Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft
File: Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft (raw, json)
Hash identifier: xZwDyNjkx3W0ZWQW7OuM3ddxJa72AC5CT9D/gUgA6nM=
Subject key identifier: A7:65:A9:CB:F3:3B:93:FA:32:1B:31:18:30:87:B0:2C:90:72:57:4F
Authority key identifier: 02:3D:05:42:21:08:50:CB:C6:63:96:38:CF:7F:FF:BC:FB:AF:1E:57
Certificate issuer: /CN=023d0542210850cbc6639638cf7fffbcfbaf1e57
Certificate serial: 01A0DF17E8ED0DE019D370BBE09828DF55A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft
Manifest number: 0266
Signing time: Sat 26 Sep 2026 19:01:21 +0000
Manifest this update: Sat 26 Sep 2026 19:01:21 +0000
Manifest next update: Sun 27 Sep 2026 19:01:21 +0000
Files and hashes: 1: Aj0FQiEIUMvGY5Y4z3__vPuvHlc.crl (hash: uvV8nQqaBaSo3J/Q31HDT9CHm9r0bF5FVRCCrTJp/Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:17:e8:ed:0d:e0:19:d3:70:bb:e0:98:28:df:55:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023d0542210850cbc6639638cf7fffbcfbaf1e57
Validity
Not Before: Sep 26 19:01:21 2026 GMT
Not After : Sep 27 19:01:21 2026 GMT
Subject: CN=a765a9cbf33b93fa321b31183087b02c9072574f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:f4:7f:1a:2c:56:bc:c7:02:1f:54:b9:68:
31:66:7b:5b:ba:e3:cb:4a:9d:bf:a6:3d:46:b2:c2:
0d:79:eb:2a:8a:3a:20:f0:d0:61:40:25:1e:b1:70:
5c:11:98:59:d9:8f:9d:ea:1c:1b:18:81:51:9b:4a:
86:4e:8f:d8:e0:0c:81:3f:31:f4:c4:8e:8c:b1:9c:
f3:0e:73:06:f2:39:39:00:7f:8a:d3:1b:4c:d8:b2:
1d:52:a3:4a:7f:e9:2c:de:a3:dc:d1:61:51:7b:d6:
e9:34:3d:80:7d:62:7e:2a:1d:ba:1e:bd:b5:8d:04:
8b:e5:d4:16:81:c5:3d:76:4d:25:59:7f:ae:99:04:
df:fd:b5:b8:85:41:7f:7c:65:f3:a3:ca:eb:a0:53:
ec:2c:fc:fe:3f:55:c2:f6:bc:e3:94:26:57:1f:5d:
21:fa:6e:0d:51:d9:d9:81:39:d0:5c:52:7e:13:cb:
4d:7e:2d:50:23:70:fa:0c:13:1d:ec:94:2f:1f:5a:
87:2a:55:76:f1:f8:7a:34:f8:d9:3f:e0:03:05:05:
07:07:30:92:05:29:26:a0:fb:b9:8a:e5:b5:2f:5b:
22:33:0c:44:13:36:14:94:57:1c:3d:4c:08:55:da:
0f:31:50:04:70:d1:49:75:7b:d7:14:5f:5e:dd:a5:
15:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:65:A9:CB:F3:3B:93:FA:32:1B:31:18:30:87:B0:2C:90:72:57:4F
X509v3 Authority Key Identifier:
keyid:02:3D:05:42:21:08:50:CB:C6:63:96:38:CF:7F:FF:BC:FB:AF:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c1:bc:1c:9c:43:52:d1:f9:0c:f8:2a:cd:9a:20:af:df:6c:
c5:62:6c:4d:89:38:d0:a3:d4:db:f7:ce:6d:71:16:84:5e:7c:
80:6b:bc:90:b6:b9:32:2b:f9:de:c0:a6:8f:2b:57:4e:8c:62:
53:d5:d5:d2:31:5d:f9:37:c8:2a:3c:fb:77:fa:c1:e8:8b:7a:
8f:83:eb:2e:99:11:2e:92:ad:e3:0d:05:50:3b:9f:fb:32:f5:
cc:b3:18:f0:46:eb:28:26:50:9f:af:e8:c7:c4:0f:d2:96:3b:
73:08:06:21:02:84:40:d5:30:d4:ba:3d:ec:77:9a:56:f8:89:
da:73:9c:b2:14:99:b1:9a:0c:8c:bd:f8:00:34:01:3d:6e:7d:
7e:c5:24:91:e9:91:e7:b1:45:a9:07:b3:7b:14:c2:b5:52:45:
5c:f3:5b:64:ee:84:c3:57:16:e7:76:7c:93:60:e0:fa:78:6d:
ae:a5:b1:f7:38:47:13:a8:3e:b3:31:d1:e3:86:1d:75:6d:a0:
76:8f:14:a3:db:54:29:5c:aa:ff:74:19:7f:2b:58:43:a2:c5:
a3:df:f3:0b:26:f6:dd:27:b7:e7:e5:d5:62:a2:cf:8e:db:1d:
13:10:33:da:06:de:e7:75:87:8c:f6:52:f2:ef:c6:9e:13:1d:
38:61:e8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:48:19 2026 by rpki-client