Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
File: ajXs8V8abbPIJhCSrr4iEyWRNc4.mft (raw, json)
Hash identifier: j+0civxKTkzPAs7l+sVlh3z4oeEUucaQXPLvjjPwaM4=
Subject key identifier: 1D:CE:2A:CF:12:6E:B1:81:67:55:34:E6:78:7C:D3:CE:CA:65:9D:9E
Authority key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
Certificate issuer: /CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Certificate serial: 01A0AE619FDE1EF3A73D6AD2174D72ED6A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
Manifest number: 02F1
Signing time: Thu 17 Sep 2026 08:00:28 +0000
Manifest this update: Thu 17 Sep 2026 08:00:28 +0000
Manifest next update: Fri 18 Sep 2026 08:00:28 +0000
Files and hashes: 1: ajXs8V8abbPIJhCSrr4iEyWRNc4.crl (hash: A4yna2cIpuJrJHwPFJiF6mx1H2Tm43ZwwElMRv6gaLU=)
2: bE-Zx7pJextm2dOAdeG5Axd6NfI.asa (hash: AKf5YMxr7u8QSu3cgJVHOwtWLUq68VXdyfOrAzi++uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:61:9f:de:1e:f3:a7:3d:6a:d2:17:4d:72:ed:6a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Validity
Not Before: Sep 17 08:00:28 2026 GMT
Not After : Sep 18 08:00:28 2026 GMT
Subject: CN=1dce2acf126eb181675534e6787cd3ceca659d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:47:98:ab:80:24:56:13:e5:0b:e4:cf:96:f0:
68:29:cd:78:5f:08:73:da:9a:49:c3:fc:92:63:92:
93:58:82:51:8e:3b:d2:71:4b:c9:3b:30:6e:00:1e:
4d:ed:3d:67:c2:37:d9:fe:48:54:96:5c:d7:b0:ae:
02:04:fe:a2:a8:60:51:9b:63:67:de:07:0d:15:39:
ef:2a:7d:3e:b4:68:48:b6:32:d2:03:e8:3d:e1:28:
af:1f:c7:e3:2e:df:c0:7b:f6:5e:bc:be:7e:c5:18:
65:38:74:70:14:83:e9:b2:11:59:4c:a4:2a:5c:68:
2a:d6:1b:dd:3c:58:7c:8f:eb:d8:60:f2:aa:7d:58:
3c:ef:c0:44:24:03:c6:0d:c1:92:2a:c2:a5:01:5c:
c0:e3:5e:99:13:89:b8:f3:9a:4b:17:07:36:47:d3:
03:b2:39:f5:35:34:b5:16:51:f3:43:a8:75:55:04:
db:2c:94:99:6c:87:4d:2a:3e:d2:25:22:b8:3f:7f:
03:e7:39:29:18:f2:49:81:12:18:b5:4f:6d:36:56:
56:11:08:65:e5:9d:bd:09:f2:6c:38:9f:6b:44:00:
c1:25:30:b9:b5:04:ff:06:da:55:d6:2e:c3:34:b4:
50:13:99:fe:e1:c5:7b:b2:61:88:79:59:ed:13:81:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CE:2A:CF:12:6E:B1:81:67:55:34:E6:78:7C:D3:CE:CA:65:9D:9E
X509v3 Authority Key Identifier:
keyid:6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:53:89:0e:1c:17:08:7e:d6:1c:df:fe:f7:d9:a2:30:78:71:
28:60:21:e4:98:bc:c2:b7:bc:ee:c4:54:ea:2a:7f:fa:af:0a:
8f:89:24:38:48:85:4d:20:8a:1a:f0:f2:57:4f:42:66:92:2a:
3a:9f:2d:5e:05:e0:68:23:cd:d8:0a:9b:22:f0:e5:d5:54:33:
d2:76:b1:dc:ec:ce:8d:d0:03:70:ee:3f:c3:86:b9:a0:5b:3f:
42:d7:9a:4b:b0:01:2d:c0:f6:19:a8:34:f8:66:12:ff:54:2d:
52:06:eb:4a:c4:10:b5:92:8e:7b:05:93:5e:8d:40:ca:76:94:
8b:ae:8e:3f:f6:a1:af:98:dd:fb:4b:09:b9:24:40:82:ac:3a:
42:b5:04:e8:fd:c6:cc:ab:6e:7b:b9:95:99:c7:60:b7:3f:7b:
b6:12:ec:a3:8e:1b:dc:e0:0e:14:78:ef:e7:1e:bc:49:1d:24:
84:e1:3c:54:91:68:1a:7f:fb:95:96:ff:15:4f:d7:76:68:41:
41:cb:96:ba:9e:62:ac:ab:83:56:c9:ec:8a:50:a8:fe:05:8a:
cf:ca:48:8f:86:9e:82:4f:a8:26:ee:f3:4e:88:c7:c6:ed:0c:
ea:bc:ce:55:0a:dc:e7:8e:64:44:b9:57:8f:8d:98:dd:3b:73:
82:47:23:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:39:23 2026 by rpki-client