Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
File: AyHqOVCODhemUf6SrCnqOIMtC_8.mft (raw, json)
Hash identifier: cq1bGpMdLTv9m2Ikkf8XLjMM9DPAekFN/pZ5GZlxw+4=
Subject key identifier: 7C:D3:E8:9F:F7:D9:A5:79:6D:47:DF:13:9C:3E:C5:C6:60:E9:AB:23
Authority key identifier: 03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
Certificate issuer: /CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Certificate serial: 019FA8CFD4446EC31E7EDBE3ABA297C1EE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
Manifest number: 1871
Signing time: Tue 28 Jul 2026 13:00:20 +0000
Manifest this update: Tue 28 Jul 2026 13:00:20 +0000
Manifest next update: Wed 29 Jul 2026 13:00:20 +0000
Files and hashes: 1: 8UGI1s0WR4wlzQNu5QcJqIgdD6o.roa (hash: 0o0yTMQX8eIMkMe3RKQudDE1yMjJHai1D53A4eswsuo=)
2: AyHqOVCODhemUf6SrCnqOIMtC_8.crl (hash: HuRMrft/Jle2FbggHXLjsTPYfk+b+cbLakgQSMThbNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:cf:d4:44:6e:c3:1e:7e:db:e3:ab:a2:97:c1:ee:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0321ea39508e0e17a651fe92ac29ea38832d0bff
Validity
Not Before: Jul 28 13:00:20 2026 GMT
Not After : Jul 29 13:00:20 2026 GMT
Subject: CN=7cd3e89ff7d9a5796d47df139c3ec5c660e9ab23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:96:9e:66:e0:fa:e4:19:b9:e3:30:bb:5c:
4c:f0:48:3e:7c:fb:e6:40:56:6b:11:ca:11:17:80:
0f:60:08:c0:94:66:bd:3f:b4:62:7a:34:e0:80:53:
54:52:6f:8b:28:b5:8a:f9:fc:7f:28:77:28:4c:69:
61:c2:dc:0f:f8:9b:dc:45:1d:83:2a:f1:a8:82:74:
d0:17:ab:60:38:33:90:73:eb:cc:62:d6:50:bf:54:
e4:5a:e5:d0:53:0e:35:78:2c:82:e2:a2:0b:2e:5c:
fa:a3:f5:5c:39:9e:ac:c9:13:86:64:57:d9:9a:22:
4f:31:22:8d:d1:88:76:52:83:2b:9a:95:25:40:3e:
5a:38:66:1d:e3:cb:2f:11:9f:d8:6e:8c:d6:35:99:
09:ba:c6:34:e2:8e:29:36:43:24:53:dc:51:c2:7c:
ad:fe:ab:92:f4:f6:7b:8a:c3:97:42:4b:5e:ae:99:
5e:7f:ff:87:6b:d3:25:9f:5c:7e:c8:03:91:6d:41:
88:fc:bc:95:3f:16:7b:ab:44:22:ca:de:b0:a9:d6:
38:36:79:a1:02:08:90:45:38:e3:2d:6a:c7:1b:cf:
91:bc:b0:90:db:e2:22:6e:2c:f0:dd:ca:78:a2:c6:
36:3d:a2:ad:6e:04:9a:f2:87:ac:25:55:40:96:d0:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D3:E8:9F:F7:D9:A5:79:6D:47:DF:13:9C:3E:C5:C6:60:E9:AB:23
X509v3 Authority Key Identifier:
keyid:03:21:EA:39:50:8E:0E:17:A6:51:FE:92:AC:29:EA:38:83:2D:0B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyHqOVCODhemUf6SrCnqOIMtC_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c4817e-8281-42f7-9f4d-8cf805511002/1/AyHqOVCODhemUf6SrCnqOIMtC_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0b:0b:6b:38:d0:ed:aa:c2:fd:41:ee:a1:f6:10:b5:64:9a:
52:51:c5:c6:45:b4:da:83:da:27:3b:96:6b:09:95:64:88:47:
de:47:83:17:f4:30:dc:6b:8a:72:2d:a3:d3:1a:dc:f3:3c:7b:
f2:68:48:82:80:71:c6:89:c4:fd:b0:2c:98:f4:3c:df:d1:9b:
84:a1:6e:7b:ee:4c:57:38:c0:36:a8:ed:aa:dc:26:21:1f:e8:
be:86:c8:56:35:13:5e:3d:54:7f:56:3c:7a:6f:15:b1:1c:59:
17:1e:72:d5:59:55:f6:d0:ea:b5:5f:76:d6:e2:db:be:88:42:
7f:ad:87:02:4b:36:a1:1d:5d:21:3f:70:d3:b6:4d:d5:f1:80:
c4:85:ba:94:74:10:bd:1d:fe:8a:cf:2c:46:97:1a:cc:3e:b4:
87:eb:4d:41:3b:e4:a1:c5:1a:7f:62:fa:14:82:d0:c9:f6:79:
7e:6b:9f:2e:e2:88:7a:34:66:79:ef:42:33:39:22:bc:cb:62:
0a:bb:f0:61:13:83:98:bd:c0:24:db:7a:d6:dd:89:50:ca:bd:
15:1a:cc:34:ab:7e:04:5d:fe:68:97:d3:7b:50:af:f5:d9:71:
2e:b6:82:2f:c4:e4:9f:3e:47:67:7f:01:9a:57:79:48:bd:f3:
cd:84:7a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:55:38 2026 by rpki-client