Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: 87HzvoUuWxhyH4q+P0jwrf0Nc+Dyhz2cyP+fx1z30rA=
Subject key identifier: 40:46:39:45:26:97:61:07:3C:B2:CF:EB:A5:D7:14:B8:3A:B8:A8:F8
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 019D9B507DA8133C4C4F727C27B7B7B7432D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 1038
Signing time: Fri 17 Apr 2026 12:00:36 +0000
Manifest this update: Fri 17 Apr 2026 12:00:36 +0000
Manifest next update: Sat 18 Apr 2026 12:00:36 +0000
Files and hashes: 1: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: rEfEHqpdch/qFNF6DT/uIT6exWveWeMpVy31WVjYBlg=)
2: s33I9Gm9LhKsvOxTIT5OprmWvh0.roa (hash: YxdzkgTTx+8BroO2XBZzKx1wwcnFfQzh/uzCgxgD0Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:7d:a8:13:3c:4c:4f:72:7c:27:b7:b7:b7:43:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Apr 17 12:00:36 2026 GMT
Not After : Apr 18 12:00:36 2026 GMT
Subject: CN=40463945269761073cb2cfeba5d714b83ab8a8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:8e:13:02:d9:71:07:fc:41:fb:a9:1d:da:
6c:76:03:d5:df:de:2b:e1:25:96:56:0a:7a:4f:f4:
93:68:44:c9:fd:8a:bb:56:53:23:4d:2a:1e:0a:b5:
eb:35:f1:99:f9:35:46:45:b1:63:a3:9a:0e:e1:43:
27:aa:30:06:ad:1c:c5:6f:be:08:a3:21:78:a3:43:
39:c2:af:63:34:5b:2b:ee:0c:4c:38:bf:2f:00:58:
fd:03:25:34:2c:01:03:61:42:9f:8e:bd:37:3a:2b:
16:2a:f2:e8:6c:65:fd:d0:db:c6:12:43:ca:08:55:
9b:07:30:e5:1c:7f:b5:73:8f:4f:0d:9f:e5:16:6d:
47:50:34:07:b7:91:ca:4e:e3:95:53:0e:7b:71:03:
34:82:d8:6a:1c:22:cc:2d:fe:f5:26:7d:8a:22:8b:
6c:fa:ed:56:2f:9a:9e:44:68:4b:0a:f2:c4:65:36:
5b:6f:f6:de:2c:00:c3:ac:6b:dd:4d:67:4a:5a:bb:
6a:f2:bc:c0:74:82:20:bc:04:87:60:f9:d3:b3:42:
a6:a2:fe:3b:ce:75:31:2f:45:45:eb:40:d5:4e:90:
08:62:fa:77:90:d3:19:3e:81:d3:e3:8e:95:ae:aa:
ab:a4:fb:1d:fc:62:4d:07:cc:f6:e9:f9:36:8b:b9:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:46:39:45:26:97:61:07:3C:B2:CF:EB:A5:D7:14:B8:3A:B8:A8:F8
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:61:13:94:d2:5f:f9:83:46:9f:6e:5b:62:0c:49:e0:a4:f6:
75:ce:68:b1:9b:1f:9d:cf:9b:39:90:54:49:08:64:3e:d1:57:
1c:7c:31:67:56:c9:bd:86:67:d4:24:f9:3f:12:49:cf:33:e6:
ac:2c:11:96:33:4f:41:32:03:3c:8b:34:8c:29:6f:1e:35:f6:
8f:18:f5:ca:90:64:8d:c1:66:92:db:38:52:4e:22:a3:a6:41:
27:15:51:3a:7f:5d:98:b8:3a:6b:42:e7:90:7f:f9:5e:1b:55:
95:39:56:3a:4b:18:93:a1:3d:f1:ba:cf:df:0d:67:77:cf:c4:
cc:ca:95:fb:b7:aa:d1:97:6c:97:00:4d:fb:92:27:a6:a4:39:
8d:6f:5d:1a:8a:f6:ed:66:f3:79:ce:dc:ac:f9:39:00:22:62:
7e:b0:00:bd:37:d2:5e:0a:86:ec:16:f1:55:8f:75:e7:b3:a2:
a1:76:ee:b0:b8:51:c5:87:d8:ab:f9:25:44:9a:6d:32:3d:37:
d0:db:cb:63:27:97:81:10:6b:11:aa:3a:83:91:c4:ad:44:85:
be:30:0c:ab:92:71:a3:84:4e:a5:30:11:6c:08:3b:96:71:62:
2c:ad:02:4d:f0:f2:df:61:37:cd:c7:d9:6c:5c:b5:ee:31:04:
4b:99:c2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:11 2026 by rpki-client