Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: TaLYYKx2HZSykir8a58M+hPmza3Oo2mYPr145VH+AlA=
Subject key identifier: C9:18:CF:E5:19:33:BA:97:35:46:6C:7D:A0:EB:F2:C9:68:DF:D3:70
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 019CA9EB16AC1887218671C056E868F0CA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 0FBB
Signing time: Sun 01 Mar 2026 15:01:22 +0000
Manifest this update: Sun 01 Mar 2026 15:01:22 +0000
Manifest next update: Mon 02 Mar 2026 15:01:22 +0000
Files and hashes: 1: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: 8EJ9P7myjHCxuqwADCfKQa+jrLIzjew8JnqloKXnh4c=)
2: s33I9Gm9LhKsvOxTIT5OprmWvh0.roa (hash: YxdzkgTTx+8BroO2XBZzKx1wwcnFfQzh/uzCgxgD0Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:16:ac:18:87:21:86:71:c0:56:e8:68:f0:ca:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Mar 1 15:01:22 2026 GMT
Not After : Mar 2 15:01:22 2026 GMT
Subject: CN=c918cfe51933ba9735466c7da0ebf2c968dfd370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:13:19:fe:7c:e4:fa:c7:1c:c9:6d:27:c4:
97:28:12:50:af:3a:c2:82:9b:ba:1a:3e:05:4b:b2:
2d:2e:6a:82:7c:d1:1d:22:d4:c8:de:3f:30:c8:a3:
06:e4:6c:63:81:f5:e9:32:c1:ea:2b:e3:b0:3c:30:
b2:3c:de:bd:22:77:c2:79:35:f4:b1:c2:fb:c8:a2:
f1:af:cb:bf:31:a7:fa:27:89:65:82:8e:e8:ca:2b:
3e:6e:b4:6b:f9:2a:4c:1b:9f:e3:2d:25:d3:dd:d8:
65:25:eb:4b:0e:57:e9:c4:12:04:b5:6f:92:ff:3d:
0b:a7:7d:70:4a:05:00:41:65:a1:ec:f6:36:74:68:
8b:cb:4c:09:18:39:96:2b:4c:e1:d0:99:88:5c:c1:
c7:2f:ad:f9:13:e8:fc:1b:78:70:ab:dd:f0:68:ca:
fc:6a:2b:97:1f:4d:24:f1:1f:c2:58:a5:4a:7a:c6:
7e:0c:15:a4:53:1f:5c:64:bd:cb:e2:5b:87:2b:13:
05:b6:67:20:5a:ac:c4:aa:fd:03:ba:c2:a7:71:4d:
47:a6:94:1e:ea:65:6b:cb:c6:0b:03:1b:a7:4f:7c:
42:fc:b7:d0:29:9b:13:23:c5:bd:79:9c:ca:d0:3d:
c3:f8:9a:b4:8e:7c:7a:b2:55:f6:3a:fc:f5:75:78:
ac:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:18:CF:E5:19:33:BA:97:35:46:6C:7D:A0:EB:F2:C9:68:DF:D3:70
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:be:1d:b5:e0:15:ee:55:49:01:aa:76:9d:97:e1:20:97:3f:
e3:aa:15:37:5f:db:12:b5:98:53:ba:1c:79:9a:e4:70:af:20:
46:4b:20:79:e3:cb:19:0d:05:ba:40:4a:ef:89:a4:7a:97:d1:
36:52:3d:81:39:e7:5a:8a:38:b1:2f:2d:2f:76:ac:95:fa:fd:
ff:ed:74:b7:65:2a:2e:3e:31:b7:ae:2f:d5:14:de:92:4a:54:
e0:76:75:2e:44:99:ab:3f:6b:c4:f5:49:0c:e6:3b:b0:ad:52:
fc:26:82:cd:04:0e:78:d5:58:d5:c1:7d:11:40:ea:21:5e:8d:
29:ee:5b:f2:68:1a:25:ac:d7:da:fb:4d:6c:f9:09:d9:c1:27:
41:8a:2a:34:df:59:2a:42:f9:9a:7b:9a:2a:f5:89:7f:36:75:
f4:39:4f:53:0e:c5:76:81:64:34:39:ac:d8:95:cc:e2:5d:80:
c0:d6:17:7e:eb:b2:6d:59:d7:3e:e6:42:ee:d5:a5:0f:76:de:
b3:a1:3d:6b:b1:ef:ce:e6:44:87:21:30:d4:14:0d:0c:df:4e:
10:f5:88:31:d5:1b:4d:15:31:65:fb:ce:13:83:04:4d:95:a9:
4a:bb:03:43:99:17:29:3a:2f:28:49:f2:78:69:3a:9e:b3:d1:
81:62:dc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:39 2026 by rpki-client