Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: 7+I2HVtGSNAh0Y1LImShWE13H4CRmm1zEX/fAPlTQK8=
Subject key identifier: EE:41:D8:1A:92:61:02:F5:DF:EB:8D:D1:F8:50:44:A8:D0:76:07:AA
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 019CABD9EFEFB48213FFEFB64B718EB040B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 0FBC
Signing time: Mon 02 Mar 2026 00:01:52 +0000
Manifest this update: Mon 02 Mar 2026 00:01:52 +0000
Manifest next update: Tue 03 Mar 2026 00:01:52 +0000
Files and hashes: 1: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: zXXt+VKnt4Ei0dfYOE+0R7UuI80CqNtiGI5XKbwwt+Q=)
2: s33I9Gm9LhKsvOxTIT5OprmWvh0.roa (hash: YxdzkgTTx+8BroO2XBZzKx1wwcnFfQzh/uzCgxgD0Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ef:ef:b4:82:13:ff:ef:b6:4b:71:8e:b0:40:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Mar 2 00:01:52 2026 GMT
Not After : Mar 3 00:01:52 2026 GMT
Subject: CN=ee41d81a926102f5dfeb8dd1f85044a8d07607aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:37:02:7e:be:12:ac:4b:a6:7f:d3:59:80:0c:
bb:13:41:79:8b:2e:71:55:07:54:77:1f:bc:40:86:
90:db:5a:0c:29:48:d9:4b:f3:c3:9d:ca:40:7f:10:
44:25:22:00:6e:18:6d:f7:28:47:c9:3b:9f:f3:1a:
dc:17:f7:08:61:28:7e:e1:02:3c:32:54:29:d4:12:
8b:42:96:44:28:6f:05:85:55:d2:f7:57:fb:2e:0d:
d8:1f:c0:eb:f1:d8:6b:53:6e:44:6f:99:f9:89:09:
81:2a:95:d5:8d:09:56:3c:d8:dc:58:d4:6d:f4:27:
d9:0a:0f:04:69:9c:19:2c:20:d0:a1:3a:66:6a:0f:
16:5b:eb:d7:86:fb:2e:48:40:c3:81:27:b3:08:7f:
19:9a:c6:f7:1a:86:a8:f6:0f:12:f9:db:d4:ec:63:
d4:98:e3:ad:8c:a5:cd:90:0d:6c:d8:1e:80:ff:6a:
b5:58:04:59:4c:90:b5:38:ae:f4:29:49:10:12:f5:
26:3d:da:54:53:82:1d:97:80:37:74:c5:77:d7:6f:
45:ea:5c:e1:46:6c:2b:d0:77:c7:e8:c9:8c:d6:5c:
51:f5:8e:ee:24:e2:5b:76:5e:bc:ed:c8:94:23:76:
8b:ef:9e:41:98:cd:33:54:d4:20:31:7e:07:9b:10:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:41:D8:1A:92:61:02:F5:DF:EB:8D:D1:F8:50:44:A8:D0:76:07:AA
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:7c:b9:e9:92:44:44:04:dd:b6:99:38:5a:9d:e9:db:fd:9e:
99:77:6e:f9:79:ff:95:16:2a:80:71:b0:01:13:f5:40:b3:55:
a7:c7:dc:c6:91:16:4c:14:a8:f5:fb:c1:e5:44:6f:58:32:75:
69:6b:63:dd:16:55:77:e4:98:d7:92:ec:9d:e8:0e:6c:87:55:
fc:aa:15:9d:3f:25:13:eb:95:8f:81:f3:c1:eb:a0:a8:65:fd:
0a:fc:a1:83:31:cf:ff:1d:a3:54:94:d6:6f:7a:71:40:69:76:
08:1c:ce:0a:22:38:74:86:13:ce:5f:af:85:af:d5:8e:35:56:
dc:3d:be:38:ee:cf:e6:fc:9d:45:4d:59:78:1c:1d:59:ce:53:
d1:8f:46:77:42:b8:e8:93:19:20:2a:01:cc:14:14:b2:b9:71:
28:c6:b9:d8:17:75:48:2f:4b:61:6a:7e:08:da:83:4e:1a:4a:
ef:c1:8e:0c:ea:a9:5b:f5:02:cb:c5:1f:c5:26:3b:e2:54:69:
b0:2c:c5:01:3d:52:25:1e:9f:55:ab:e4:24:35:a8:fe:57:3f:
a2:c3:51:4c:77:d2:5b:e8:94:6a:9d:1b:67:2d:ae:c3:03:a9:
74:50:86:f5:eb:97:71:e7:7f:b8:48:94:6b:70:73:9c:f6:c8:
9f:17:3e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:30:20 2026 by rpki-client