Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
File: AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json)
Hash identifier: tA6QwhHCiT0D3smgAaN/vPhixBJIPt1wDA+8kt9JEUw=
Subject key identifier: A2:BA:0B:7B:E6:CB:A9:EC:A4:F3:1C:36:52:F2:4B:61:69:5E:D5:29
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial: 01A1DD94EEB8196DAB372A2A041761036AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
Manifest number: 1AFB
Signing time: Sun 15 Nov 2026 05:01:27 +0000
Manifest this update: Sun 15 Nov 2026 05:01:27 +0000
Manifest next update: Mon 16 Nov 2026 05:01:27 +0000
Files and hashes: 1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: BeewQ/Ag+1egmiJuNxsm2+b9k/PZlcMcr71+8JNgcsM=)
2: TM56q_Km90IofYyolcjUGG4s9_E.roa (hash: +vMdN883JqiJ4BCwwMasiDlvt3eGgHHdJPYkXZCMObo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:ee:b8:19:6d:ab:37:2a:2a:04:17:61:03:6a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
Validity
Not Before: Nov 15 05:01:27 2026 GMT
Not After : Nov 16 05:01:27 2026 GMT
Subject: CN=a2ba0b7be6cba9eca4f31c3652f24b61695ed529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:ad:be:cd:73:68:9a:fb:a0:a8:ad:0d:a2:
91:e6:69:46:e0:90:df:b8:d3:2b:bc:59:2f:50:7c:
a9:06:e1:6f:f1:ab:4d:cc:60:9d:ec:07:88:19:a7:
c5:96:62:28:20:37:c5:d1:06:78:c3:3a:c5:87:46:
2e:a2:28:9b:3b:d7:b4:26:c3:e8:2d:33:07:9b:64:
bd:6c:46:ea:72:0c:c7:35:c3:fc:4a:cb:7a:60:0f:
99:b9:c4:ee:eb:b5:af:7f:1e:77:da:17:e5:b3:b9:
3d:54:00:68:17:c3:6a:8a:90:f5:a1:28:28:28:a7:
fa:0e:6f:b4:53:24:36:88:8d:d0:5b:fb:ff:11:8c:
d2:6e:78:ad:10:1c:03:9d:a0:af:56:31:f1:76:b2:
88:ee:76:9b:88:e7:63:53:0f:b0:56:87:e4:bc:d1:
1f:f6:3b:4a:40:e6:4e:c6:99:8d:99:21:17:f8:b5:
19:a4:ad:1c:6c:7a:9f:b6:5e:51:dd:c1:e4:77:17:
c8:0c:45:76:7f:11:d2:f2:0b:67:06:19:5e:c9:8d:
c5:49:0e:16:e7:b7:cf:be:fc:29:06:a2:10:f0:54:
27:64:e6:db:f1:31:49:d7:35:90:1f:69:47:b4:c8:
77:96:11:9f:01:2b:0f:5d:76:5f:e3:09:b7:c1:fc:
db:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BA:0B:7B:E6:CB:A9:EC:A4:F3:1C:36:52:F2:4B:61:69:5E:D5:29
X509v3 Authority Key Identifier:
keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:55:59:62:03:91:46:95:a0:9f:fa:4a:c7:1d:fd:19:f7:a0:
3f:04:24:c1:74:4b:4f:74:64:66:04:57:77:0e:2e:dc:3b:7b:
59:b6:89:d7:ac:f4:f2:f8:3f:b8:e1:d9:d7:50:d0:70:4f:4a:
2b:06:e1:d9:6b:66:e5:8d:a4:27:c1:40:b0:b8:e0:cf:08:1e:
c2:42:3d:ae:a9:ba:db:da:93:26:56:2a:d8:55:46:d0:41:6d:
8e:b0:66:ac:12:42:d6:57:a7:77:e0:d8:36:a6:34:8a:e9:6a:
16:4b:aa:67:ca:9d:28:51:0e:5c:f7:cd:c2:22:40:08:1e:cf:
23:52:9d:d1:5b:f5:f9:fc:8e:f3:cf:06:c2:9e:7e:b9:21:a6:
93:f6:2b:20:89:6d:60:59:72:ea:ee:2f:58:e7:10:ba:ef:da:
ef:9a:87:37:9d:47:0d:65:68:14:9e:a6:d7:8d:1e:19:f2:00:
da:e6:e6:1a:ab:71:fb:2f:36:ce:26:1d:60:69:ea:cd:51:14:
9f:a5:6a:21:ea:b3:14:78:ef:3f:4e:8d:82:50:55:64:9e:87:
26:37:70:b2:1b:36:f6:b0:66:3e:8b:3b:0f:94:3f:63:64:de:
30:9e:18:5b:57:40:42:ca:79:92:60:d0:7b:d8:96:0c:d3:9c:
d2:d6:48:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:20:19 2026 by rpki-client