Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
File: AYZ9mLBSF68a-spyJrvWEzcHSfA.mft (raw, json)
Hash identifier: zshN5A4C9/XI6b+wsdvBm0W+lIQxXHGFGJ5xw4A2p6Y=
Subject key identifier: CE:3D:5C:53:6B:00:6E:38:AD:C3:6F:2D:95:C1:C4:26:81:60:06:A3
Authority key identifier: 01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
Certificate issuer: /CN=01867d98b05217af1afaca7226bbd613370749f0
Certificate serial: 01A0C58E5BD3B50F67ECB827E7DCBF8CE1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
Manifest number: 074C
Signing time: Mon 21 Sep 2026 20:00:35 +0000
Manifest this update: Mon 21 Sep 2026 20:00:35 +0000
Manifest next update: Tue 22 Sep 2026 20:00:35 +0000
Files and hashes: 1: AYZ9mLBSF68a-spyJrvWEzcHSfA.crl (hash: wfHe2MM0vBrAHp+qvODsMQDNOm29sDd8u7wrE4oJM74=)
2: Ezve964v81lYlWQeavbK7g7CJGk.roa (hash: iRAr6mZP/rQywgyAaTeChLJgFIykzhfGwc22gfj7mcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:5b:d3:b5:0f:67:ec:b8:27:e7:dc:bf:8c:e1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01867d98b05217af1afaca7226bbd613370749f0
Validity
Not Before: Sep 21 20:00:35 2026 GMT
Not After : Sep 22 20:00:35 2026 GMT
Subject: CN=ce3d5c536b006e38adc36f2d95c1c426816006a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6a:b2:d3:8a:df:f7:d5:26:0a:2f:61:d4:3b:
f4:88:18:ba:32:97:f0:95:59:ff:67:69:92:88:cf:
e4:f5:c9:f5:ca:83:98:6a:0c:84:ac:92:38:52:4c:
51:22:a3:4f:8a:9f:40:76:9e:c1:4d:50:13:67:a9:
af:71:95:4b:0e:1e:87:b3:cd:f5:ff:8f:c8:02:b4:
d0:5e:aa:d8:cf:b4:08:90:12:02:2d:53:5e:33:29:
95:83:e4:54:fb:86:31:c6:f1:fc:16:f4:d0:26:5f:
33:c7:7b:86:08:22:c4:c7:0d:8f:f7:52:da:4c:e4:
68:02:f3:07:e4:be:e3:81:15:47:ca:40:14:39:54:
f8:2e:32:0c:fe:f6:30:fe:ca:f4:91:62:81:87:be:
17:db:21:29:e4:fd:56:8e:d1:2b:e1:0b:e2:8b:b2:
f1:6d:21:05:c8:73:1a:08:f9:9b:51:73:1a:be:0c:
26:d4:d4:31:1f:50:f7:0d:5a:55:96:06:0c:96:e9:
a8:a2:82:d5:e1:6a:16:07:1f:49:72:e4:23:3a:fc:
14:72:dc:c6:62:f4:9d:d4:84:8e:84:68:37:0b:51:
78:76:51:67:ec:93:c8:90:78:e2:97:73:4c:c5:b9:
77:89:20:08:e8:db:0e:2c:3c:0f:ce:95:68:49:61:
b1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3D:5C:53:6B:00:6E:38:AD:C3:6F:2D:95:C1:C4:26:81:60:06:A3
X509v3 Authority Key Identifier:
keyid:01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8b:31:54:ec:ae:a0:9a:99:07:bd:10:82:96:32:2f:b0:c9:
aa:2b:ad:0d:de:a0:26:98:fa:86:e3:c7:11:f3:ae:6a:cb:00:
83:da:a8:cc:3b:50:ed:18:94:2d:66:57:f2:2c:c4:5f:5e:d4:
bf:a2:14:07:8b:b1:6f:20:cb:83:df:18:ea:ce:4e:03:cd:6b:
f6:2b:0f:79:66:30:45:40:45:15:1d:d9:15:5a:ad:aa:5a:bb:
6c:71:bf:92:4e:a4:0e:40:3a:79:b5:80:44:2d:6b:3c:1a:c0:
32:10:5a:d2:8e:e7:a4:41:53:c3:5c:6a:78:25:ad:b4:8a:7b:
b7:b9:67:0b:b1:d0:34:3d:fe:37:fb:04:b0:39:86:28:c8:e5:
9b:ca:28:59:72:c8:b7:08:be:bd:76:07:27:61:1b:a2:ba:84:
2f:ca:55:47:f0:37:17:cd:a5:13:f7:0c:f3:75:21:e8:79:5b:
20:84:11:e4:56:1f:4e:d2:64:41:c2:3d:08:84:83:02:7a:2b:
74:c4:f7:6b:d9:22:cd:21:a4:59:cb:ce:16:47:6e:57:79:a4:
99:c3:a7:e5:e7:ce:12:5e:6f:1d:df:d7:e1:3e:13:c8:d1:44:
5f:da:9d:fb:9a:69:eb:8d:8f:cf:2a:38:76:44:20:21:e0:b4:
b7:49:c2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:48:41 2026 by rpki-client