Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: 6Cn+9sdMreCq/G76TmJNPP0pRz4RyvX39Cs2Hpb3HCE=
Subject key identifier: 2B:A7:C1:D8:2E:B7:3A:4F:82:89:EB:3F:3A:94:B7:21:89:97:4D:4A
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 01A0D3EF4580E1401159558F030365D3CD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 11E3
Signing time: Thu 24 Sep 2026 15:01:08 +0000
Manifest this update: Thu 24 Sep 2026 15:01:08 +0000
Manifest next update: Fri 25 Sep 2026 15:01:08 +0000
Files and hashes: 1: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: QaTZ/j5W07kk/J2tAdOQcQJ8X9GSjN1xRKAjvD+2wVs=)
2: s33I9Gm9LhKsvOxTIT5OprmWvh0.roa (hash: YxdzkgTTx+8BroO2XBZzKx1wwcnFfQzh/uzCgxgD0Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:45:80:e1:40:11:59:55:8f:03:03:65:d3:cd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Sep 24 15:01:08 2026 GMT
Not After : Sep 25 15:01:08 2026 GMT
Subject: CN=2ba7c1d82eb73a4f8289eb3f3a94b72189974d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:03:90:4c:ae:01:43:2d:5b:7f:60:58:5b:
51:e9:6a:9a:f8:ec:37:ab:92:af:93:b4:c1:fa:47:
4d:62:12:a7:f7:15:ab:4b:f6:4d:8e:6b:f5:0a:14:
02:76:99:aa:dd:df:6d:cb:c5:fb:4a:30:34:5c:22:
ee:d9:80:1d:f8:3d:d6:e7:33:d4:88:e8:fd:dc:17:
b4:d4:6a:03:21:d5:58:81:11:4c:b5:c9:6d:a5:f8:
6e:99:27:a5:e4:2e:99:4f:e2:9f:ae:44:41:01:01:
c8:e2:f9:74:bd:ba:95:55:1d:17:bb:28:a6:14:07:
98:b8:9a:09:ed:7a:c3:ea:89:e8:27:6c:a7:fd:a9:
3f:62:f8:00:f1:3b:5f:d7:d2:77:89:fe:70:99:e5:
e7:23:88:df:1d:4b:18:89:c7:76:ce:50:94:de:5a:
5b:5a:c2:58:2c:51:20:2a:27:37:5b:7b:7f:a4:67:
0e:93:4b:78:58:88:29:a3:94:16:35:42:bb:71:0d:
36:74:a4:72:2a:11:40:d6:80:30:00:db:0f:1b:e7:
21:39:7e:61:04:3b:4a:c1:e5:e4:8b:61:e3:7f:9b:
5f:11:43:4c:3c:70:24:64:c7:b8:8a:44:29:31:5d:
0a:dc:69:71:c4:05:23:ad:1e:bb:75:35:a2:8d:5f:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A7:C1:D8:2E:B7:3A:4F:82:89:EB:3F:3A:94:B7:21:89:97:4D:4A
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:22:4f:4d:80:ce:c3:e4:d6:da:34:24:40:fb:ff:06:aa:d6:
11:83:df:51:e7:a2:2d:79:5b:07:f9:b8:76:3c:8c:1d:c8:97:
fc:28:fc:10:ce:da:2f:ac:75:c6:7f:d6:06:b6:77:97:a1:17:
f0:83:3d:57:cc:19:12:37:dd:5c:62:17:36:f7:a9:e1:cf:ae:
83:af:9f:de:9b:d1:27:31:5f:3a:fa:4c:1b:92:dc:ec:98:8e:
fa:db:91:18:2b:a6:0b:44:7e:95:ce:57:92:ef:72:25:10:7d:
6c:18:ae:c4:2c:17:88:62:ff:48:80:ad:54:44:37:a8:75:fa:
b2:49:d1:b6:7c:d9:3e:3a:f6:3a:9c:f4:11:9f:b5:98:10:43:
e4:27:54:00:9c:11:88:2e:fd:0b:7c:0a:ea:88:ea:2f:b2:1c:
78:72:b1:7c:ce:c6:0a:a3:97:cd:c4:58:22:16:70:f4:ce:1f:
0c:41:7a:d8:ae:e8:f2:4b:3b:a5:67:ae:e8:23:33:77:8b:f9:
85:1c:89:47:82:9a:15:9a:0a:e5:5d:37:a9:6c:d2:f0:79:10:
de:c9:63:28:8a:30:e0:5d:96:3c:19:e5:ad:4c:54:fe:e6:d6:
f5:38:4f:e2:9d:f1:be:a0:45:1f:12:8d:65:75:46:0f:29:3b:
c6:5c:be:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:15:42 2026 by rpki-client