Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier: BxIfYF8TYM2aiNq+MGo5kpwgrDUDGjxbZPEs/togCiA=
Subject key identifier: 6F:C9:8C:40:8C:66:71:D6:22:67:24:9E:A4:66:98:E8:DE:CD:08:43
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 01A13F391FE6C47B09468FFF59B6696E713A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number: 12D4
Signing time: Thu 15 Oct 2026 11:01:10 +0000
Manifest this update: Thu 15 Oct 2026 11:01:10 +0000
Manifest next update: Fri 16 Oct 2026 11:01:10 +0000
Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: lpdY/vwuMOIGzff6u+srG1+WkAdczathUBrqsPjpH+M=)
2: IseXGFrOHh1SrFUGwBGdimL1xPE.roa (hash: QRfGT54r8WrtHwlE62/eFdNxhXQLn2BRJl4Hpjv4kZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:39:1f:e6:c4:7b:09:46:8f:ff:59:b6:69:6e:71:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: Oct 15 11:01:10 2026 GMT
Not After : Oct 16 11:01:10 2026 GMT
Subject: CN=6fc98c408c6671d62267249ea46698e8decd0843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:da:8d:b2:13:40:b0:08:e0:81:95:bb:b0:
37:cd:24:38:ba:5a:e0:7f:da:e0:4e:96:52:36:c0:
28:b2:1c:21:e8:dd:75:f1:00:1b:86:04:f6:0a:1b:
84:85:93:a7:0b:80:eb:76:b9:05:fd:9d:d7:d9:dc:
2c:5e:72:a8:29:f8:20:46:93:05:e2:a4:33:c1:04:
7a:ef:d2:47:fa:11:f8:94:4f:ad:39:38:99:d7:15:
22:87:5a:78:6f:3a:13:5e:d8:6e:6a:ac:32:c8:09:
d7:d2:bd:6c:46:07:c2:53:13:12:95:5c:29:03:db:
86:55:e3:b9:14:7f:62:5e:9a:8a:f5:31:d4:9d:60:
8b:17:8e:a4:c4:6e:f3:3d:b7:76:c9:7d:15:f0:d7:
c3:5e:52:27:49:c1:3b:b6:f3:8d:ab:2d:00:dc:f0:
a8:38:e0:66:90:12:c4:02:05:7f:06:e9:bf:7e:8b:
39:c4:0d:41:08:0a:80:1f:0f:02:be:9d:3e:7c:f4:
6c:53:56:0e:89:61:85:b3:a6:3b:ad:0f:79:c8:64:
a1:a5:0d:0a:75:2a:fb:a7:c6:5b:e2:31:8d:49:af:
97:7a:1f:a6:27:cc:aa:3f:13:f3:3a:34:99:63:75:
6b:88:c4:22:a8:63:3b:c0:33:5d:06:6b:9b:f3:b4:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C9:8C:40:8C:66:71:D6:22:67:24:9E:A4:66:98:E8:DE:CD:08:43
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:51:8f:76:54:60:fd:3d:a5:3e:e3:1b:9e:2f:c2:29:a7:fd:
51:77:41:3b:d6:c0:7a:71:7e:2c:d7:70:cc:0d:ef:b7:74:28:
77:8e:1c:b4:50:cc:56:37:d8:67:db:26:d4:c0:2d:45:ce:52:
9a:64:57:59:74:f5:41:c4:28:21:a6:af:e4:1a:8f:ba:72:2b:
6d:de:2f:5b:0e:b6:ae:a3:a5:e6:2e:e4:bb:83:33:e5:2b:c3:
d3:88:c6:e8:41:91:06:01:b0:bb:e5:a1:c5:17:5d:dc:6b:49:
ca:80:97:48:5a:db:b5:17:7e:fd:64:5f:ea:f7:e7:1a:ee:79:
ec:de:a4:c3:d9:54:27:cf:f0:63:4f:44:5d:d2:a2:be:27:55:
58:6c:a1:71:cb:b6:7c:bb:bb:ee:d7:bd:f1:89:28:5b:25:77:
1e:89:f3:c7:f1:06:c2:57:c9:77:20:59:ce:41:a2:6e:ec:b1:
1f:93:29:96:1c:3c:34:41:b3:d5:38:b7:41:e4:5d:2c:93:82:
c6:2d:2d:fb:f5:47:7e:d2:4e:33:42:78:14:b4:26:81:65:c7:
0b:c4:85:73:13:69:6a:8f:7a:6d:5b:2d:a6:8e:59:87:95:b7:
fd:82:b0:90:b1:b0:8a:96:70:36:81:26:5a:cc:2a:bc:26:a6:
dc:7c:eb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:19:51 2026 by rpki-client