Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: BTyxVUHfixuAETVd8afPUedWLAkjstDq5doT6zAHzVQ=
Subject key identifier: 10:3A:CB:8C:D6:B3:A9:E1:C2:0B:58:C8:1F:F9:A0:1C:AC:53:1C:90
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 019F935B194A87CBDBA4B7EE87C53630BB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 113D
Signing time: Fri 24 Jul 2026 09:00:48 +0000
Manifest this update: Fri 24 Jul 2026 09:00:48 +0000
Manifest next update: Sat 25 Jul 2026 09:00:48 +0000
Files and hashes: 1: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: pgErZttrZ3qHPah0ruibIjFsznTdUTuzUJVSArjTTzE=)
2: s33I9Gm9LhKsvOxTIT5OprmWvh0.roa (hash: YxdzkgTTx+8BroO2XBZzKx1wwcnFfQzh/uzCgxgD0Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:19:4a:87:cb:db:a4:b7:ee:87:c5:36:30:bb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Jul 24 09:00:48 2026 GMT
Not After : Jul 25 09:00:48 2026 GMT
Subject: CN=103acb8cd6b3a9e1c20b58c81ff9a01cac531c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:aa:c9:72:84:af:b0:0a:17:b0:d4:32:52:
91:a1:13:b4:b7:ef:26:7f:40:46:b7:a6:c8:47:f3:
a3:c4:c4:e9:0f:91:45:d9:85:de:3a:a9:15:2e:92:
fe:4e:21:c8:3f:87:3c:fe:6a:51:b3:99:8b:f6:bc:
8a:39:16:33:6e:3b:ac:68:af:31:6a:88:11:83:5a:
00:e4:1d:e2:c8:b3:e8:3d:5e:a4:05:cf:29:d1:cd:
76:bc:33:1b:a9:50:c6:4d:0e:61:c8:03:c5:dc:fd:
67:f1:28:51:b0:01:2c:5d:02:12:4d:7a:50:9c:91:
d3:84:b1:c3:be:3b:39:a3:27:c2:c8:f8:e6:7a:cc:
db:93:2c:28:01:44:12:eb:77:13:06:ac:b1:5b:f6:
40:82:b5:5a:c6:d9:62:b3:ab:27:0f:05:b3:7b:eb:
5d:1a:4e:92:99:f9:ce:64:fd:15:b0:85:99:1e:4d:
aa:07:83:e3:2a:fc:e8:4a:be:65:ee:4f:0a:e7:be:
81:e7:6c:26:49:e0:b6:cf:d8:2a:a8:4c:68:07:9e:
20:ca:a9:03:87:a7:a7:3a:d1:73:06:93:a8:58:3c:
76:74:18:24:dd:83:a3:54:8b:39:cb:14:17:61:89:
b2:f7:ca:6d:13:e5:53:32:49:ed:7d:d0:8f:b1:c8:
7b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3A:CB:8C:D6:B3:A9:E1:C2:0B:58:C8:1F:F9:A0:1C:AC:53:1C:90
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:78:79:a0:30:21:05:c1:f0:6d:13:f6:55:e2:46:5f:f5:f0:
1a:33:66:3c:eb:02:06:69:68:28:e6:16:79:9c:80:f6:e9:18:
3b:95:97:42:de:d3:db:e3:57:60:bd:2b:d6:dc:23:b1:b1:2a:
1f:4c:5e:48:8c:7c:8d:6c:c4:25:13:98:4e:a6:7d:b9:c9:33:
fd:0c:21:8d:33:a7:c7:73:d9:8e:56:a4:d3:75:72:0e:f1:7f:
f1:85:94:18:f3:11:6b:bb:f0:4c:d8:f7:fc:13:98:a7:74:63:
3c:35:88:fc:f4:94:4e:b5:b2:62:4c:d0:49:5c:74:ac:d5:66:
47:b9:ce:45:25:c2:bc:ed:6a:cb:93:ee:e4:5c:a8:62:28:72:
43:81:95:af:b4:b4:80:c0:e0:1e:d5:9e:64:1b:0f:7a:b0:d2:
07:b2:5d:21:1d:68:81:7f:69:b7:b5:84:8c:39:c6:7c:db:38:
2d:76:72:5a:a7:99:92:02:47:91:4f:47:b3:cb:69:23:03:8e:
ee:b4:d7:f5:4b:9b:40:53:d2:05:f8:27:ae:e9:4d:25:99:c8:
3e:44:13:68:10:88:f1:fc:4e:89:d3:88:c9:5f:6a:dc:88:93:
96:dc:f8:c8:8d:f8:2c:6f:71:8c:88:e6:d8:1e:41:d4:b9:9b:
21:d6:c6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:36:13 2026 by rpki-client