Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
File: ajqLdK1O1nN5ep9rd0nCI0VpedA.mft (raw, json)
Hash identifier: Z5+F+wUBfvE/O2zf1OT+eSS2mGv2BEkwIdUCP3I96ds=
Subject key identifier: B2:C3:C5:8C:9D:E4:8F:75:FB:12:EC:E2:CE:A7:D8:56:2A:BE:60:09
Authority key identifier: 6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
Certificate issuer: /CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
Certificate serial: 01A1882D660EF5C0706C49A40CA272758E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
Manifest number: 198E
Signing time: Thu 29 Oct 2026 15:00:38 +0000
Manifest this update: Thu 29 Oct 2026 15:00:38 +0000
Manifest next update: Fri 30 Oct 2026 15:00:38 +0000
Files and hashes: 1: WiR_mQTYvksNuDh5PyOkyT_J_1s.roa (hash: zaouvXmVUtph8h3UF1IqoXJQFtK55FqMyr4EuKbD7oI=)
2: ajqLdK1O1nN5ep9rd0nCI0VpedA.crl (hash: weTH64bWue8M2MmkDZSfpAQLPUho9g+WrY8/t+4v1dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:2d:66:0e:f5:c0:70:6c:49:a4:0c:a2:72:75:8e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
Validity
Not Before: Oct 29 15:00:38 2026 GMT
Not After : Oct 30 15:00:38 2026 GMT
Subject: CN=b2c3c58c9de48f75fb12ece2cea7d8562abe6009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:d2:18:18:08:e4:d5:bb:03:1d:0e:21:ce:
09:63:ea:8e:fd:2e:fe:b9:aa:b1:fd:6a:33:da:0d:
bf:86:26:a6:ee:fa:3d:61:0e:f9:5a:01:f3:4f:85:
30:da:c6:9e:9d:15:4d:24:1c:ca:ce:12:67:64:b8:
bd:e7:bf:9e:38:88:1e:8a:8a:5d:0f:7a:57:c7:1c:
58:58:4b:34:b9:89:f9:90:b3:39:54:d9:16:3d:d7:
61:de:15:14:35:5f:eb:a6:d0:95:3e:90:a2:c3:93:
19:85:52:ed:74:e9:88:67:29:f0:22:d2:cc:c9:7d:
7f:49:c6:3b:d8:10:0e:a9:ac:d8:fc:6b:9a:80:f1:
e4:ba:02:2a:67:ee:2d:04:40:6e:e3:94:61:8f:72:
db:25:ec:ce:25:07:e4:6f:92:72:f7:83:bf:47:3a:
b6:3e:37:0f:00:54:2a:d0:11:62:99:b2:9a:c7:0e:
d9:72:ec:13:68:be:24:fd:f9:93:88:b5:1a:d3:f6:
19:72:0c:00:e9:77:32:5c:39:6d:32:2c:ed:ab:fb:
32:d8:7d:91:2a:6b:d7:44:80:7b:6d:1d:45:00:70:
54:c2:dc:5a:c9:df:46:ad:0e:ad:d4:b5:ef:7a:c3:
10:c1:91:37:ff:97:e2:20:36:2a:de:58:e8:4a:d4:
cb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C3:C5:8C:9D:E4:8F:75:FB:12:EC:E2:CE:A7:D8:56:2A:BE:60:09
X509v3 Authority Key Identifier:
keyid:6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:00:0e:5d:cc:79:31:e3:a0:b9:97:ed:d6:e0:90:d9:35:3d:
63:08:3d:99:a9:92:4d:ad:76:e8:ee:5c:41:3b:38:e1:78:45:
55:29:23:70:9a:96:de:39:7a:48:5c:88:f0:a1:d9:75:e9:07:
c4:c9:2b:42:0d:76:57:d4:24:3e:be:65:4e:25:5e:0e:5a:f1:
c6:75:bc:11:aa:62:89:cd:85:98:90:a0:68:ec:20:0c:49:f6:
b5:1d:88:97:67:42:9d:9b:86:97:8b:92:8d:39:3a:e4:7c:c9:
9b:75:3e:74:d5:9f:9f:12:36:03:ff:ed:9d:dc:76:3a:74:0c:
1a:f5:a5:2d:eb:15:6c:14:b5:8e:1f:9c:7e:11:c7:d7:5f:ac:
22:5a:bc:62:d1:e9:cb:e4:49:3f:c4:3a:a4:b7:db:97:ff:1b:
d2:81:02:e3:bd:bc:85:c5:69:3b:b2:b2:11:d1:9b:9a:4c:7b:
a7:df:44:0c:ec:ca:72:2a:88:47:ee:14:1c:27:0a:b4:a7:c9:
99:ae:04:fe:cd:ae:b1:1c:6c:1f:7a:f3:ee:43:7d:78:8f:91:
8c:2c:43:d0:06:ce:af:5e:4d:3c:8c:df:12:ad:bb:4a:ef:07:
9d:ec:44:59:d8:58:fd:03:42:97:76:cb:2a:71:f7:87:ee:a5:
7f:9e:ac:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:54:22 2026 by rpki-client