Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
File: ajqLdK1O1nN5ep9rd0nCI0VpedA.mft (raw, json)
Hash identifier: MRdm44fZromC33P13ddd1tacdTIIOQwlL8l55Buoqlg=
Subject key identifier: E8:FA:64:D3:9C:C6:07:7E:CB:04:7F:F5:6C:1E:90:D9:B4:5F:D9:DD
Authority key identifier: 6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
Certificate issuer: /CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
Certificate serial: 019F9F95C43668C08A31EE87E0D58381FF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
Manifest number: 1891
Signing time: Sun 26 Jul 2026 18:00:20 +0000
Manifest this update: Sun 26 Jul 2026 18:00:20 +0000
Manifest next update: Mon 27 Jul 2026 18:00:20 +0000
Files and hashes: 1: WiR_mQTYvksNuDh5PyOkyT_J_1s.roa (hash: zaouvXmVUtph8h3UF1IqoXJQFtK55FqMyr4EuKbD7oI=)
2: ajqLdK1O1nN5ep9rd0nCI0VpedA.crl (hash: qaPySg2rZZ6ztJZ40/UJRIibOnRkmqnpVp/Rv6RcY1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:95:c4:36:68:c0:8a:31:ee:87:e0:d5:83:81:ff:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
Validity
Not Before: Jul 26 18:00:20 2026 GMT
Not After : Jul 27 18:00:20 2026 GMT
Subject: CN=e8fa64d39cc6077ecb047ff56c1e90d9b45fd9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:9b:47:f2:5f:ec:5a:b9:15:8c:d5:93:f2:
60:40:2c:e2:71:71:d5:c5:da:1e:b2:fb:68:88:9b:
fe:5b:dd:62:59:39:02:6d:b7:d6:e0:7c:ce:7f:1b:
88:ac:ba:fc:f8:a9:15:a8:46:26:8f:07:f0:1d:de:
53:fa:84:68:d5:68:00:24:a5:60:35:be:f8:4b:cd:
9c:36:ce:56:28:5a:0f:15:48:5c:c1:e5:ac:8a:6d:
d7:ab:83:cd:f8:6f:db:e6:98:7b:9b:18:fe:98:ea:
3c:f9:f2:7b:b6:c2:6f:6c:33:78:91:43:42:4f:83:
26:1f:d0:8e:f7:67:90:b3:64:1e:9d:be:52:07:3f:
c0:4c:4d:b7:f0:7e:b5:d9:30:75:73:dc:3d:e8:02:
4e:d9:71:0e:de:5e:97:3e:1f:a7:ca:9f:24:af:98:
8c:42:3e:b3:0b:aa:e7:90:6c:80:7b:c7:1e:6c:a0:
80:21:f4:6e:f7:ac:08:a9:f5:02:ff:75:88:8e:f4:
dd:ea:0a:b1:be:31:ac:10:96:35:30:89:ff:c3:ea:
48:c3:53:d4:81:7d:09:91:3b:b4:99:2f:20:c8:95:
39:22:6f:1f:eb:c3:b8:69:97:a4:45:bb:3d:59:5f:
91:27:3d:bd:88:ff:62:6b:0d:6e:bd:4b:e7:91:10:
23:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FA:64:D3:9C:C6:07:7E:CB:04:7F:F5:6C:1E:90:D9:B4:5F:D9:DD
X509v3 Authority Key Identifier:
keyid:6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fe:d7:10:6c:31:88:2b:31:2d:18:9d:86:f2:68:1a:76:85:
97:2c:45:99:5e:1f:56:cd:5f:7a:68:93:2a:c9:c3:2b:2b:29:
32:11:a1:ac:3f:d6:aa:30:dc:04:6b:a9:1e:a9:b5:f2:bd:9e:
af:db:77:d8:b2:eb:ee:2a:90:ab:a3:17:6d:a3:e9:79:6d:db:
6d:b8:12:25:54:e1:15:b8:59:8b:62:8f:a0:2a:0b:62:2f:d1:
6e:e8:1b:77:28:e8:92:75:fa:d9:63:ec:ca:76:95:93:14:8d:
47:bd:f6:51:00:64:66:f6:f1:35:90:3b:af:cf:3f:e7:b0:71:
11:75:63:f6:6d:b6:12:d3:14:6f:3c:e2:d1:03:aa:88:98:2f:
08:26:69:9d:6e:cd:6e:8f:05:bb:db:9e:88:67:42:fb:e8:99:
7a:9d:78:fc:65:c3:79:85:b0:ed:74:7e:7d:af:08:c2:fa:55:
ef:d6:44:b6:dd:d4:bb:2e:31:0e:b3:db:3c:3f:a3:8b:6a:cb:
54:8c:26:aa:b1:bb:50:80:94:fa:80:9e:3c:47:de:8c:80:67:
55:a4:66:28:fd:2d:44:f9:e7:bb:b9:77:8e:fe:e3:9c:62:75:
f7:56:b0:74:69:37:89:f1:fc:79:34:57:6c:14:a3:0c:08:12:
a4:3d:c3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:48:33 2026 by rpki-client