Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: KPbYJ3oMneu8Ur13uJ+NP6b6PxNY/FmRsq6El1ksexQ=
Subject key identifier: 36:C6:5C:42:B0:DC:D8:30:81:85:11:6E:F2:6C:9D:CE:FC:1F:6C:3B
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 01A0CEFF34C01307BE7E1231AB3F509C7369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 1152
Signing time: Wed 23 Sep 2026 16:00:26 +0000
Manifest this update: Wed 23 Sep 2026 16:00:26 +0000
Manifest next update: Thu 24 Sep 2026 16:00:26 +0000
Files and hashes: 1: 8oGUZV5rDuOAmPAiHSVq6YFIa4c.roa (hash: itFCiAzcsWnQOTmyfhBB9FmGr68OYeNmm+DboS8k52c=)
2: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: uPeQoPbPgSERNKs3WDFxXKrPuPOHcmWlfOwZEGo0vhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:34:c0:13:07:be:7e:12:31:ab:3f:50:9c:73:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Sep 23 16:00:26 2026 GMT
Not After : Sep 24 16:00:26 2026 GMT
Subject: CN=36c65c42b0dcd8308185116ef26c9dcefc1f6c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:b0:4d:fe:38:51:43:7c:88:f7:02:7d:ab:
62:ae:d0:ad:9e:4f:ef:5c:6d:bc:df:1e:52:57:73:
73:e6:d7:29:8b:05:b1:cd:85:84:3f:40:d4:c9:a6:
43:7f:c6:49:a2:23:61:71:0d:7b:4b:44:ae:6e:04:
4a:b6:f6:36:b6:e3:1b:f2:38:98:e4:de:d2:ae:6d:
21:36:b8:18:0f:4b:05:50:c4:b4:f3:8d:26:21:ea:
68:09:c1:1c:8c:7f:2d:64:ff:03:73:e7:ea:24:53:
c2:7a:d2:7a:8d:ba:09:1f:df:1b:10:30:70:25:25:
d1:ca:26:86:c9:16:67:39:40:9a:1e:5a:4b:4c:b1:
8f:89:8c:76:56:75:86:cd:62:43:c4:8d:f0:bd:10:
d4:70:b3:68:fe:86:25:7a:4b:d3:91:b2:ea:88:dd:
df:93:69:3d:f9:ce:05:2b:0e:1d:e1:24:ba:47:f9:
c6:3f:d4:ad:56:0c:8a:fe:28:f0:5c:76:de:61:02:
1b:95:a2:4b:bb:6c:46:ec:f5:83:87:cc:92:da:93:
95:fa:a4:d4:64:1f:e9:1c:4f:78:ad:e6:d4:36:eb:
d6:f9:ce:88:14:98:d1:15:c0:9b:3a:03:eb:5d:1f:
80:c9:bc:f4:09:51:c6:7e:21:60:0b:f8:96:b0:04:
60:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C6:5C:42:B0:DC:D8:30:81:85:11:6E:F2:6C:9D:CE:FC:1F:6C:3B
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ce:68:5a:28:09:15:3a:cd:d5:1c:50:cf:3f:f3:61:31:d4:
d7:7e:a9:e6:bf:7f:cb:b1:5f:5f:9b:49:f3:cf:74:9a:0e:83:
fb:75:7f:02:22:04:26:37:61:ed:86:ca:01:fa:bd:4c:14:7a:
c0:05:87:56:27:9e:51:57:05:f8:3d:4d:2d:c5:be:dc:50:88:
5a:92:e7:b8:cf:6e:f5:0d:e8:52:4f:ca:6e:f8:41:5c:e6:6e:
9a:b8:24:6c:c5:78:ac:ff:07:af:46:bb:cf:ce:e8:48:47:80:
31:54:d6:3a:70:24:d7:1c:d7:89:f8:c7:5a:85:ec:b0:ee:4d:
a3:ad:74:78:36:c7:90:23:d4:a9:5e:d0:be:85:74:6f:27:4c:
1d:a2:99:3d:2d:ab:33:19:2c:95:14:18:ab:07:e3:98:c3:a6:
a5:0d:7e:ae:5c:e0:9e:d5:54:f6:8d:fe:7a:29:d5:e5:a7:f4:
d8:90:02:56:49:3a:8a:21:55:b7:85:b2:be:35:79:03:1e:c6:
bd:59:77:e2:4d:13:a4:92:0f:7a:25:7d:68:21:68:af:e6:15:
4c:4c:06:8f:12:10:a3:6b:49:8d:d5:c3:02:46:b2:a7:f6:45:
1d:ab:8d:3a:0d:28:c1:00:c4:cb:9c:cd:67:3c:65:49:6b:f5:
01:30:16:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:16:42 2026 by rpki-client