Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
File: ajqLdK1O1nN5ep9rd0nCI0VpedA.mft (raw, json)
Hash identifier: fOTcWrQo/4QFt1nChVY5fTH0nFDFvpsVUVGCUjiF9AE=
Subject key identifier: AB:C4:35:6C:8E:56:95:16:50:A8:2F:BB:F3:D8:6F:4C:B6:41:CE:78
Authority key identifier: 6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
Certificate issuer: /CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
Certificate serial: 01A08D1FDE990B325F280D8A6B0D74EE8628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
Manifest number: 190C
Signing time: Thu 10 Sep 2026 21:01:10 +0000
Manifest this update: Thu 10 Sep 2026 21:01:10 +0000
Manifest next update: Fri 11 Sep 2026 21:01:10 +0000
Files and hashes: 1: WiR_mQTYvksNuDh5PyOkyT_J_1s.roa (hash: zaouvXmVUtph8h3UF1IqoXJQFtK55FqMyr4EuKbD7oI=)
2: ajqLdK1O1nN5ep9rd0nCI0VpedA.crl (hash: Nx6g1Ig6HJhTNKvJNYYBlfu9lWByUA+uB4JQy6Z1M2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:de:99:0b:32:5f:28:0d:8a:6b:0d:74:ee:86:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
Validity
Not Before: Sep 10 21:01:10 2026 GMT
Not After : Sep 11 21:01:10 2026 GMT
Subject: CN=abc4356c8e56951650a82fbbf3d86f4cb641ce78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:37:d8:dd:ae:a2:e2:42:22:e5:a8:2c:63:e9:
25:42:68:5a:a9:88:de:92:9c:71:9b:95:40:1d:7f:
55:78:db:ce:ec:e9:fc:3b:ae:f9:f8:5a:2d:c8:2a:
af:87:1a:20:82:84:b7:28:3a:1e:4d:76:56:f8:bc:
1d:2b:93:50:d9:77:97:ed:8e:7d:85:0c:5a:7b:94:
79:82:87:15:32:1c:5f:52:2a:d4:f9:7a:ab:d4:57:
f2:d4:4f:5f:f3:16:74:9f:3c:09:af:bb:0c:5d:93:
96:17:72:22:c9:d0:77:d5:cd:ce:f2:3f:74:4d:19:
d3:b5:ca:89:6a:01:6a:24:c8:3a:61:e7:a2:00:ae:
8a:ee:d0:22:6e:dc:ba:07:e4:66:e9:08:eb:28:61:
28:11:fb:9e:a3:07:f7:24:18:7d:15:29:47:79:cd:
d3:00:13:66:6c:20:ce:55:75:65:3d:03:48:fa:9f:
00:a5:d8:65:ed:f3:03:1b:18:b7:14:05:8b:3a:8d:
3a:70:93:d1:92:d9:9c:bf:08:93:ca:f4:0b:5c:13:
f6:a3:89:26:26:1d:96:bf:9c:0a:bc:1a:87:de:95:
36:ef:9c:23:b5:8e:7c:71:95:fd:c7:75:d4:61:a0:
bc:8f:d3:f3:c3:d9:fe:1e:10:f0:85:9d:7d:aa:89:
f7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C4:35:6C:8E:56:95:16:50:A8:2F:BB:F3:D8:6F:4C:B6:41:CE:78
X509v3 Authority Key Identifier:
keyid:6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:6a:f2:77:37:e1:14:7f:87:28:54:d8:96:00:3c:ef:24:f3:
34:33:66:e0:bb:ed:b2:45:a4:cd:e5:3a:74:7a:86:bb:4d:80:
35:09:78:9d:ad:c1:e7:59:8b:12:8c:fa:90:ae:d3:33:42:4b:
2b:06:43:34:65:94:b4:f1:67:1c:55:3c:1c:33:47:80:90:63:
d5:4d:4e:47:80:19:cd:49:8f:0c:7b:a5:6c:e1:09:d4:2f:d3:
ac:18:b0:dd:72:c9:fe:8c:39:4d:17:f6:72:b2:ae:7a:f8:b6:
da:59:1a:b2:b2:24:71:fd:40:83:64:c9:8a:62:d0:ab:41:c8:
0b:bf:ac:af:85:b6:67:27:73:e4:32:27:61:4e:19:d0:a0:46:
db:10:c2:0a:22:43:dc:85:a6:57:15:31:11:fb:10:0d:ae:c0:
ba:37:87:c4:24:ff:ff:44:09:83:cc:59:96:5a:8f:52:d9:c2:
4c:c1:b6:de:e9:56:1c:8f:31:27:64:48:cf:73:a4:45:dc:ca:
1a:79:0a:04:2d:09:5a:2f:b7:9e:62:c9:00:49:42:53:42:70:
b3:64:2f:16:6f:6f:e3:d9:d9:ef:07:f5:2f:81:1a:85:7b:4d:
e8:1e:76:3d:73:8b:93:83:bf:8a:4d:ed:8f:ed:21:16:7a:54:
ad:ff:2f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:38:12 2026 by rpki-client