Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
File: AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json)
Hash identifier: bhHzR0WwITWP1KAsAnIMN9o14Gl24zXPLlXGMH8lV88=
Subject key identifier: AB:91:83:02:B2:2F:85:2D:B6:20:E5:5C:8A:C4:E7:47:15:F4:35:61
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial: 01A0C96B6D172C46D5BB5B7EA0979598780B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
Manifest number: 1A6C
Signing time: Tue 22 Sep 2026 14:00:55 +0000
Manifest this update: Tue 22 Sep 2026 14:00:55 +0000
Manifest next update: Wed 23 Sep 2026 14:00:55 +0000
Files and hashes: 1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: kO6HGO9g3WUvmQ1GpdEcJWVdHW6a/gjvDcvoJm4A8KE=)
2: TM56q_Km90IofYyolcjUGG4s9_E.roa (hash: +vMdN883JqiJ4BCwwMasiDlvt3eGgHHdJPYkXZCMObo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:6d:17:2c:46:d5:bb:5b:7e:a0:97:95:98:78:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
Validity
Not Before: Sep 22 14:00:55 2026 GMT
Not After : Sep 23 14:00:55 2026 GMT
Subject: CN=ab918302b22f852db620e55c8ac4e74715f43561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:87:9d:c3:03:0c:17:57:db:66:98:5d:40:
16:08:18:48:1a:a8:03:8f:12:ed:6c:30:58:aa:39:
86:70:84:f9:b9:86:3c:3d:71:ef:ad:1f:c4:8f:12:
60:77:e5:30:3f:b3:01:16:cc:30:1e:02:ff:47:0d:
e7:17:a8:4a:63:cc:dd:50:ed:0f:84:6a:4a:7a:66:
b1:bb:2e:c7:1f:ac:a1:ac:4a:33:6f:33:43:c6:46:
31:70:a7:cd:a7:22:11:7c:89:2b:f4:12:50:1b:1d:
c3:8f:39:c2:cf:8f:04:ed:a4:10:10:79:43:bf:39:
15:64:07:33:9d:4a:3b:69:04:24:8c:02:55:5f:14:
3c:93:19:32:6a:23:20:7d:c8:ae:8d:f9:62:08:5c:
f0:3c:a1:f0:da:c8:99:b2:7c:61:25:1e:a6:11:da:
6c:58:f8:1f:a7:61:84:7c:4c:74:b6:a5:99:77:c2:
b9:6e:c6:61:ff:61:62:a9:f1:de:6d:50:8d:c0:91:
aa:78:ea:7a:a4:3e:31:e9:5c:fb:24:27:1b:93:c9:
d6:e2:9e:14:59:4b:49:0e:48:44:88:f1:8d:59:98:
18:39:72:2b:b5:35:92:68:f7:47:81:6e:ff:0e:48:
3f:87:f5:20:f2:e7:3c:06:ac:3f:11:ce:26:65:7b:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:91:83:02:B2:2F:85:2D:B6:20:E5:5C:8A:C4:E7:47:15:F4:35:61
X509v3 Authority Key Identifier:
keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:69:28:4c:7a:a7:ef:b1:54:4b:aa:7f:a7:0c:37:46:b2:5c:
77:24:10:48:79:15:5a:c1:fe:4a:e6:27:f9:a8:66:17:96:9b:
32:c6:e1:a0:3b:ca:91:f7:ca:7a:02:c5:70:4c:9f:96:a7:6f:
60:bf:f7:33:60:57:55:2a:57:d7:f5:aa:6f:ce:23:35:35:99:
da:8e:21:03:e9:f3:25:54:e0:79:39:47:e8:07:09:f3:c7:30:
d5:05:1d:b7:35:51:e2:9e:c9:f8:9d:b4:0e:ef:0c:2f:ae:34:
f6:cd:a7:56:60:b0:fc:8f:58:ea:00:48:75:1e:96:e3:3d:61:
16:f0:27:60:aa:17:d1:1f:90:01:c1:13:bd:d1:2b:ee:2f:20:
78:28:f4:20:0f:a6:9e:a1:44:e6:19:d0:16:ef:94:d8:ba:5a:
a0:ad:80:92:88:60:f7:b0:81:e7:02:65:ee:9f:8c:db:57:c3:
44:56:c1:ae:00:c0:4e:d3:6a:74:8b:5f:4c:ac:16:5a:ee:8e:
84:d4:c9:4f:0e:c9:61:31:5e:ac:1b:1d:73:3e:9c:2a:0b:91:
1b:8b:16:38:4d:7d:5d:e5:85:ee:06:da:af:b3:5e:6c:32:6f:
ce:61:11:45:3a:e8:08:e3:fd:92:8a:fe:78:02:a4:dc:27:f3:
40:97:cf:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJa20XLEbVu1t+oJeVmHgLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOGNjNmY0NjZhMjQxNjU3YmY1ZWM1MmE2MzBkYWViMDEy
MjJmODUwHhcNMjYwOTIyMTQwMDU1WhcNMjYwOTIzMTQwMDU1WjAzMTEwLwYDVQQD
EyhhYjkxODMwMmIyMmY4NTJkYjYyMGU1NWM4YWM0ZTc0NzE1ZjQzNTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsROHncMDDBdX22aYXUAWCBhIGqgD
jxLtbDBYqjmGcIT5uYY8PXHvrR/EjxJgd+UwP7MBFswwHgL/Rw3nF6hKY8zdUO0P
hGpKemaxuy7HH6yhrEozbzNDxkYxcKfNpyIRfIkr9BJQGx3DjznCz48E7aQQEHlD
vzkVZAcznUo7aQQkjAJVXxQ8kxkyaiMgfciujfliCFzwPKHw2siZsnxhJR6mEdps
WPgfp2GEfEx0tqWZd8K5bsZh/2FiqfHebVCNwJGqeOp6pD4x6Vz7JCcbk8nW4p4U
WUtJDkhEiPGNWZgYOXIrtTWSaPdHgW7/Dkg/h/Ug8uc8Bqw/Ec4mZXuemQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuRgwKyL4UttiDlXIrE50cV9DVhMB8GA1UdIwQY
MBaAFAGMxvRmokFle/XsUqYw2usBIi+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zY2YyZmItY2Y0My00YzUyLWEyYTEt
YmU4ZDhjNjdkZjk1LzEvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zY2YyZmItY2Y0My00YzUyLWEyYTEtYmU4ZDhjNjdkZjk1
LzEvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWkoTHqn
77FUS6p/pww3RrJcdyQQSHkVWsH+SuYn+ahmF5abMsbhoDvKkffKegLFcEyflqdv
YL/3M2BXVSpX1/Wqb84jNTWZ2o4hA+nzJVTgeTlH6AcJ88cw1QUdtzVR4p7J+J20
Du8ML6409s2nVmCw/I9Y6gBIdR6W4z1hFvAnYKoX0R+QAcETvdEr7i8geCj0IA+m
nqFE5hnQFu+U2LpaoK2Akohg97CB5wJl7p+M21fDRFbBrgDATtNqdItfTKwWWu6O
hNTJTw7JYTFerBsdcz6cKguRG4sWOE19XeWF7gbar7NebDJvzmERRTroCOP9kor+
eAKk3CfzQJfPog==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:16:39 2026 by rpki-client