Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: JT51+PpHmwV1zDwaysMJsq0ekM96eH8R8Rts140PEmc=
Subject key identifier: 22:E6:C9:E7:6D:54:8B:AB:69:B8:0B:8F:61:94:9B:C7:93:31:AE:23
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 019E284B6FF7C95F3C148C89825D03AE37F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 1081
Signing time: Thu 14 May 2026 21:01:32 +0000
Manifest this update: Thu 14 May 2026 21:01:32 +0000
Manifest next update: Fri 15 May 2026 21:01:32 +0000
Files and hashes: 1: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: oQBzIdDU34CqrhcgnuartfvI6aWO5kGuZq5nPVkFJwA=)
2: s33I9Gm9LhKsvOxTIT5OprmWvh0.roa (hash: YxdzkgTTx+8BroO2XBZzKx1wwcnFfQzh/uzCgxgD0Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4b:6f:f7:c9:5f:3c:14:8c:89:82:5d:03:ae:37:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: May 14 21:01:32 2026 GMT
Not After : May 15 21:01:32 2026 GMT
Subject: CN=22e6c9e76d548bab69b80b8f61949bc79331ae23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:5f:52:9a:2f:f8:25:f1:de:9a:12:cd:22:
a7:7a:5b:b0:a6:17:b5:0e:82:0b:6d:06:84:3a:10:
54:e9:ab:a2:c0:ed:f1:d1:95:58:18:d2:70:0c:37:
22:00:61:6a:aa:4d:4f:0b:fe:44:f9:a7:28:65:6a:
bf:e1:1f:26:74:a0:97:c2:9f:a6:ff:9a:8c:73:f4:
81:cc:dc:26:09:68:56:b4:e8:1c:1c:10:94:d6:92:
92:a4:24:af:cc:48:70:fb:c0:7d:88:7d:51:b2:f7:
a9:f7:99:b8:46:d3:3f:db:0c:9f:90:a7:5b:e6:d5:
91:ac:78:06:98:ac:79:5f:e5:34:d1:5b:04:62:cb:
5a:b0:fc:22:b5:3c:24:cf:68:f0:70:46:74:ca:08:
67:bd:97:0a:b9:65:34:92:47:1f:6f:be:5d:8c:e3:
d8:0d:2c:8b:cc:4a:72:1d:0d:c8:04:d6:ed:af:e8:
4a:f8:35:b0:21:87:4b:90:72:34:23:53:3e:90:63:
a6:5f:70:c8:f7:57:66:de:30:7b:6c:f0:32:12:60:
81:2e:d6:4b:a2:80:62:8e:5e:d9:00:9b:f7:7f:48:
17:8a:90:d5:0c:5b:c6:97:0f:56:99:10:06:1e:75:
a5:a6:2b:2d:14:e1:6f:f0:44:cb:0c:e5:b7:7d:3b:
ff:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E6:C9:E7:6D:54:8B:AB:69:B8:0B:8F:61:94:9B:C7:93:31:AE:23
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:85:04:0a:93:7d:ef:f8:5f:1a:5b:a2:2a:55:4c:37:d0:33:
52:80:06:9c:49:83:74:99:bd:46:04:d6:52:e0:a1:84:a1:f0:
31:be:a0:b2:77:59:12:5a:a2:aa:d3:2b:e9:77:37:f0:90:7a:
82:b4:85:cb:55:84:37:24:86:1d:ad:c8:29:3c:ca:62:64:7f:
ef:f4:88:98:7e:6e:bd:20:19:f0:aa:93:cb:8f:27:dc:fa:4f:
0f:c2:44:9f:0c:d9:eb:d9:5c:94:f6:35:13:d9:fd:3e:34:74:
f0:32:57:6d:5f:78:af:69:bb:4d:11:eb:08:03:ff:37:3e:8f:
a0:01:b8:8e:0a:7c:8e:f8:3d:0a:92:d1:8a:c0:a0:ca:e7:04:
dd:ce:fb:ba:a2:f1:9b:fe:a1:2b:cc:29:c3:3f:6b:dc:a0:c5:
e2:1a:65:ae:77:03:22:a9:9a:4e:71:48:14:fb:e1:41:09:f9:
65:d7:eb:5d:e1:57:4b:57:2d:4a:c8:51:56:c5:bd:10:cf:fd:
68:b5:08:86:52:7f:a9:4b:45:03:7c:c1:7d:ce:d5:59:fc:0a:
1b:a9:2b:f6:dd:03:95:c5:94:75:6c:71:57:b6:23:da:49:0d:
cb:23:ce:a9:64:a0:4b:61:17:fc:20:02:3d:2e:37:28:14:03:
8d:49:28:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:17 2026 by rpki-client