Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: lUDY3pOvgII+5dHQ99hRC/RRO97JMxbd244IT+vUV1M=
Subject key identifier: 4B:B0:15:EE:B1:52:AD:E3:96:13:4D:DF:FD:98:7B:75:B3:99:D0:6A
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 019E1D9122A4B9B67776E6682768109DF197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 0FED
Signing time: Tue 12 May 2026 19:01:51 +0000
Manifest this update: Tue 12 May 2026 19:01:51 +0000
Manifest next update: Wed 13 May 2026 19:01:51 +0000
Files and hashes: 1: 8oGUZV5rDuOAmPAiHSVq6YFIa4c.roa (hash: itFCiAzcsWnQOTmyfhBB9FmGr68OYeNmm+DboS8k52c=)
2: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: wLT0Je/3APKLEMgzw9uDMaz4oHDmCBVtrkIrZVGpQoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:22:a4:b9:b6:77:76:e6:68:27:68:10:9d:f1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: May 12 19:01:51 2026 GMT
Not After : May 13 19:01:51 2026 GMT
Subject: CN=4bb015eeb152ade396134ddffd987b75b399d06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:b2:38:08:4f:01:38:8d:ae:e5:ae:a3:c5:
c0:e4:82:16:90:41:d6:8a:5f:d1:b8:86:c2:d6:59:
fe:e6:d8:6a:48:04:1b:0d:44:54:a2:91:32:3b:bd:
f1:ba:d0:07:6e:b3:26:09:36:5b:90:31:b2:5f:61:
72:82:90:75:7d:0f:1b:18:6c:99:31:59:d6:13:cd:
0f:a7:90:6e:bc:12:4f:20:45:60:5c:82:fb:65:7c:
ce:7b:54:c3:44:e4:c7:7f:c2:fa:0b:c3:6c:f3:7a:
63:e9:d9:44:d7:9e:b0:6d:6e:40:ad:3b:85:e7:38:
bc:9b:38:c1:6e:4a:b5:20:aa:b9:25:f2:87:18:4d:
06:5b:fb:de:c8:15:7b:16:73:14:fb:de:e1:db:53:
20:01:73:59:a8:69:83:a5:84:5e:7f:63:b4:f3:c5:
2d:a2:d6:13:f5:bf:29:02:c0:6b:27:80:b6:8a:ff:
10:f2:b6:71:48:be:4d:12:c2:8a:d4:a7:92:f1:16:
55:91:92:f9:b8:84:0d:07:39:1c:44:1e:61:39:43:
96:a1:6a:99:ee:94:df:de:77:30:27:9e:14:20:a6:
65:83:fe:2e:c6:31:02:92:d4:ea:9d:f4:6f:ea:91:
c3:d4:60:a3:33:81:d7:af:5e:81:3e:f9:a7:20:30:
5e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B0:15:EE:B1:52:AD:E3:96:13:4D:DF:FD:98:7B:75:B3:99:D0:6A
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:18:40:81:8a:1d:af:8f:47:7c:04:42:b1:85:32:e7:2a:05:
7a:5d:4f:6b:a7:b7:c8:df:c1:35:5b:c6:35:38:a0:cc:29:6a:
72:99:84:96:df:d3:41:52:51:dc:9e:72:4c:2c:93:97:6b:8b:
cc:cc:f1:af:28:c5:ac:f2:25:f5:35:c3:4f:1b:06:5b:cb:8b:
f0:b6:9b:0f:a5:71:70:78:a3:50:cc:9a:a7:c1:3d:90:de:6a:
4e:6b:0b:f7:82:2a:e0:76:82:36:26:e6:46:19:0d:94:32:22:
dd:61:ef:95:97:ff:8d:75:45:1a:c8:0c:21:a3:d9:e0:b0:e9:
41:bb:f3:6b:81:2f:13:7b:99:f2:b5:8c:2d:52:fe:3b:98:8c:
03:2d:55:68:7b:36:a1:a8:d5:2b:8a:8f:15:ef:6f:c3:ba:34:
4e:b2:26:88:27:1e:5f:e6:0c:ee:71:25:20:29:f8:b9:d4:05:
f9:4e:78:b8:5d:ed:ce:4d:39:69:cd:44:ea:99:e8:c5:51:f0:
50:5f:11:21:7e:82:dd:9a:df:e5:c1:32:fd:df:03:19:51:c4:
39:d3:ea:f5:cc:8f:63:8a:c1:f3:d4:ce:19:b2:b2:b9:14:a8:
fe:85:ed:47:00:e6:9f:ea:01:54:1c:92:a0:63:f7:51:92:6a:
20:31:d8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:48:43 2026 by rpki-client