Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft
File: Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft (raw, json)
Hash identifier: 3r/3HVoWx4He71HHzYV6ZZS0S9mzFyf4dXg7//djs08=
Subject key identifier: 48:AA:7A:1B:DE:CB:5A:AB:C7:62:89:62:89:0A:A9:C0:26:85:AD:E3
Authority key identifier: 02:3D:05:42:21:08:50:CB:C6:63:96:38:CF:7F:FF:BC:FB:AF:1E:57
Certificate issuer: /CN=023d0542210850cbc6639638cf7fffbcfbaf1e57
Certificate serial: 01A040BCC0F59C8A39DCE8C43440AB9C6CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft
Manifest number: 0214
Signing time: Thu 27 Aug 2026 01:01:46 +0000
Manifest this update: Thu 27 Aug 2026 01:01:46 +0000
Manifest next update: Fri 28 Aug 2026 01:01:46 +0000
Files and hashes: 1: Aj0FQiEIUMvGY5Y4z3__vPuvHlc.crl (hash: IlD/LMom/uQsnLOG9MwpYRZIvyOYGhBw7tFzaQ1uGGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bc:c0:f5:9c:8a:39:dc:e8:c4:34:40:ab:9c:6c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023d0542210850cbc6639638cf7fffbcfbaf1e57
Validity
Not Before: Aug 27 01:01:46 2026 GMT
Not After : Aug 28 01:01:46 2026 GMT
Subject: CN=48aa7a1bdecb5aabc7628962890aa9c02685ade3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:37:f2:1f:ed:cb:68:35:52:a5:26:de:4c:65:
13:47:ac:d8:f7:3d:0c:31:5b:d8:62:05:7f:39:90:
74:64:c9:6f:f9:c9:74:ee:33:99:ef:8d:d2:22:d4:
eb:47:88:f0:09:c5:48:f3:de:f3:ec:69:cf:f2:2f:
d0:5e:2f:94:12:1b:2f:9c:8f:02:e1:44:d3:38:d7:
f7:18:cd:bd:a2:89:fe:bb:44:c3:06:f8:6c:5e:9c:
7b:9f:ba:b9:e7:03:56:f1:a5:35:1c:d4:d1:1f:7d:
84:f9:49:0a:be:c6:02:68:a3:89:88:a0:27:34:22:
c8:86:d9:b6:da:98:a9:d1:bd:cd:21:db:19:40:98:
b2:c5:a1:be:82:32:5b:51:22:80:85:df:bb:41:c8:
27:a9:91:6a:89:92:ab:32:a8:bd:61:eb:7b:ff:36:
f3:9e:ec:fa:c4:ac:46:29:45:39:62:81:1a:35:34:
95:e6:f5:43:d1:9b:00:6d:79:83:4d:ca:dc:ff:ef:
c3:5c:8b:90:80:7d:24:1b:01:e3:bc:f3:65:be:c6:
58:98:7e:a8:23:89:8a:b9:74:42:aa:e7:e1:72:dc:
1c:cd:7f:66:fe:a3:90:7b:28:1f:d8:15:56:5f:ca:
cb:1c:0b:be:fa:9c:5e:07:28:0a:fe:a3:ac:ae:63:
7c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AA:7A:1B:DE:CB:5A:AB:C7:62:89:62:89:0A:A9:C0:26:85:AD:E3
X509v3 Authority Key Identifier:
keyid:02:3D:05:42:21:08:50:CB:C6:63:96:38:CF:7F:FF:BC:FB:AF:1E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:d7:46:71:be:dd:c2:f0:83:ab:72:54:2f:9e:be:ce:30:9b:
4d:08:00:20:7d:50:c1:5d:3b:62:11:25:fb:29:1f:8c:5d:15:
7b:59:38:51:50:99:43:13:13:13:3a:05:fb:0f:d8:95:a1:2f:
33:1c:9b:98:8c:fb:ac:74:02:13:13:39:51:fd:07:45:d9:d2:
9f:45:da:db:01:76:30:2d:80:1c:2f:a6:51:c7:88:ad:2c:76:
89:87:1c:28:8f:76:ea:14:72:c5:66:d9:6c:0f:cc:ae:ba:c2:
f8:2d:bf:ad:64:36:6d:74:29:b5:bf:31:74:06:45:bb:ed:b8:
81:63:1a:0e:53:82:96:00:9a:7f:94:e6:17:f8:7d:4e:b3:6c:
c3:bb:2d:d1:c8:b5:04:8e:8a:f0:36:f5:66:73:0b:7c:20:88:
39:25:a5:1d:5e:8e:ee:29:fa:f7:5a:5d:aa:db:0a:0d:db:60:
11:1d:58:7c:ed:e3:10:07:4b:d6:57:39:dc:ce:86:dc:08:98:
db:4a:2c:70:0c:77:18:31:69:fd:ad:4b:0e:5d:84:7e:6f:2e:
62:81:0e:77:6a:96:ee:cd:a1:e5:05:a9:7a:2e:77:cf:17:6f:
21:8c:77:2a:fa:14:b3:49:98:40:66:64:46:23:70:22:6e:17:
b6:8c:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:55:04 2026 by rpki-client