Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: EJhSy8DA1Ve4uA4k8EPThFs+La5P02L+R0WzJobENxA=
Subject key identifier: 9B:C9:43:11:18:DD:CE:D3:58:BE:43:33:97:FC:42:57:C2:10:A2:61
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 01A0F8A9A6B237655C865440C18CADCC60A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 11F6
Signing time: Thu 01 Oct 2026 18:11:02 +0000
Manifest this update: Thu 01 Oct 2026 18:11:02 +0000
Manifest next update: Fri 02 Oct 2026 18:11:02 +0000
Files and hashes: 1: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: lyvugDUacMDSwFapjePhDWCvdK9ifEL+L618tfmN6kA=)
2: s33I9Gm9LhKsvOxTIT5OprmWvh0.roa (hash: YxdzkgTTx+8BroO2XBZzKx1wwcnFfQzh/uzCgxgD0Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:a9:a6:b2:37:65:5c:86:54:40:c1:8c:ad:cc:60:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Oct 1 18:11:02 2026 GMT
Not After : Oct 2 18:11:02 2026 GMT
Subject: CN=9bc9431118ddced358be433397fc4257c210a261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:26:f4:cb:64:05:a2:48:89:28:b5:87:f9:83:
d1:fe:e9:10:5a:c9:ef:19:0c:fe:6f:ba:47:8a:76:
30:6a:1f:fc:15:ca:42:f6:d9:43:17:bb:34:0b:af:
c5:90:e2:63:c5:83:4f:19:64:89:c9:6e:0c:cd:33:
a9:29:a0:da:3d:b9:da:9a:05:2d:97:2e:19:c5:62:
98:5d:03:6e:7e:ff:66:5b:65:89:3a:83:99:ab:43:
ae:d3:90:3c:02:26:60:f1:a6:0b:18:97:7c:16:dc:
e9:9c:01:da:77:cf:da:d8:18:4d:0a:d5:27:d8:6c:
23:65:d7:8b:4a:3a:cc:be:50:64:23:5f:a5:ed:8c:
5b:e5:b4:c9:85:0f:87:0d:2f:e9:63:75:f9:10:b2:
61:6f:63:c6:b0:59:bb:29:56:61:c5:83:ca:ed:b2:
ce:80:f9:21:71:d9:be:77:49:a5:a8:f0:af:96:6c:
8a:44:30:bf:88:73:8c:f3:ec:97:e8:8d:3b:bb:b8:
5a:78:50:cf:21:35:0e:7f:73:d9:b9:5f:3c:18:ee:
0f:6b:7b:e6:f4:89:9f:e3:da:63:8e:9d:7c:4b:22:
a9:86:c6:1e:45:a0:f6:7d:28:b7:0a:d7:e5:e6:f8:
0e:97:54:41:58:08:78:06:6b:97:8f:59:af:7c:aa:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C9:43:11:18:DD:CE:D3:58:BE:43:33:97:FC:42:57:C2:10:A2:61
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e8:37:c3:01:c2:c6:46:6e:ba:49:88:39:38:a9:02:3d:2e:
1b:36:d8:c0:39:a7:5c:aa:9f:20:0a:8a:3e:36:77:db:09:5e:
90:01:ef:a7:bd:ef:b2:c3:81:cf:2e:69:30:c5:0a:7c:63:fe:
de:67:c7:d2:0d:f8:49:9d:31:e2:fd:ac:11:e8:65:c1:1c:a3:
77:36:f1:af:e0:8e:50:8f:02:ce:f1:88:83:e1:3b:47:35:e9:
c3:f9:dd:38:84:7c:17:fd:68:31:34:d1:d6:f9:24:10:2a:c2:
11:7c:f0:2e:05:9f:5a:79:24:31:48:aa:05:38:65:f3:82:6b:
3c:91:1d:a7:a5:6b:88:b9:e1:b2:f9:3a:15:e2:9c:c2:67:de:
6f:ef:47:1d:8a:22:ea:95:d3:e9:98:dc:12:e6:13:2c:88:a6:
02:4e:33:ea:09:31:8f:f5:64:62:b3:54:9c:0a:82:fe:c0:ab:
7d:9c:21:10:a5:32:13:84:56:9e:c8:ea:6e:c2:9e:0f:42:cc:
f6:a7:ad:fc:89:45:01:81:3b:85:4a:54:20:59:e4:ec:82:72:
48:9a:34:4f:1f:41:ce:45:55:bd:a6:51:69:41:d5:8a:13:5a:
d3:2b:10:38:a5:2b:5f:16:68:ef:3a:0b:26:22:b7:ad:99:c9:
ad:a3:93:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 07:57:04 2026 by rpki-client