Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
File: AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json)
Hash identifier: XwTO5ZtPuT8Qw3cYVxy0g+f/p9072In7kG3FdEapPFQ=
Subject key identifier: 1B:0C:7A:05:0D:ED:D0:DD:52:40:1F:BC:94:DE:17:D8:1B:81:C1:30
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial: 019D9A74C059F4AD0C92D7EAFE3985CF8E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 08:00:35 +0000
Manifest this update: Fri 17 Apr 2026 08:00:35 +0000
Manifest next update: Sat 18 Apr 2026 08:00:35 +0000
Files and hashes: 1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: 1ELNF71BOK35tp3XB9ZwKTb8EWNq2vVb5Y4Z+0Vo/UA=)
2: TM56q_Km90IofYyolcjUGG4s9_E.roa (hash: +vMdN883JqiJ4BCwwMasiDlvt3eGgHHdJPYkXZCMObo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:c0:59:f4:ad:0c:92:d7:ea:fe:39:85:cf:8e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
Validity
Not Before: Apr 17 08:00:35 2026 GMT
Not After : Apr 18 08:00:35 2026 GMT
Subject: CN=1b0c7a050dedd0dd52401fbc94de17d81b81c130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:05:24:0f:18:20:28:d9:a3:6b:93:b1:9e:b0:
30:1a:da:1f:e7:01:53:cc:be:4f:f0:90:ab:e0:e8:
86:da:e4:96:85:f4:56:eb:b4:f6:32:c0:4b:57:99:
28:d6:50:3e:3a:a7:c3:25:45:7d:a1:a7:80:48:ef:
a7:28:ab:80:4e:8a:c2:b2:f7:41:c7:69:61:7e:42:
ed:95:31:7f:d6:f6:9f:4f:e3:c6:91:ec:42:99:7c:
a8:37:3a:48:ec:2c:82:e7:41:b0:2d:6d:01:42:6f:
69:3c:89:38:d8:36:91:2c:30:db:39:7f:e1:a2:47:
46:4d:ec:47:1f:b0:41:1b:2f:43:5a:2b:45:56:01:
53:2c:4c:e0:cd:14:20:a8:27:2a:03:cb:a2:2f:eb:
2e:d9:2a:fb:ef:d4:eb:49:1c:54:f5:dd:83:3e:bd:
9b:35:56:fe:04:3f:4a:62:8b:c6:1b:5f:0d:3f:6c:
5b:0f:b5:0d:c8:bf:d9:ed:e2:f5:30:7b:8b:da:d4:
51:98:4a:30:5a:9a:d8:bc:e0:7f:4e:b2:96:ce:4a:
74:30:82:4c:7c:40:0e:cf:02:9d:d3:ec:1e:6d:14:
03:87:45:1e:b3:16:76:02:49:3d:72:44:a0:2e:b1:
5b:50:25:ca:dc:a4:bb:ae:c9:bb:d5:42:b4:55:b3:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0C:7A:05:0D:ED:D0:DD:52:40:1F:BC:94:DE:17:D8:1B:81:C1:30
X509v3 Authority Key Identifier:
keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a5:84:cc:c6:65:bb:78:58:66:d0:7e:ea:33:ba:22:04:29:
f4:5e:d8:40:d5:92:4f:b8:d2:1b:38:05:f2:d7:0c:71:20:8b:
e3:c0:20:98:82:85:e7:73:b5:7b:10:d6:91:ee:4f:7f:cc:5d:
83:cd:88:ef:7e:34:8b:91:b7:16:31:4d:61:b5:7b:a0:c5:94:
b7:28:3a:e4:f6:a4:d3:e6:06:22:11:5d:fb:2b:8e:fb:73:8e:
f1:d2:64:7b:d7:a9:6a:ec:66:c7:32:99:e2:43:96:fe:ce:46:
03:cd:1e:43:7f:fe:73:b1:c2:98:52:ba:5d:7e:30:99:c0:fb:
9d:50:29:cf:da:7b:bc:9c:dd:6d:a0:ae:36:14:43:5a:13:c9:
3b:1b:13:98:2a:c3:9c:8a:fd:45:19:3b:01:e6:ae:a5:79:21:
79:e4:09:23:b9:0e:19:76:8d:8e:02:bb:f4:8a:7f:63:a7:7c:
ac:5c:e2:8d:a5:f2:88:57:c0:a5:8c:a2:58:91:15:57:83:92:
7a:56:c0:8d:72:04:1e:e0:fc:e9:89:1d:2f:4b:88:fa:1e:9d:
71:2e:22:10:e7:b7:62:db:85:f3:19:cb:ad:77:c7:77:6b:ba:
47:b9:eb:75:f7:cf:5e:c3:98:1b:13:ec:18:63:ce:e0:27:a5:
fd:8e:c0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:30 2026 by rpki-client