Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
File: AYzG9GaiQWV79exSpjDa6wEiL4U.mft (raw, json)
Hash identifier: 4kn9w9IR08et7FfTVQzW6yjwoF+hfynko5vww4XWS0Q=
Subject key identifier: F5:3D:42:FA:A7:9A:D7:86:C5:1B:DB:3E:FA:0D:CC:9F:BE:EC:17:9C
Authority key identifier: 01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
Certificate issuer: /CN=018cc6f466a241657bf5ec52a630daeb01222f85
Certificate serial: 019CAAFD6C1C12679836942B139505FA71A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 20:01:00 +0000
Manifest this update: Sun 01 Mar 2026 20:01:00 +0000
Manifest next update: Mon 02 Mar 2026 20:01:00 +0000
Files and hashes: 1: AYzG9GaiQWV79exSpjDa6wEiL4U.crl (hash: 4Ta58Hkuh5BoS7dv2FUW7hKEazlidkyRmF9j9cL+sSA=)
2: TM56q_Km90IofYyolcjUGG4s9_E.roa (hash: +vMdN883JqiJ4BCwwMasiDlvt3eGgHHdJPYkXZCMObo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:6c:1c:12:67:98:36:94:2b:13:95:05:fa:71:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018cc6f466a241657bf5ec52a630daeb01222f85
Validity
Not Before: Mar 1 20:01:00 2026 GMT
Not After : Mar 2 20:01:00 2026 GMT
Subject: CN=f53d42faa79ad786c51bdb3efa0dcc9fbeec179c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:1a:ff:78:7a:ee:d6:b3:39:61:ba:19:76:
3e:2d:7d:6f:38:50:49:2d:e1:b0:c9:ab:56:6a:92:
2e:d0:ad:43:8a:84:71:b7:27:ad:11:2c:72:5e:21:
a4:57:b7:3d:c4:93:fc:da:fd:e9:fb:42:33:16:a1:
37:8e:83:4b:3e:4a:69:33:3a:83:1c:60:a2:9d:93:
05:0e:b5:d0:42:3e:ae:f2:25:14:71:1e:ba:ac:2f:
a7:a0:1b:6b:36:31:80:da:75:3c:79:70:ac:cb:79:
bb:fe:8c:a1:2a:f9:b1:2d:3e:c3:ba:f3:c0:79:93:
c7:81:ec:f6:c2:be:0b:c8:3a:58:af:ae:79:3e:12:
6b:94:a0:39:30:3f:f8:b2:77:40:27:f0:3a:8d:e3:
88:bf:56:2f:0e:92:0c:3d:f5:6f:05:42:95:b6:3b:
cf:7f:54:fe:0a:59:7d:27:7c:06:61:d0:15:56:45:
a8:11:d7:5a:e5:2e:26:51:d6:e8:bc:ba:70:db:b1:
85:93:bd:11:29:62:bb:f0:c8:e0:0f:e5:49:06:9f:
6f:69:91:37:e4:be:61:63:2a:9c:c3:19:84:5b:58:
03:03:d1:aa:a4:41:12:d3:c1:7b:db:f2:6b:65:90:
7a:fc:6f:e9:a7:ca:ca:d1:88:27:7d:77:10:01:58:
76:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3D:42:FA:A7:9A:D7:86:C5:1B:DB:3E:FA:0D:CC:9F:BE:EC:17:9C
X509v3 Authority Key Identifier:
keyid:01:8C:C6:F4:66:A2:41:65:7B:F5:EC:52:A6:30:DA:EB:01:22:2F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYzG9GaiQWV79exSpjDa6wEiL4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3cf2fb-cf43-4c52-a2a1-be8d8c67df95/1/AYzG9GaiQWV79exSpjDa6wEiL4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2a:0e:57:e2:2a:2c:50:7d:c9:91:14:3b:a0:a3:4c:93:bb:
1a:e1:21:5c:6c:c7:84:8f:eb:a8:48:1b:d3:a7:26:b5:34:88:
dc:41:3d:4d:db:de:49:a7:1f:b6:3e:d5:b0:02:74:40:2a:d7:
d2:c2:08:69:f9:46:db:ee:61:30:8a:f9:82:1d:fc:98:ca:52:
2c:ae:b7:e0:65:95:10:d3:cc:b1:e2:e8:8a:36:61:b6:5d:82:
df:1d:93:22:24:98:6f:56:95:94:8a:45:73:de:ee:09:b1:c5:
33:df:a1:d9:45:7e:b8:86:22:f4:18:64:fc:f1:aa:8b:c0:9d:
ad:eb:eb:7c:fe:ec:af:8b:bd:20:25:d7:aa:a5:ec:75:76:38:
cf:b6:c6:d8:fe:b4:9a:73:4b:be:40:d8:42:83:9b:53:70:21:
dd:82:ca:ea:9b:1e:8f:54:9d:d3:fc:b9:2b:4f:ae:ba:f7:01:
fc:16:20:3e:ff:24:50:44:40:bb:05:b5:8b:94:df:b3:9c:7b:
f2:4a:6a:ee:7b:a1:80:d5:a4:71:61:3f:f9:02:f8:c0:a4:92:
9c:de:e9:62:23:29:57:85:14:38:b6:12:7c:3f:b4:0a:52:76:
d5:cc:c5:5c:99:78:d8:9d:ef:0e:ef:37:3a:17:a0:48:6b:4d:
aa:4e:64:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:29 2026 by rpki-client