Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: E2bkxWFJrqn4YTLxZYCPSF56XYIQXAWxXIsw92aIA0o=
Subject key identifier: 94:6E:FD:59:F5:7A:15:15:17:D5:BA:C4:AB:F2:10:4A:3E:9F:10:B5
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 01A0BCC1FD47593BD087A76B1399B513F620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 11D7
Signing time: Sun 20 Sep 2026 03:00:24 +0000
Manifest this update: Sun 20 Sep 2026 03:00:24 +0000
Manifest next update: Mon 21 Sep 2026 03:00:24 +0000
Files and hashes: 1: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: i6CjBCSnACWOnN8wlqX0J3G11fcn0ARgKOoVmDsfdzA=)
2: s33I9Gm9LhKsvOxTIT5OprmWvh0.roa (hash: YxdzkgTTx+8BroO2XBZzKx1wwcnFfQzh/uzCgxgD0Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:c1:fd:47:59:3b:d0:87:a7:6b:13:99:b5:13:f6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Sep 20 03:00:24 2026 GMT
Not After : Sep 21 03:00:24 2026 GMT
Subject: CN=946efd59f57a151517d5bac4abf2104a3e9f10b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:64:24:fe:dc:e8:4f:89:6c:5b:c9:b3:b2:
67:99:83:7c:08:9f:a5:55:35:fe:32:bb:a8:8e:26:
f9:93:9a:c0:47:65:a4:22:4e:72:6e:c2:24:5b:2a:
4a:66:80:ee:f8:d7:54:39:3d:71:c3:69:bd:09:0c:
80:ee:f4:0d:80:70:c0:6a:09:50:a1:0a:4d:50:e0:
21:5a:c3:02:a8:65:7c:d9:be:c4:97:fa:ba:5f:9f:
e1:a2:9a:75:9f:32:58:25:e9:4e:56:d1:06:b2:e7:
f0:f2:cc:bc:b4:37:5b:5e:44:73:45:48:26:c1:cd:
5c:10:a6:c4:e5:4a:4f:d2:cf:93:24:80:b2:5b:c1:
b6:65:ad:32:b0:0a:a9:54:c2:9f:56:bb:2b:f3:5c:
b5:05:f8:b8:48:56:ff:79:be:3b:af:77:fd:3a:bf:
15:13:31:26:e4:0b:89:b8:0d:a6:ba:b2:d1:e7:c2:
ef:5b:ae:f0:43:7a:ff:eb:40:3a:b6:52:cd:c2:33:
45:81:16:ed:6b:c9:9b:7a:c6:43:40:03:af:03:b8:
bc:12:91:68:2e:86:a0:08:9f:3c:5d:80:a9:43:99:
73:be:b5:d7:76:31:b6:6e:fe:dd:c7:6b:46:0e:19:
06:8d:e1:00:bc:aa:55:33:33:28:8f:c4:6a:bd:1c:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6E:FD:59:F5:7A:15:15:17:D5:BA:C4:AB:F2:10:4A:3E:9F:10:B5
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2a:07:28:39:92:34:73:a1:73:ee:df:16:bc:fe:bd:3e:f8:
9a:f0:d7:0c:bd:a7:d9:c1:ac:e5:4b:45:0d:a7:04:e4:36:68:
d6:45:4e:35:28:99:cd:5f:81:e1:92:c3:7b:87:53:3b:96:6c:
de:6f:ea:ef:d9:00:61:a1:e4:bd:17:50:15:6c:a5:9c:4b:bc:
ce:ab:2a:bb:ce:f7:9b:83:03:49:90:f2:de:40:04:58:a7:78:
b9:05:56:85:24:32:98:98:19:0d:8b:77:dd:22:2c:6b:b3:dc:
13:02:4c:94:0a:16:04:8a:23:4c:b8:46:45:d8:e1:03:3d:52:
79:8e:49:c9:55:72:26:f6:7c:ae:82:fb:13:5b:cb:c4:d7:b4:
19:2f:23:2c:0b:c7:bd:fe:9f:a6:05:54:1b:40:09:af:04:51:
38:a4:6b:79:f1:29:2e:8e:65:4f:f1:ff:8a:0b:53:d6:bc:b4:
4a:14:f3:68:3d:b0:6a:fe:ab:74:e6:59:68:ad:7b:87:0b:ac:
7a:e3:f0:b7:c2:12:27:20:97:47:31:1f:f6:31:3e:fc:7f:8e:
af:93:35:83:6d:52:32:4e:27:e4:06:8b:6f:a6:25:be:47:00:
51:3d:84:ae:20:3d:a9:98:18:9f:d5:90:06:28:45:d9:a9:e9:
00:3f:f6:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC8wf1HWTvQh6drE5m1E/YgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMzc5ODIyMDdlNjJkZWQwNjkxZGNiMThlZjZlYTMyZDQx
M2YzZjYwHhcNMjYwOTIwMDMwMDI0WhcNMjYwOTIxMDMwMDI0WjAzMTEwLwYDVQQD
Eyg5NDZlZmQ1OWY1N2ExNTE1MTdkNWJhYzRhYmYyMTA0YTNlOWYxMGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1lkJP7c6E+JbFvJs7JnmYN8CJ+l
VTX+Mruojib5k5rAR2WkIk5ybsIkWypKZoDu+NdUOT1xw2m9CQyA7vQNgHDAaglQ
oQpNUOAhWsMCqGV82b7El/q6X5/hopp1nzJYJelOVtEGsufw8sy8tDdbXkRzRUgm
wc1cEKbE5UpP0s+TJICyW8G2Za0ysAqpVMKfVrsr81y1Bfi4SFb/eb47r3f9Or8V
EzEm5AuJuA2murLR58LvW67wQ3r/60A6tlLNwjNFgRbta8mbesZDQAOvA7i8EpFo
LoagCJ88XYCpQ5lzvrXXdjG2bv7dx2tGDhkGjeEAvKpVMzMoj8RqvRx6BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRu/Vn1ehUVF9W6xKvyEEo+nxC1MB8GA1UdIwQY
MBaAFGo3mCIH5i3tBpHcsY726jLUE/P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iODExZDUtYmEzNS00MjNkLTg2MmYt
MjM1MzE2NTRlNTg5LzEvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9iODExZDUtYmEzNS00MjNkLTg2MmYtMjM1MzE2NTRlNTg5
LzEvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSoHKDmS
NHOhc+7fFrz+vT74mvDXDL2n2cGs5UtFDacE5DZo1kVONSiZzV+B4ZLDe4dTO5Zs
3m/q79kAYaHkvRdQFWylnEu8zqsqu873m4MDSZDy3kAEWKd4uQVWhSQymJgZDYt3
3SIsa7PcEwJMlAoWBIojTLhGRdjhAz1SeY5JyVVyJvZ8roL7E1vLxNe0GS8jLAvH
vf6fpgVUG0AJrwRROKRrefEpLo5lT/H/igtT1ry0ShTzaD2wav6rdOZZaK17hwus
euPwt8ISJyCXRzEf9jE+/H+Or5M1g21SMk4n5AaLb6YlvkcAUT2EriA9qZgYn9WQ
BihF2anpAD/29A==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:58:25 2026 by rpki-client