Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/AjZvGu7zHF6R5JAmsD50cMzhV40.mft
File: AjZvGu7zHF6R5JAmsD50cMzhV40.mft (raw, json)
Hash identifier: +V7LcSeEZfLeyTfxphurGZKsBSd/w9DorrlfI3cBIOw=
Subject key identifier: BA:C1:AE:63:17:AB:AA:55:B4:8C:5D:F9:14:0C:D5:24:B5:FA:D5:C4
Authority key identifier: 02:36:6F:1A:EE:F3:1C:5E:91:E4:90:26:B0:3E:74:70:CC:E1:57:8D
Certificate issuer: /CN=02366f1aeef31c5e91e49026b03e7470cce1578d
Certificate serial: 01A0CBFE7ADE64FB15B33F6971613B9F2453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjZvGu7zHF6R5JAmsD50cMzhV40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/AjZvGu7zHF6R5JAmsD50cMzhV40.mft
Manifest number: AC
Signing time: Wed 23 Sep 2026 02:00:47 +0000
Manifest this update: Wed 23 Sep 2026 02:00:47 +0000
Manifest next update: Thu 24 Sep 2026 02:00:47 +0000
Files and hashes: 1: AjZvGu7zHF6R5JAmsD50cMzhV40.crl (hash: lWgISGGx72/a2TR1Z+s3+NSoDngxjyWgmu33ReNUzUo=)
2: oSP6Cf5NdjV4FXONxXvfRs-_8oY.roa (hash: w81hP+JqsQQtt62EYNuMoUw8Xp8nPiV4FHGOWRy41w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/AjZvGu7zHF6R5JAmsD50cMzhV40.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/AjZvGu7zHF6R5JAmsD50cMzhV40.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjZvGu7zHF6R5JAmsD50cMzhV40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:7a:de:64:fb:15:b3:3f:69:71:61:3b:9f:24:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02366f1aeef31c5e91e49026b03e7470cce1578d
Validity
Not Before: Sep 23 02:00:47 2026 GMT
Not After : Sep 24 02:00:47 2026 GMT
Subject: CN=bac1ae6317abaa55b48c5df9140cd524b5fad5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:78:9a:71:7a:33:b9:5d:45:ee:72:b7:4a:
29:bd:84:14:bd:e0:be:41:7f:ff:f0:cf:04:10:74:
2c:22:97:aa:3b:bf:94:6f:38:d1:3b:5b:5b:1d:30:
1c:a6:fb:96:0f:fa:ab:29:c6:b7:6d:a4:1a:86:3d:
d8:96:13:ca:8e:4b:e3:29:91:60:6f:42:f8:39:03:
c5:06:c2:76:96:19:98:46:46:54:5f:8a:e9:19:d8:
19:42:70:a0:ed:0e:aa:c1:7f:30:3a:f1:4b:7d:d8:
57:dc:c9:34:54:8b:b0:85:7f:f2:9e:12:2d:4b:a2:
e3:cb:5f:b3:5b:be:72:c9:7a:46:69:4e:c6:cb:30:
7e:4e:b8:be:79:15:71:9e:9b:05:b4:77:af:c1:f5:
bb:de:18:1f:18:30:26:57:ee:7e:1a:c3:5b:9f:7f:
b1:44:37:b6:1a:ee:42:16:f5:fe:28:20:bc:b1:13:
60:d4:52:4f:ad:87:f2:cc:d9:a4:27:d6:1f:02:82:
ba:88:b2:84:8f:c6:d7:b4:bc:6b:a2:2d:f7:06:e8:
9f:bc:0f:53:68:2e:d5:f8:8a:a4:0b:59:ab:d4:f4:
2e:13:4e:da:bb:21:87:ad:72:31:6e:fa:a2:ab:f3:
8f:cd:4d:e7:ed:8c:6d:9d:7a:8c:e9:f8:20:35:19:
82:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C1:AE:63:17:AB:AA:55:B4:8C:5D:F9:14:0C:D5:24:B5:FA:D5:C4
X509v3 Authority Key Identifier:
keyid:02:36:6F:1A:EE:F3:1C:5E:91:E4:90:26:B0:3E:74:70:CC:E1:57:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjZvGu7zHF6R5JAmsD50cMzhV40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/AjZvGu7zHF6R5JAmsD50cMzhV40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/AjZvGu7zHF6R5JAmsD50cMzhV40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:12:12:9d:19:29:62:c2:2a:b6:60:ca:b2:76:b8:c0:48:6a:
6d:d7:23:89:4d:2b:46:af:bd:1f:ef:23:d3:77:51:28:c7:ed:
e6:6c:81:5c:18:6c:55:9c:0f:d0:6e:77:42:8c:1c:9d:39:df:
6d:81:87:99:cc:df:13:0e:9a:03:7a:9a:6f:f3:53:69:76:8a:
d3:3e:95:6f:59:26:1b:89:0f:ce:6d:a2:34:26:fb:62:a4:e6:
36:7b:bc:56:42:4e:f9:31:4f:3c:70:27:a6:21:cb:23:6e:9a:
10:cd:ae:22:62:3f:aa:72:34:66:35:07:73:e4:bb:bf:11:7e:
f9:e0:c8:c9:6f:9f:0e:6d:8d:ca:4a:84:e6:9a:e6:c9:42:ac:
bc:0c:ff:b3:26:5f:e5:6c:b0:f1:07:9a:16:77:82:0f:c7:62:
a9:7d:3a:3e:d9:2e:ef:e0:7e:61:91:65:73:29:08:53:16:5d:
88:34:77:ae:1b:17:68:85:f1:d3:78:f3:58:43:4e:93:c8:a2:
ba:8d:51:7f:f2:30:f3:a8:65:0f:a7:2e:60:fe:cd:5f:be:f5:
e9:6c:a0:b3:43:a2:26:0b:a8:ba:db:d3:77:0c:20:f7:90:92:
fd:86:3b:7f:3a:79:84:2d:37:51:ba:d5:a4:b4:d6:76:76:75:
9d:bb:e1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:29:07 2026 by rpki-client