Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
File: ajqLdK1O1nN5ep9rd0nCI0VpedA.mft (raw, json)
Hash identifier: NaU6f/dzhw3U2Zb4NS4UFYipynkf9/SrHaqxt/v+IoE=
Subject key identifier: 0E:7D:45:18:BF:B0:EB:03:B1:E5:3A:88:40:AD:44:80:CD:8D:EA:C7
Authority key identifier: 6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
Certificate issuer: /CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
Certificate serial: 019FAB2C25A3D78E804FF734F32A761FE691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
Manifest number: 1897
Signing time: Wed 29 Jul 2026 00:00:24 +0000
Manifest this update: Wed 29 Jul 2026 00:00:24 +0000
Manifest next update: Thu 30 Jul 2026 00:00:24 +0000
Files and hashes: 1: WiR_mQTYvksNuDh5PyOkyT_J_1s.roa (hash: zaouvXmVUtph8h3UF1IqoXJQFtK55FqMyr4EuKbD7oI=)
2: ajqLdK1O1nN5ep9rd0nCI0VpedA.crl (hash: GL6nyIByB5862Vp6MZh5ATnghgKRgumv2XGF2OalyYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:25:a3:d7:8e:80:4f:f7:34:f3:2a:76:1f:e6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
Validity
Not Before: Jul 29 00:00:24 2026 GMT
Not After : Jul 30 00:00:24 2026 GMT
Subject: CN=0e7d4518bfb0eb03b1e53a8840ad4480cd8deac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:72:d6:3b:2a:65:90:71:dd:aa:8c:87:aa:
0e:98:54:dd:d3:2d:4b:59:2f:86:3e:d5:a3:e6:47:
3e:cc:00:7f:2f:8e:2c:a5:c6:c8:35:3c:66:9f:2c:
45:fd:c9:42:46:aa:8e:d5:b9:b1:b0:7c:44:00:1d:
8d:92:25:ad:de:b6:b3:68:64:00:07:f5:2c:e0:93:
bc:ab:bd:b2:c2:43:35:70:a8:7a:34:08:b1:44:1f:
dc:c1:e8:18:78:9a:47:4e:4f:30:e3:da:31:40:fc:
9c:be:6f:d1:fc:0c:db:5b:85:e7:cf:58:1e:ff:a9:
d2:5e:c3:c8:f4:8c:1d:cd:7d:1b:64:28:28:32:cc:
5a:ed:1a:15:7e:bc:cc:90:80:80:df:e8:e3:d3:93:
0d:a2:ab:97:d0:74:c2:a3:fa:f8:58:89:80:c9:00:
82:dd:d6:0f:65:f3:09:9e:df:c8:3f:a1:53:55:29:
db:dd:13:77:c1:3d:aa:2e:bd:df:67:18:4d:27:39:
df:e9:aa:52:ed:56:e0:16:94:ce:c9:a2:0a:f0:b2:
3a:35:27:bb:f4:61:55:4f:65:80:fa:c7:1b:2d:14:
ab:88:7f:d1:a4:61:56:06:79:17:56:91:62:58:61:
f7:61:d3:e4:9b:70:37:68:c1:9e:6b:6a:a7:b5:a6:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7D:45:18:BF:B0:EB:03:B1:E5:3A:88:40:AD:44:80:CD:8D:EA:C7
X509v3 Authority Key Identifier:
keyid:6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4a:7e:04:0a:9a:c4:8e:cb:3d:f4:bb:a8:d1:02:80:ca:dd:
f6:01:a4:44:fe:6f:ac:98:b2:16:88:40:d4:2a:af:36:6c:35:
02:2e:2f:16:67:d1:2a:05:e3:35:52:55:3b:d9:7f:e5:11:ca:
c8:f9:cb:68:75:c1:84:a8:3c:5c:ca:81:b2:dc:35:f0:ef:a4:
25:2c:e3:aa:b4:f8:b2:5b:18:3c:f4:e6:10:3d:2f:1a:21:3c:
84:da:90:28:5e:37:ff:de:d3:0f:3c:8f:1b:f8:6c:d1:38:31:
3e:c3:98:4f:3b:bb:0a:48:45:c6:b4:07:3f:70:b6:d2:80:21:
a5:1a:63:54:cb:fe:bf:34:df:64:a1:77:af:7e:a1:a1:bf:78:
dc:40:b5:a4:fd:f7:50:0e:e7:54:fa:fc:8b:33:57:45:68:72:
3e:87:9e:76:e5:48:95:69:e5:5e:da:bc:ac:13:db:2d:29:0d:
b5:03:f6:f9:67:4e:96:e3:4c:64:f6:35:5c:10:24:e3:90:d8:
ba:65:5f:44:27:47:15:2d:77:02:fa:81:d4:46:56:9a:36:a3:
2a:bb:d6:f7:04:83:88:67:d0:7f:ae:ad:c8:c7:52:e3:d2:d3:
27:d8:f2:60:52:41:75:96:1d:9f:ee:7d:62:d7:c4:8c:bf:37:
14:f9:43:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:40:54 2026 by rpki-client