Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
File: AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json)
Hash identifier: 7Q2QS2K7mDW0a0kuywk2tnlZHxMx5h83PSBx9O39Q9c=
Subject key identifier: E2:1F:6D:A9:F9:BE:CB:A7:66:4F:7F:8F:02:56:2A:F4:29:24:E1:3A
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial: 019FA9AC0207F156DFA4EDBC57914C714E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 17:00:49 +0000
Manifest this update: Tue 28 Jul 2026 17:00:49 +0000
Manifest next update: Wed 29 Jul 2026 17:00:49 +0000
Files and hashes: 1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: 9eE2035+TGF0b2zy8rEDUORmRwO1+ztldfqv4oNfgcw=)
2: TM56q_Km90IofYyolcjUGG4s9_E.roa (hash: +vMdN883JqiJ4BCwwMasiDlvt3eGgHHdJPYkXZCMObo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:02:07:f1:56:df:a4:ed:bc:57:91:4c:71:4e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
Validity
Not Before: Jul 28 17:00:49 2026 GMT
Not After : Jul 29 17:00:49 2026 GMT
Subject: CN=e21f6da9f9becba7664f7f8f02562af42924e13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:99:b8:6b:f9:c0:04:aa:b8:b8:98:a8:12:
2b:a4:9c:e7:4a:91:06:a0:70:49:ba:b9:8b:18:95:
c1:6a:44:a3:4d:97:07:8e:30:68:91:f2:a9:90:8e:
21:df:e0:58:0c:20:1b:ba:1f:2e:b5:f9:6b:01:44:
d3:81:27:bd:6b:fd:37:b3:0d:36:d2:0d:8b:9e:0d:
01:4a:d4:c4:fa:e7:73:b8:5f:55:88:7c:f3:9a:0f:
d0:ed:7d:30:2b:64:bb:4d:bd:db:5e:e7:68:9f:cf:
3a:23:e7:29:8c:a7:e1:4f:46:62:37:ca:65:14:8a:
f7:2c:b2:f0:2e:4c:98:14:1f:9b:86:d0:a6:ba:8d:
38:53:3c:66:6c:31:53:67:d9:eb:3d:aa:dd:0d:9f:
9c:36:68:82:65:5d:f5:10:2d:e1:32:3e:a4:6b:e3:
da:9b:ec:ab:8a:5d:67:64:3f:d7:2f:73:29:b0:e7:
7e:98:ac:c2:b9:41:ae:7e:39:c1:86:87:67:50:4b:
61:4f:aa:3e:f3:55:2a:83:b5:b2:a5:55:80:02:f7:
47:4f:28:1f:a6:4e:7d:f9:8a:f3:ec:79:ab:98:4f:
c8:f2:76:f5:53:6d:aa:f1:99:72:e4:ee:82:24:99:
f5:42:dd:05:81:26:82:ee:c7:27:52:be:32:27:eb:
01:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1F:6D:A9:F9:BE:CB:A7:66:4F:7F:8F:02:56:2A:F4:29:24:E1:3A
X509v3 Authority Key Identifier:
keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2b:61:42:d1:e4:71:ce:ec:c1:66:66:8e:ff:5f:ad:bd:b3:
9a:44:e8:57:de:c6:44:cd:2d:25:e8:03:27:ef:f3:41:95:3f:
f5:9b:8d:09:96:df:3d:85:7b:99:79:dc:1a:7a:99:9b:f6:94:
a5:15:ec:95:ce:39:ce:7e:c8:14:02:6b:25:63:ad:97:b9:2d:
f1:10:51:16:1a:82:59:2e:d8:54:82:fc:43:e9:3f:2d:eb:90:
25:5b:0c:64:48:31:83:a1:f1:c5:37:16:c9:ff:68:e2:81:e9:
d0:b8:be:3e:45:14:29:7d:ad:76:28:db:eb:cd:a4:b3:50:04:
6b:26:44:05:7d:c2:b2:48:6b:62:84:23:ce:15:a1:44:3a:59:
42:97:a3:40:3d:28:57:09:f6:f6:73:de:71:1e:6f:df:a8:13:
2c:a1:f3:dd:9f:45:80:25:dd:a4:1f:82:4d:bf:20:8f:93:0c:
98:06:8c:ff:6f:2e:ae:73:03:e5:83:1e:0c:e7:10:65:29:b2:
86:b3:86:c1:b2:10:a3:50:5f:a5:be:89:44:e6:02:b8:fe:91:
61:1a:0b:37:47:d1:62:bc:26:85:18:7a:1e:d6:f8:68:d7:20:
7a:25:1d:c7:c2:a3:31:eb:84:e1:a6:36:a2:86:0d:8a:da:19:
79:f0:9c:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prAIH8VbfpO28V5FMcU4GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxOGNjNmY0NjZhMjQxNjU3YmY1ZWM1MmE2MzBkYWViMDEy
MjJmODUwHhcNMjYwNzI4MTcwMDQ5WhcNMjYwNzI5MTcwMDQ5WjAzMTEwLwYDVQQD
EyhlMjFmNmRhOWY5YmVjYmE3NjY0ZjdmOGYwMjU2MmFmNDI5MjRlMTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyKZuGv5wASquLiYqBIrpJznSpEG
oHBJurmLGJXBakSjTZcHjjBokfKpkI4h3+BYDCAbuh8utflrAUTTgSe9a/03sw02
0g2Lng0BStTE+udzuF9ViHzzmg/Q7X0wK2S7Tb3bXudon886I+cpjKfhT0ZiN8pl
FIr3LLLwLkyYFB+bhtCmuo04UzxmbDFTZ9nrPardDZ+cNmiCZV31EC3hMj6ka+Pa
m+yril1nZD/XL3MpsOd+mKzCuUGufjnBhodnUEthT6o+81Uqg7WypVWAAvdHTygf
pk59+Yrz7HmrmE/I8nb1U22q8Zly5O6CJJn1Qt0FgSaC7scnUr4yJ+sBWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIfban5vsunZk9/jwJWKvQpJOE6MB8GA1UdIwQY
MBaAFAGMxvRmokFle/XsUqYw2usBIi+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zY2YyZmItY2Y0My00YzUyLWEyYTEt
YmU4ZDhjNjdkZjk1LzEvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zY2YyZmItY2Y0My00YzUyLWEyYTEtYmU4ZDhjNjdkZjk1
LzEvQVl6RzlHYWlRV1Y3OWV4U3BqRGE2d0VpTDRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqSthQtHk
cc7swWZmjv9frb2zmkToV97GRM0tJegDJ+/zQZU/9ZuNCZbfPYV7mXncGnqZm/aU
pRXslc45zn7IFAJrJWOtl7kt8RBRFhqCWS7YVIL8Q+k/LeuQJVsMZEgxg6HxxTcW
yf9o4oHp0Li+PkUUKX2tdijb682ks1AEayZEBX3CskhrYoQjzhWhRDpZQpejQD0o
Vwn29nPecR5v36gTLKHz3Z9FgCXdpB+CTb8gj5MMmAaM/28urnMD5YMeDOcQZSmy
hrOGwbIQo1Bfpb6JROYCuP6RYRoLN0fRYrwmhRh6Htb4aNcgeiUdx8KjMeuE4aY2
ooYNitoZefCc4g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:17:45 2026 by rpki-client