Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.mft
File: Ailn4M12ou9IKENytcPFQZ-TKgw.mft (raw, json)
Hash identifier: fz3x/fR+eR68Ts+Ix8WcqC5K6GNnpRpMlA2KgAcMQZo=
Subject key identifier: 6F:47:AE:5E:43:29:42:30:EE:BB:4F:9C:B9:7B:16:EB:E1:C7:E8:C6
Authority key identifier: 02:29:67:E0:CD:76:A2:EF:48:28:43:72:B5:C3:C5:41:9F:93:2A:0C
Certificate issuer: /CN=022967e0cd76a2ef48284372b5c3c5419f932a0c
Certificate serial: 01A0E69ACB5BB8A171E33E94347C208CFA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ailn4M12ou9IKENytcPFQZ-TKgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.mft
Manifest number: CA
Signing time: Mon 28 Sep 2026 06:01:39 +0000
Manifest this update: Mon 28 Sep 2026 06:01:39 +0000
Manifest next update: Tue 29 Sep 2026 06:01:39 +0000
Files and hashes: 1: Ailn4M12ou9IKENytcPFQZ-TKgw.crl (hash: D9YGRz7N+7NwXAxhoQty7vLrKhIgM+ujnmjuccirWQU=)
2: n8TPT7CRKn1Mn5L4K6mumPY_u2I.asa (hash: FpmaFJDT25wJPGSsanK09Hz1zRivL1ng9GmIas6DUVo=)
3: wROddSYepcKFBJuKhnhqKktwrhE.roa (hash: ckFxFlRt9odYX8HCvzcnB7HwosCrL/n2CQ7qoo3Y57k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ailn4M12ou9IKENytcPFQZ-TKgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 06:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:9a:cb:5b:b8:a1:71:e3:3e:94:34:7c:20:8c:fa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022967e0cd76a2ef48284372b5c3c5419f932a0c
Validity
Not Before: Sep 28 06:01:39 2026 GMT
Not After : Sep 29 06:01:39 2026 GMT
Subject: CN=6f47ae5e43294230eebb4f9cb97b16ebe1c7e8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:f6:28:cd:35:52:9f:96:bc:02:5a:77:6b:
6b:ef:b0:df:f5:e5:33:3d:94:50:ed:e2:c1:5f:1c:
84:ec:c2:46:a1:65:8b:9c:a8:85:e8:c4:9c:1f:e5:
4b:69:79:17:b4:0f:03:6d:46:37:35:af:cb:c0:d1:
55:83:bd:da:ed:11:55:16:c1:9c:fa:55:7d:24:d1:
26:0e:9e:dd:58:ab:06:f1:84:3b:d0:5c:89:09:b8:
f0:f8:00:e8:85:99:0d:f4:5b:79:5b:09:c9:1d:0e:
73:c5:e9:92:2d:b1:03:d1:91:34:34:57:9b:42:d2:
81:3e:01:a4:28:fe:b1:12:32:04:d3:ee:66:0a:3d:
87:ef:52:65:8e:84:58:5a:f4:94:3f:2a:ed:4b:97:
3b:7b:64:7c:4a:09:ca:f6:b6:58:66:b6:a1:75:d0:
ac:a8:8a:b2:a8:7c:bd:dd:ad:4b:f9:e2:43:01:21:
2c:2e:07:01:9f:25:bb:15:09:2b:e6:5c:87:50:b0:
ec:ea:b9:11:91:ec:57:a2:48:13:2b:b4:f0:f1:7a:
71:61:b0:6a:eb:16:72:6d:ce:68:6e:8f:0c:59:cb:
a8:3c:f3:90:81:9c:79:b0:43:8f:1f:b7:bf:69:9a:
d7:a0:6b:0e:15:32:11:35:db:55:e9:db:e5:c3:13:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:47:AE:5E:43:29:42:30:EE:BB:4F:9C:B9:7B:16:EB:E1:C7:E8:C6
X509v3 Authority Key Identifier:
keyid:02:29:67:E0:CD:76:A2:EF:48:28:43:72:B5:C3:C5:41:9F:93:2A:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ailn4M12ou9IKENytcPFQZ-TKgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1bf46b-96e9-4c05-ba3a-ec24eb859ed5/1/Ailn4M12ou9IKENytcPFQZ-TKgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a1:46:0a:09:62:7a:d9:82:00:ee:e9:18:f6:17:d3:17:0e:
05:1b:64:fe:65:ee:6f:bd:b7:77:76:ce:9c:5b:14:f7:47:42:
c2:b5:c3:9f:86:83:df:08:f8:b0:a2:90:9c:cc:86:e9:6e:dc:
59:4a:ec:01:49:ec:c1:c9:97:51:c1:7c:a6:e3:28:25:b1:10:
5b:a2:96:56:ca:be:8a:c7:a2:38:d5:2a:6f:86:b7:a2:a2:8d:
aa:81:d0:d1:e8:a7:4e:b8:ef:34:e5:aa:c3:74:10:96:9e:7c:
4a:10:0f:d9:be:21:bf:63:b3:24:aa:ce:74:4b:c7:ac:ac:a2:
38:75:b3:06:c4:04:52:b9:07:83:3a:f4:07:d6:f1:52:55:17:
6f:88:d3:cc:16:e1:e7:b0:ae:8e:19:1a:bb:fc:2d:eb:b4:35:
30:79:41:f3:c8:ee:1c:f9:aa:23:c0:55:ae:7d:a0:84:a1:f2:
19:41:cd:15:23:5b:d5:08:a9:31:47:67:ab:8c:1a:5a:31:63:
2f:79:32:1e:04:f7:b6:fa:84:ae:7a:65:5d:ef:cc:a1:20:90:
3b:e6:3e:4b:6e:98:a4:d2:ea:1a:d7:cf:7f:ae:d5:f1:e4:b6:
74:72:b9:43:e1:6f:22:b1:d1:91:f2:1a:86:24:2f:99:dd:e7:
91:82:fe:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:14:09 2026 by rpki-client