Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.mft
File: Ailn4M12ou9IKENytcPFQZ-TKgw.mft (raw, json)
Hash identifier: D7GMP1KJ27vISRE6faQk0blEJ1XA997kcVO29CvgpiY=
Subject key identifier: FD:74:F3:B2:7F:16:81:00:B4:CC:A0:E3:7E:4C:0F:F8:CE:4E:B2:E6
Authority key identifier: 02:29:67:E0:CD:76:A2:EF:48:28:43:72:B5:C3:C5:41:9F:93:2A:0C
Certificate issuer: /CN=022967e0cd76a2ef48284372b5c3c5419f932a0c
Certificate serial: 01A0CD7F0FC1C351322BE15F26A42371A511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ailn4M12ou9IKENytcPFQZ-TKgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.mft
Manifest number: BD
Signing time: Wed 23 Sep 2026 09:00:51 +0000
Manifest this update: Wed 23 Sep 2026 09:00:51 +0000
Manifest next update: Thu 24 Sep 2026 09:00:51 +0000
Files and hashes: 1: Ailn4M12ou9IKENytcPFQZ-TKgw.crl (hash: gxcv3QIO9JZXwRKvJw2Z8rXp5/eksq/vF7o+DErXLUE=)
2: n8TPT7CRKn1Mn5L4K6mumPY_u2I.asa (hash: FpmaFJDT25wJPGSsanK09Hz1zRivL1ng9GmIas6DUVo=)
3: wROddSYepcKFBJuKhnhqKktwrhE.roa (hash: ckFxFlRt9odYX8HCvzcnB7HwosCrL/n2CQ7qoo3Y57k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ailn4M12ou9IKENytcPFQZ-TKgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7f:0f:c1:c3:51:32:2b:e1:5f:26:a4:23:71:a5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022967e0cd76a2ef48284372b5c3c5419f932a0c
Validity
Not Before: Sep 23 09:00:51 2026 GMT
Not After : Sep 24 09:00:51 2026 GMT
Subject: CN=fd74f3b27f168100b4cca0e37e4c0ff8ce4eb2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:24:df:f9:64:00:ca:63:2a:74:fa:6b:08:
af:14:43:df:74:b3:8b:26:c8:a1:ee:38:83:36:a4:
eb:b8:90:8f:b9:82:a4:9a:ec:78:cf:03:af:87:33:
e4:c5:50:fa:24:24:1a:a6:72:1d:6f:a2:f1:ff:ab:
63:78:78:28:2d:77:c3:ca:c9:1e:ff:f0:71:9b:33:
b9:b3:0d:6e:34:8e:76:27:5e:db:10:dd:a5:2a:d5:
e0:2e:5b:04:e2:d1:9c:0a:25:15:ce:69:30:91:eb:
1d:9d:9b:64:cb:c5:9c:9c:4f:91:a6:b0:b4:cf:99:
39:8a:f9:7f:d1:ff:ae:ab:e0:1d:32:ea:d8:a8:39:
da:33:48:1f:08:bc:4c:a7:51:a0:9e:40:b2:32:0a:
05:92:e6:ed:1d:fc:c4:c9:2d:88:40:bb:a5:7f:bc:
fc:64:d3:87:2c:21:30:73:a2:a3:d9:a4:c8:10:23:
c9:82:bf:2b:ae:bf:0d:bf:a0:48:08:d9:e6:84:b4:
0a:27:04:b3:4c:8b:30:92:bd:60:fe:75:bb:e8:45:
ab:91:35:3b:02:5f:b6:7d:f3:c2:01:62:fd:60:3a:
ec:17:63:5c:ec:81:1e:36:64:0a:67:3d:8e:48:24:
b0:65:04:0a:db:5f:cf:42:43:8d:7d:2f:39:45:ca:
b4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:74:F3:B2:7F:16:81:00:B4:CC:A0:E3:7E:4C:0F:F8:CE:4E:B2:E6
X509v3 Authority Key Identifier:
keyid:02:29:67:E0:CD:76:A2:EF:48:28:43:72:B5:C3:C5:41:9F:93:2A:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ailn4M12ou9IKENytcPFQZ-TKgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a5:22:5a:e0:55:fc:d7:fd:76:e1:91:9a:25:f2:4f:ac:e3:
30:0d:12:54:82:1f:95:03:01:47:c2:d3:61:ea:23:b0:c9:93:
d8:a1:cc:61:fd:b4:2d:b3:2a:8a:a1:77:de:8f:96:47:14:c0:
1d:3c:9e:a3:f6:1a:a7:77:5d:2f:f8:68:94:c4:dc:f0:7c:c8:
01:45:3c:eb:f3:f0:6b:e4:4d:dc:ac:ad:d3:c7:7e:ba:e2:c7:
3d:1d:06:3a:94:a2:b3:67:12:43:9e:70:3f:6a:b1:9d:70:90:
03:cd:6e:e1:73:e2:3d:b7:34:97:60:9b:2b:cf:a0:1d:63:f7:
9d:62:9f:63:45:45:d9:1b:ad:e0:e0:bb:91:0b:7e:ce:1a:c9:
94:5f:a2:06:c9:b8:6e:be:b6:eb:d4:e8:ca:0b:b0:5a:a3:a7:
4b:eb:40:c9:65:79:36:55:86:91:99:93:07:11:03:10:e6:26:
83:3b:f2:e1:e2:c6:dc:83:fa:50:b9:fc:44:c1:fe:aa:a0:ab:
ff:11:d7:aa:5c:d0:44:b6:30:01:de:89:cd:fb:72:d4:82:ec:
b4:a9:82:ca:70:85:29:42:18:43:14:6b:10:d2:51:bf:6e:4d:
89:76:b8:9b:34:91:79:88:50:bb:f8:5b:f9:f8:73:ca:45:47:
c1:c8:75:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:01:54 2026 by rpki-client