Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: ryAs+7HdPhT/VtSXyYvpCT5bhzXfNOY9BsxgDQfFu0Y=
Subject key identifier: 82:23:66:A2:38:37:DC:ED:3F:2C:DD:BA:60:C7:22:EC:D8:3E:42:86
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 019D258407973D2DBEB6EB28A5E0B8A8C527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 0FFB
Signing time: Wed 25 Mar 2026 15:01:42 +0000
Manifest this update: Wed 25 Mar 2026 15:01:42 +0000
Manifest next update: Thu 26 Mar 2026 15:01:42 +0000
Files and hashes: 1: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: TIkU6n3H8nLyAVJNOcaNPcVg6yktBrKQLzmv7T+MdH8=)
2: s33I9Gm9LhKsvOxTIT5OprmWvh0.roa (hash: YxdzkgTTx+8BroO2XBZzKx1wwcnFfQzh/uzCgxgD0Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:07:97:3d:2d:be:b6:eb:28:a5:e0:b8:a8:c5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Mar 25 15:01:42 2026 GMT
Not After : Mar 26 15:01:42 2026 GMT
Subject: CN=822366a23837dced3f2cddba60c722ecd83e4286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:eb:b4:4c:fc:d8:a2:77:f8:e7:e2:99:ad:
55:03:8d:bf:ad:0c:dd:2e:96:da:ae:00:e3:ee:b5:
01:f0:c2:4f:41:da:73:a2:c1:d1:dc:98:18:e4:39:
78:cb:bf:f4:d5:fb:d5:39:2b:99:c5:ea:47:0f:e9:
fa:4d:df:e3:04:8d:68:6e:e5:21:aa:ab:88:8c:b9:
69:a4:b9:45:a3:47:f4:dd:cd:71:6b:c5:c2:3d:42:
9e:b0:a1:29:58:bc:b0:4b:c1:b6:d9:d6:34:7f:d5:
a4:8b:12:69:be:ee:55:66:0c:42:78:4d:84:6b:db:
7a:ef:61:d1:62:18:b6:62:c0:44:c4:16:2f:59:3f:
8b:de:b9:e1:ad:44:68:fa:3a:e2:0f:d3:68:a4:69:
c0:2e:ad:4c:b4:70:69:76:77:23:9b:75:82:bf:fb:
2f:7a:d8:9d:99:4a:d4:03:32:3b:27:ac:9e:eb:f9:
2c:c9:27:0d:7e:a7:11:fc:67:70:ef:05:29:dd:c0:
b1:6e:1a:da:ed:8a:9a:bb:d5:a4:aa:3d:01:da:a4:
e0:90:51:09:ce:e3:49:b1:f5:2b:6a:ff:cb:94:f6:
82:97:b9:d1:97:df:79:c8:df:27:93:46:e3:58:01:
d2:59:f0:78:9a:71:fe:4d:31:ac:f1:89:d2:be:e1:
7d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:23:66:A2:38:37:DC:ED:3F:2C:DD:BA:60:C7:22:EC:D8:3E:42:86
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f3:57:11:be:50:14:ad:e6:3c:52:27:4d:98:4f:f0:4b:9d:
e0:a7:94:f9:07:52:2b:61:36:13:f1:06:b2:e8:32:5e:19:8f:
ab:66:97:e6:8e:5e:47:d0:d8:cf:68:49:49:20:00:d1:4b:ba:
98:9d:d1:38:d8:fa:28:87:2b:95:77:ce:62:16:f0:82:da:fe:
8b:28:35:7b:73:8b:6a:d7:f7:19:7c:ba:08:91:4f:0f:7a:3e:
0d:27:82:f0:a7:0f:07:dd:e2:79:06:62:59:19:1f:b6:c3:0d:
40:0e:71:5a:39:04:db:33:da:ed:e6:ef:f7:82:c2:ed:87:8b:
a7:2a:57:05:37:01:cd:4c:40:4d:95:77:05:31:a5:df:66:22:
f5:bf:cb:f4:95:ed:3f:a7:60:50:b1:3c:e8:55:bf:11:fe:da:
a7:c4:bd:8a:0b:e2:d1:5d:9f:eb:b3:98:9f:d8:08:24:97:30:
b2:70:5a:b8:ee:67:ab:66:0d:dc:42:c7:b3:2d:70:fc:60:6c:
5f:8d:b5:81:42:35:99:bc:86:29:e8:80:1b:73:65:e5:b2:49:
ac:ca:19:59:62:37:eb:e1:5e:34:64:9b:68:c3:df:f6:f9:47:
43:a5:be:02:92:d5:9e:23:fd:ef:dd:76:74:36:eb:e1:44:38:
f1:47:29:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lhAeXPS2+tusopeC4qMUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMzc5ODIyMDdlNjJkZWQwNjkxZGNiMThlZjZlYTMyZDQx
M2YzZjYwHhcNMjYwMzI1MTUwMTQyWhcNMjYwMzI2MTUwMTQyWjAzMTEwLwYDVQQD
Eyg4MjIzNjZhMjM4MzdkY2VkM2YyY2RkYmE2MGM3MjJlY2Q4M2U0Mjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk/rtEz82KJ3+Ofima1VA42/rQzd
LpbargDj7rUB8MJPQdpzosHR3JgY5Dl4y7/01fvVOSuZxepHD+n6Td/jBI1obuUh
qquIjLlppLlFo0f03c1xa8XCPUKesKEpWLywS8G22dY0f9WkixJpvu5VZgxCeE2E
a9t672HRYhi2YsBExBYvWT+L3rnhrURo+jriD9NopGnALq1MtHBpdncjm3WCv/sv
etidmUrUAzI7J6ye6/ksyScNfqcR/Gdw7wUp3cCxbhra7Yqau9Wkqj0B2qTgkFEJ
zuNJsfUrav/LlPaCl7nRl995yN8nk0bjWAHSWfB4mnH+TTGs8YnSvuF9mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIjZqI4N9ztPyzdumDHIuzYPkKGMB8GA1UdIwQY
MBaAFGo3mCIH5i3tBpHcsY726jLUE/P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iODExZDUtYmEzNS00MjNkLTg2MmYt
MjM1MzE2NTRlNTg5LzEvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9iODExZDUtYmEzNS00MjNkLTg2MmYtMjM1MzE2NTRlNTg5
LzEvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfNXEb5Q
FK3mPFInTZhP8Eud4KeU+QdSK2E2E/EGsugyXhmPq2aX5o5eR9DYz2hJSSAA0Uu6
mJ3RONj6KIcrlXfOYhbwgtr+iyg1e3OLatf3GXy6CJFPD3o+DSeC8KcPB93ieQZi
WRkftsMNQA5xWjkE2zPa7ebv94LC7YeLpypXBTcBzUxATZV3BTGl32Yi9b/L9JXt
P6dgULE86FW/Ef7ap8S9igvi0V2f67OYn9gIJJcwsnBauO5nq2YN3ELHsy1w/GBs
X421gUI1mbyGKeiAG3Nl5bJJrMoZWWI36+FeNGSbaMPf9vlHQ6W+ApLVniP97912
dDbr4UQ48UcpTg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:31 2026 by rpki-client