0:
5b:08:a4:1a:ec:c7:39:58:22:79:c5:77:b2:eb:e7:
16:a1:fe:18:6c:e2:49:1f:d4:4e:62:f1:0b:54:ad:
fb:45:76:75:6a:99:8b:18:66:46:17:d8:88:51:d5:
3f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5A:39:D8:2E:74:48:A1:1B:45:6B:EC:97:74:37:0A:D5:8A:69:6D
X509v3 Authority Key Identifier:
keyid:01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:17:ae:2d:80:50:32:c0:09:0e:e9:f0:78:48:bc:bf:3e:34:
4c:70:32:f9:96:8c:86:88:75:bd:c6:5b:22:95:7a:62:4b:3a:
8b:a7:70:59:7e:5e:f4:1e:7d:96:d7:ba:18:a7:d0:73:38:13:
61:59:bf:77:5c:35:f8:0c:a9:cc:be:ed:1d:86:28:4b:4c:75:
70:dd:f3:f5:45:d3:3a:49:93:f3:64:7c:99:c8:5b:a7:a8:55:
c0:21:b6:95:c4:7f:b9:fb:9f:56:3d:bc:4d:fb:cc:b0:10:cd:
b2:90:08:c4:13:1b:8a:dd:a2:d5:f6:55:a0:78:a2:f1:02:68:
92:c2:84:e5:85:f2:80:d7:be:83:ef:7e:eb:66:24:38:7c:59:
c7:0c:ee:e5:5d:e0:09:b7:77:79:4c:65:7e:5e:04:38:41:c5:
03:2f:55:5d:b0:02:f2:a4:ae:c9:0c:6d:3b:15:62:3a:ef:68:
b1:39:a8:c6:92:b9:52:64:1f:7b:97:e5:a6:d9:29:3d:3f:37:
0b:25:f4:3d:7e:2b:55:ea:10:92:75:09:f4:ba:f0:af:dc:85:
19:26:9b:0c:b6:26:a0:22:b7:c9:80:75:ac:0c:63:d4:a2:2d:
fb:bf:80:29:e6:d0:37:82:5e:e0:d0:b4:ad:b8:fb:86:96:f0:
80:1b:25:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 06:41:43 2026 by rpki-client