Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
File: AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft (raw, json)
Hash identifier: sEO0AaJ/rVKMMmxsRBb9jAJFx7coE5xgebVXL2WN0Xk=
Subject key identifier: 71:55:B4:F3:63:9C:4A:A6:F3:1B:51:3E:D6:28:40:5B:E1:08:AE:98
Authority key identifier: 01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
Certificate issuer: /CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Certificate serial: 01A12466B2A81170CDAC9E529561EDA99283
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
Manifest number: 12FF
Signing time: Sat 10 Oct 2026 06:01:12 +0000
Manifest this update: Sat 10 Oct 2026 06:01:12 +0000
Manifest next update: Sun 11 Oct 2026 06:01:12 +0000
Files and hashes: 1: AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl (hash: 1JM7dCrVY7ECvQCNf1HFTNYHPBuWHNqwMwGNk9wWPUY=)
2: PgXrvWBADSv7xH4LgHKpTQQ0144.roa (hash: rmC8h6+zobbErP+gvycV1mNmmNbI0Zsk3t4WrqWuDNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:66:b2:a8:11:70:cd:ac:9e:52:95:61:ed:a9:92:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=018b20ff098e6b7cbc8b6af0d680065e6b90600b
Validity
Not Before: Oct 10 06:01:12 2026 GMT
Not After : Oct 11 06:01:12 2026 GMT
Subject: CN=7155b4f3639c4aa6f31b513ed628405be108ae98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b8:fe:2a:cd:b0:9c:ac:d3:de:db:9c:1d:32:
18:1b:c9:03:ce:54:b5:32:43:e3:ea:dc:ff:04:26:
e7:04:f9:68:bc:fe:df:00:7d:40:2a:48:ad:61:75:
be:35:ef:bc:77:50:8f:34:ef:db:a9:56:b4:39:c9:
27:52:8b:7d:16:e2:75:91:00:6e:8f:b5:d5:86:aa:
ad:81:60:cf:ab:30:d8:41:3c:c7:71:62:6e:90:95:
eb:0c:67:73:31:2a:3e:de:c4:40:0d:b5:fd:f7:f7:
1b:b9:80:0f:7c:fa:a7:0a:90:12:3a:1e:46:ca:6b:
bf:14:b2:44:86:0f:e9:74:a5:25:e0:4e:10:8a:64:
e7:44:c9:13:7a:94:4e:89:f3:3b:53:2d:8a:fa:2b:
27:6a:78:b9:50:10:0a:bb:bc:8c:47:f6:0e:d9:c2:
8e:f4:4b:0b:4e:4e:d7:d8:03:70:99:b7:a8:a9:ec:
86:4e:3e:72:83:40:e6:6a:ef:38:2c:18:a2:74:fa:
88:c3:da:f4:d9:74:13:f8:cc:e4:65:62:76:a5:bb:
79:61:c8:7e:46:f3:81:b7:fa:32:87:e1:a6:d3:55:
13:a1:c4:1e:8a:df:d9:b7:99:bb:c1:e1:33:15:7e:
4d:a5:81:f8:2d:5d:db:6b:d3:45:74:43:9d:f8:bf:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:55:B4:F3:63:9C:4A:A6:F3:1B:51:3E:D6:28:40:5B:E1:08:AE:98
X509v3 Authority Key Identifier:
keyid:01:8B:20:FF:09:8E:6B:7C:BC:8B:6A:F0:D6:80:06:5E:6B:90:60:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYsg_wmOa3y8i2rw1oAGXmuQYAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a69b42-0f9d-4f3c-a931-9127f429a48d/1/AYsg_wmOa3y8i2rw1oAGXmuQYAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c9:d4:68:c5:6c:3a:da:fb:98:33:a8:ca:07:e0:0c:9d:d4:
c4:81:2c:4c:5e:56:3d:ff:a3:81:aa:92:85:db:85:e7:8b:d0:
20:8a:29:d2:7f:52:ee:e9:93:17:ba:8f:cc:17:0a:cb:de:6d:
69:5d:d0:61:1d:39:15:6b:ab:8c:01:ed:d4:9d:70:1c:cf:d8:
9f:a8:c6:08:ee:05:f6:32:7a:9d:a1:92:8d:25:c1:a8:36:46:
f3:d3:61:32:fc:14:5d:6f:45:96:d3:2a:ea:e7:42:e8:a3:d5:
e4:65:e1:f4:d8:f6:5f:78:6b:d3:6f:90:7c:c4:6e:ef:99:0c:
90:2b:c3:79:ed:82:3c:6f:65:06:0f:e7:f1:e3:25:7c:a5:7d:
2f:97:62:50:01:b5:12:7f:e2:b3:25:7e:73:c5:e5:30:19:53:
6c:23:8b:30:5d:21:a3:36:f8:53:7c:44:4d:7a:4c:1c:40:80:
64:c6:71:e6:5b:c4:90:e9:e9:47:d2:05:46:09:7e:17:2b:e0:
1c:b6:e8:34:0a:3f:7e:8d:14:ad:4f:20:d0:04:eb:e9:21:8d:
d4:b3:04:c7:fb:03:b5:59:ae:b8:ed:66:ef:ed:07:dc:90:9d:
a7:f2:03:03:77:4f:30:cc:63:8d:12:7b:ae:03:f9:4b:63:0b:
e4:40:fb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:38:58 2026 by rpki-client