Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: VKHSHQTH6JvX3Xfzq8fEBYksqNe8m5CLsEqnYn0itUY=
Subject key identifier: F3:59:B6:E0:D1:82:DA:1D:C1:6E:FF:5D:C1:EE:14:99:D1:BF:5C:E5
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 01A1250C6D35879FA064C48939FE54A6507A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 120D
Signing time: Sat 10 Oct 2026 09:02:13 +0000
Manifest this update: Sat 10 Oct 2026 09:02:13 +0000
Manifest next update: Sun 11 Oct 2026 09:02:13 +0000
Files and hashes: 1: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: gjxJYZXnElzdIlkR0jpAaXZ0G5T/ocqnKbc/dM7LnEs=)
2: s33I9Gm9LhKsvOxTIT5OprmWvh0.roa (hash: YxdzkgTTx+8BroO2XBZzKx1wwcnFfQzh/uzCgxgD0Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0c:6d:35:87:9f:a0:64:c4:89:39:fe:54:a6:50:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Oct 10 09:02:13 2026 GMT
Not After : Oct 11 09:02:13 2026 GMT
Subject: CN=f359b6e0d182da1dc16eff5dc1ee1499d1bf5ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:b8:23:40:89:97:d6:36:97:1d:40:09:7d:
6d:dd:9f:07:1b:b9:5d:ad:ee:9d:dc:f0:17:c3:79:
54:1b:81:a2:f1:42:e1:1a:77:af:ec:83:b4:44:7e:
06:61:a6:19:f5:c4:1c:ad:96:f4:a1:eb:7b:5b:eb:
f4:f3:1b:79:ca:31:de:7b:d5:1b:9d:0d:5a:29:c1:
f6:62:0a:56:a4:89:3c:c7:7b:d8:aa:27:6d:2b:c9:
69:12:07:c4:8e:af:59:af:68:2e:14:d2:4e:27:92:
8e:6f:33:4a:dd:ea:be:78:e4:d1:d9:60:58:92:09:
d5:9f:d3:4f:91:55:8f:99:53:9d:51:93:68:a1:95:
95:9c:15:d1:8c:93:26:63:93:86:26:4a:2b:fc:80:
66:f5:59:19:a8:6f:f2:4d:00:1f:b6:b1:ab:f6:92:
6c:b7:2b:f7:01:78:d1:77:af:34:5f:97:a8:5a:4c:
86:e6:4f:07:d4:a8:c0:ec:ac:de:56:da:42:e6:7f:
15:f3:6a:c7:f7:c4:b6:a5:b5:96:71:b7:5e:ff:93:
da:ea:78:fe:f0:c9:2b:ad:86:50:1e:63:f2:95:d2:
6a:a1:7b:20:1a:7d:05:8a:22:ae:fa:11:63:f8:a3:
00:8c:e2:31:e0:9f:19:23:cd:05:1c:10:e0:69:03:
ac:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:59:B6:E0:D1:82:DA:1D:C1:6E:FF:5D:C1:EE:14:99:D1:BF:5C:E5
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:49:50:f8:bd:d1:10:da:c1:64:d1:83:d4:d2:46:ce:c6:0c:
9d:7f:55:f9:18:15:e8:22:70:80:0a:ed:5c:65:2a:8e:a7:74:
9e:f1:ca:3e:40:25:ff:da:08:14:0c:f7:50:d7:7e:41:50:9c:
2e:40:4f:6e:99:79:06:e2:e2:4b:01:71:94:d1:3e:13:41:4a:
79:24:41:90:0e:ca:2c:3f:4f:6d:81:3a:37:b3:57:39:30:f9:
ef:c3:fa:a8:13:02:86:b1:75:55:3a:52:95:9d:ad:e5:96:c6:
7e:52:dd:30:9f:9a:4c:55:9d:85:ce:87:1c:21:4e:96:23:ea:
4d:d8:d2:4d:f6:9d:d9:00:45:8b:ea:cc:9a:f5:06:20:db:1c:
75:d0:74:b2:15:90:f8:f3:10:5b:3b:a1:90:e8:ef:10:3e:41:
ea:ba:b6:96:81:9d:1d:c3:a9:5e:1a:2a:6a:99:8f:18:68:6b:
ff:c0:82:be:86:57:a0:b7:3d:89:b1:08:79:d3:e0:d0:b7:e9:
3a:41:4e:ca:ea:9f:67:b3:f8:5d:1d:5a:4f:87:43:dd:bb:54:
e7:fb:8e:e3:be:02:d0:71:10:39:48:c4:52:81:32:f2:1c:b2:
fc:38:21:c9:65:82:69:05:03:3c:ea:f8:81:f5:4f:07:66:b9:
d1:af:ed:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:54:39 2026 by rpki-client