Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: roGN+DFqCREIVK2PZ8vxej/AAnbbM7u4XhK2d84yZlE=
Subject key identifier: 6A:A4:FF:6D:68:A6:B8:40:3C:E7:1C:2F:3F:C2:7C:FF:F3:2B:E8:99
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 019D38D2E9256C79002DC12773B85119ACE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 1005
Signing time: Sun 29 Mar 2026 09:00:39 +0000
Manifest this update: Sun 29 Mar 2026 09:00:39 +0000
Manifest next update: Mon 30 Mar 2026 09:00:39 +0000
Files and hashes: 1: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: qAROhDn324hirDRE/S4BjO9ZIA5zyEJKBaehcCJA3ek=)
2: s33I9Gm9LhKsvOxTIT5OprmWvh0.roa (hash: YxdzkgTTx+8BroO2XBZzKx1wwcnFfQzh/uzCgxgD0Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e9:25:6c:79:00:2d:c1:27:73:b8:51:19:ac:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Mar 29 09:00:39 2026 GMT
Not After : Mar 30 09:00:39 2026 GMT
Subject: CN=6aa4ff6d68a6b8403ce71c2f3fc27cfff32be899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:95:5d:b7:16:9b:01:f2:27:02:48:f1:3a:b0:
d0:31:10:7f:16:84:8b:70:e7:4e:49:c0:b2:78:42:
0a:22:d8:0c:5a:85:34:26:b1:b5:4d:29:d9:bc:90:
35:c4:ec:a3:36:ce:c9:d6:de:4e:02:d6:a4:e9:39:
d3:8b:44:7c:0a:83:b1:1d:dc:b4:09:ad:a7:27:ca:
3d:c4:32:41:17:42:4e:ff:34:aa:4b:53:c4:32:e6:
0f:1e:18:8f:78:80:78:0e:01:b3:a0:63:a0:55:7d:
11:b5:aa:1f:33:9c:62:a6:34:61:a0:81:f7:e6:b7:
7e:89:e9:d7:c8:44:82:1d:c2:8b:d9:4b:ed:66:23:
e3:2e:61:c2:7a:8b:69:98:c6:15:e5:f6:62:74:76:
f2:81:b0:10:9b:7f:48:0d:2b:8c:81:bb:39:e1:ed:
bf:40:03:23:31:31:93:57:3b:a9:fe:72:54:31:f7:
de:48:a9:d5:cd:3f:52:a6:30:64:0e:8f:5e:6d:8a:
f3:09:0e:bb:f0:37:d6:e4:e4:c5:53:fe:71:7e:45:
b6:49:a0:45:ec:1e:17:e8:fb:a3:43:f0:e6:1e:a1:
3e:76:56:57:26:4f:f9:75:60:e7:82:b1:e0:5d:79:
b6:07:e6:7a:82:1a:1c:a4:ff:28:25:92:36:82:d7:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A4:FF:6D:68:A6:B8:40:3C:E7:1C:2F:3F:C2:7C:FF:F3:2B:E8:99
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1d:2a:d6:f1:d8:a2:8f:14:5b:70:f8:aa:b8:6a:a5:20:ab:
22:6c:0d:f9:33:5e:99:69:5f:5b:16:9b:38:2e:0c:ef:47:79:
ae:73:38:0a:d5:fe:dc:51:aa:be:a0:61:4a:80:0a:23:75:0d:
04:36:be:48:4e:95:ca:cc:f8:c8:a1:ac:6b:bf:08:20:3b:3b:
e8:7e:dc:1d:a0:ee:5e:d3:f1:d7:3d:8c:5a:cc:f8:b3:a1:56:
ad:b7:76:05:22:9d:a6:bc:d2:e7:82:ee:1d:03:07:9c:59:64:
8e:8a:21:b8:0c:d2:62:cc:41:83:1a:dd:0f:8a:45:72:57:72:
1c:d6:e5:78:a3:b7:77:95:12:5d:0e:74:f8:ae:9a:9b:89:92:
24:d7:cf:7d:3e:0b:2d:8c:02:f4:47:73:e3:26:83:e2:9b:de:
df:d6:eb:c2:6e:d8:32:0f:66:54:3f:92:b5:08:ff:2a:ee:81:
bf:65:79:c5:37:3e:53:8d:0b:03:55:51:6c:53:42:67:94:ea:
b1:4f:32:78:cf:d1:24:30:51:81:6e:57:4e:68:09:a6:17:63:
d1:f8:6c:5f:f4:b5:77:4c:11:68:45:c9:25:9a:d9:55:1e:92:
3b:94:f2:f4:2d:0a:de:77:39:f9:a2:fc:77:24:34:a4:3d:f7:
b6:5c:0a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:45 2026 by rpki-client