Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
File: ajqLdK1O1nN5ep9rd0nCI0VpedA.mft (raw, json)
Hash identifier: Bo2Wcse09CJ4diCvTEJNooNK6HooR+XHgds6uiGeKT0=
Subject key identifier: B9:E5:6A:31:AA:1F:D1:97:51:86:0B:27:E8:A7:79:EA:BC:43:07:9F
Authority key identifier: 6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
Certificate issuer: /CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
Certificate serial: 01A0E02AEB0CF682112503001B4F579C4C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
Manifest number: 1937
Signing time: Sun 27 Sep 2026 00:01:44 +0000
Manifest this update: Sun 27 Sep 2026 00:01:44 +0000
Manifest next update: Mon 28 Sep 2026 00:01:44 +0000
Files and hashes: 1: WiR_mQTYvksNuDh5PyOkyT_J_1s.roa (hash: zaouvXmVUtph8h3UF1IqoXJQFtK55FqMyr4EuKbD7oI=)
2: ajqLdK1O1nN5ep9rd0nCI0VpedA.crl (hash: hrcL3y2bb7FouDJYMa3TETx2Nrn8tKvHl+PtlkocWag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:eb:0c:f6:82:11:25:03:00:1b:4f:57:9c:4c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
Validity
Not Before: Sep 27 00:01:44 2026 GMT
Not After : Sep 28 00:01:44 2026 GMT
Subject: CN=b9e56a31aa1fd19751860b27e8a779eabc43079f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3f:07:df:eb:cc:8f:1c:b8:6c:97:54:f1:4b:
9a:05:62:b1:95:48:dd:c9:15:f6:f7:12:7b:dd:93:
82:18:14:a5:7e:1b:ed:4c:bf:e8:5c:e2:cc:a4:28:
67:24:9e:a7:b0:db:7e:1b:f0:98:ed:1b:d3:23:c5:
8f:4e:4d:26:3d:ad:dd:4e:d4:48:32:c0:c4:04:0e:
91:05:3f:bd:a5:90:ca:87:1c:89:f3:d9:9a:e1:fc:
af:11:c0:83:a7:09:61:a3:7f:81:df:0c:a1:4a:04:
7e:6e:b6:e7:cf:89:0e:c4:c2:14:ce:f0:bb:31:de:
47:13:9e:b7:8f:6e:ca:1f:27:5c:da:51:f1:7a:c7:
2b:9d:06:00:ba:fa:5e:a9:19:52:13:84:bb:80:32:
f7:c8:42:5a:66:f2:94:29:ca:6d:c2:70:94:e4:2c:
ae:bc:d1:9f:6e:fa:bd:7d:09:93:d0:05:eb:05:b7:
b9:f3:d3:6a:1b:3c:8a:69:31:08:6f:17:bf:71:4b:
00:df:6f:3b:16:f6:79:40:d2:73:5d:b1:07:07:73:
50:c1:9d:6a:50:72:bf:f5:f0:e6:ac:41:a1:16:80:
91:9c:03:08:9d:ef:b6:88:1f:93:9a:96:a0:77:6b:
ab:8e:72:d4:70:f3:ac:48:8f:9a:cd:cc:a3:c1:51:
03:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E5:6A:31:AA:1F:D1:97:51:86:0B:27:E8:A7:79:EA:BC:43:07:9F
X509v3 Authority Key Identifier:
keyid:6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2b:52:e8:68:55:80:ab:2c:f7:df:6f:f7:c5:fd:16:1e:57:
fa:57:e1:d0:84:28:66:69:f3:4e:8c:90:7e:c4:83:f2:1b:c1:
6c:90:88:d5:72:b0:73:53:e7:3e:a7:7b:58:76:ce:e5:63:79:
65:33:84:ba:40:fb:4f:d7:4e:30:63:cf:30:a7:8a:0b:54:80:
42:2f:49:5c:49:ce:81:da:b5:25:dc:d2:0c:68:fc:d1:e9:87:
63:9a:a2:3c:07:8b:ff:17:73:96:45:3a:ec:d8:4c:e6:c7:ea:
cc:1a:bc:41:e3:16:91:60:1c:66:09:b7:7c:4b:a0:98:c4:a1:
a4:4b:d2:dd:78:4b:68:30:41:b7:1c:7a:4a:38:26:f5:9a:1d:
c1:98:3e:f4:d4:ad:8c:11:f0:82:c8:64:e2:db:47:3a:1a:9d:
06:4d:e6:6b:5e:28:d6:20:57:f6:d5:4c:8c:ea:4d:d4:dc:1d:
d4:79:30:ce:3b:fd:7b:f2:9c:8f:a7:61:3a:03:8c:99:8f:09:
5a:d5:29:d1:18:96:c7:6f:67:12:dd:b1:dd:9a:92:7c:a2:bd:
f3:9a:c1:a7:b9:95:20:a6:5f:85:fa:71:b7:e0:bd:02:6f:6b:
57:9f:5b:37:f4:3a:ea:69:87:09:b1:61:74:5c:6d:87:92:e8:
a4:28:8e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:13:45 2026 by rpki-client