Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
File: AyHqOVCODhemUf6SrCnqOIMtC_8.mft (raw, json)
Hash identifier: iZhtQBi14KjHvv47SKQyg3UZjnRDUdFUc84BH5IMeRk=
Subject key identifier: 41:76:FE:A1:66:E7:37:80:60:F2:67:19:9B:66:FD:59:C2:E9:F4:12
Authority key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
Certificate issuer: /CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Certificate serial: 01A0E39953AE62E8944EED3377E2A663CB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
Manifest number: 1914
Signing time: Sun 27 Sep 2026 16:01:11 +0000
Manifest this update: Sun 27 Sep 2026 16:01:11 +0000
Manifest next update: Mon 28 Sep 2026 16:01:11 +0000
Files and hashes: 1: 8UGI1s0WR4wlzQNu5QcJqIgdD6o.roa (hash: 0o0yTMQX8eIMkMe3RKQudDE1yMjJHai1D53A4eswsuo=)
2: AyHqOVCODhemUf6SrCnqOIMtC_8.crl (hash: pPUmzoL3rIN5JsnbhCqj+ZG4ryLRZFy1uX99gir2p8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:53:ae:62:e8:94:4e:ed:33:77:e2:a6:63:cb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Validity
Not Before: Sep 27 16:01:11 2026 GMT
Not After : Sep 28 16:01:11 2026 GMT
Subject: CN=4176fea166e7378060f267199b66fd59c2e9f412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:dd:ae:79:00:7f:29:d4:c5:e5:02:25:2e:
e7:16:77:4e:fb:fc:33:32:ae:d7:ae:d3:55:78:e7:
f7:ec:f9:ba:65:03:d3:4b:69:fb:9f:8c:f6:7e:6f:
b0:af:fe:96:76:5e:0f:44:64:84:97:c0:a6:8f:b9:
4a:15:f0:b7:3a:d7:97:56:6e:1f:66:09:1f:27:9c:
a4:bd:47:1e:61:74:44:4f:d8:72:97:dd:8e:19:6f:
fc:86:18:1a:ab:c0:a8:c8:48:83:e9:ee:06:84:0f:
0b:5f:e8:cb:68:91:41:d0:65:3e:9d:c2:61:fa:78:
2f:a1:5c:9d:b4:70:2f:6f:7c:67:b2:b2:16:55:d0:
8f:a4:84:cf:23:4d:ea:ec:0d:ee:88:a6:ce:04:8c:
7c:97:38:88:ed:5a:4a:85:3d:77:c3:a5:ae:28:8e:
3b:15:08:b9:0e:de:59:0d:59:69:c5:fb:91:e5:c3:
8d:7d:38:af:35:9b:f2:4b:8f:35:5e:1f:02:0c:b2:
55:e7:f1:7f:4c:35:67:9f:bc:49:59:83:e4:c7:f1:
6e:e2:77:8e:ef:5c:67:23:f6:b0:9e:eb:29:aa:fa:
f5:01:02:3f:a5:dd:4f:95:dd:cc:c6:38:ab:63:21:
ca:a0:0c:72:9d:6a:cb:ae:a0:c5:ed:57:ca:21:77:
11:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:76:FE:A1:66:E7:37:80:60:F2:67:19:9B:66:FD:59:C2:E9:F4:12
X509v3 Authority Key Identifier:
keyid:03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:32:73:98:7d:ad:01:91:a1:eb:41:60:45:55:7b:aa:9a:fc:
6b:ee:e9:74:cb:c3:17:8b:f9:66:b1:b6:5b:b9:30:ff:03:db:
39:f9:2d:5d:f4:fa:9e:12:75:1f:9b:4d:01:14:3e:e9:72:a4:
b0:0f:5a:4b:20:87:eb:57:e0:e0:25:78:05:87:cc:c5:36:d7:
4c:9f:c6:f5:06:74:da:67:83:2e:72:17:7a:ca:23:d5:f2:22:
71:f2:df:92:b6:43:46:38:57:96:90:c5:54:7c:a9:b9:fa:70:
b1:37:98:ca:72:a0:de:0f:63:e9:bd:ba:47:6a:ae:40:44:ee:
49:c5:3b:60:ae:72:48:f1:4a:38:34:4e:d8:d0:f3:fc:cb:f6:
b7:37:0b:ff:5d:35:6d:9d:42:dd:35:a5:a2:5a:68:07:e1:0e:
3f:96:52:ec:e6:70:3e:39:3f:e7:2a:c1:34:93:be:db:e7:1e:
9e:64:15:5a:15:db:6e:3a:f7:13:dc:43:4d:cf:ea:a7:1e:42:
b7:80:bb:74:15:6e:e1:b7:93:d4:8d:70:7e:3e:cb:ca:27:1b:
82:68:30:11:1f:eb:d1:1d:6f:43:00:7c:97:cb:20:a2:a7:64:
12:ff:c0:c3:54:7b:96:d8:86:60:b4:5b:08:4d:b1:96:62:94:
c4:81:18:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:54:04 2026 by rpki-client