Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: ups4OL4IW85vSwG9wQrQC3nVlJt5rrWS/Ww+YwrvmtA=
Subject key identifier: 01:34:E2:9A:7D:0E:A0:C4:DC:D9:CC:73:8A:A1:78:09:2E:BD:36:8C
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 019D31F5EAA443AF5970921D351EEC381EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 0F73
Signing time: Sat 28 Mar 2026 01:01:33 +0000
Manifest this update: Sat 28 Mar 2026 01:01:33 +0000
Manifest next update: Sun 29 Mar 2026 01:01:33 +0000
Files and hashes: 1: 8oGUZV5rDuOAmPAiHSVq6YFIa4c.roa (hash: itFCiAzcsWnQOTmyfhBB9FmGr68OYeNmm+DboS8k52c=)
2: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: YFlpqGAhwYqsoCBZ7eFMTC3gv1wBNhraXx4PI+4MKho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:ea:a4:43:af:59:70:92:1d:35:1e:ec:38:1e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Mar 28 01:01:33 2026 GMT
Not After : Mar 29 01:01:33 2026 GMT
Subject: CN=0134e29a7d0ea0c4dcd9cc738aa178092ebd368c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:0d:77:6c:ca:5b:f1:84:36:ac:10:b4:ef:
03:01:d9:8b:18:eb:35:a8:63:07:7d:c1:b9:9e:d3:
03:a6:05:57:0c:d5:db:58:d4:1e:9c:8c:0b:b3:ba:
3a:56:78:69:19:dd:21:00:6f:5b:af:09:65:1e:7d:
e4:3d:ea:42:63:d3:bd:3c:dc:46:5b:76:da:09:95:
bf:33:98:ae:06:08:b3:3f:6c:46:2c:a5:b8:b8:4e:
6e:7f:ca:56:b6:34:d5:f9:0d:af:f5:29:4a:60:fc:
79:7d:b5:0a:f3:69:ff:d6:18:7c:2d:6b:0d:75:53:
bd:74:5b:2f:0e:cb:ac:4c:99:d2:f5:37:59:b7:f3:
cb:78:89:8e:3c:e7:01:b9:bd:d3:3c:cc:60:4a:ef:
15:dd:16:b2:2d:69:87:4a:87:e9:38:0a:35:84:90:
16:41:47:ca:f4:62:5f:da:3c:b6:3f:a8:4d:5b:c9:
89:d3:58:7e:84:e8:de:1c:9a:3c:ec:97:bd:24:79:
c3:1a:d2:03:51:28:a4:38:9a:61:1f:ad:78:8b:ef:
7f:68:03:7d:63:a3:89:10:a8:d2:29:5e:9c:ef:35:
28:b1:7d:3b:45:26:77:fd:d7:88:82:3e:db:16:d7:
2b:75:8d:13:9c:f9:aa:e5:f0:09:fe:f3:c1:69:a0:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:34:E2:9A:7D:0E:A0:C4:DC:D9:CC:73:8A:A1:78:09:2E:BD:36:8C
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:33:b9:e7:f2:9d:b6:9f:28:68:1a:33:34:71:df:44:af:c6:
a1:f8:2b:aa:6f:0a:00:93:69:a6:a2:78:9a:b9:09:bb:90:0f:
ad:61:b2:aa:24:b1:a1:00:e0:3b:ba:e7:43:30:58:df:e5:3e:
85:f1:55:30:a9:9e:bf:99:4e:9c:1f:7a:55:b3:3c:91:8b:58:
d0:85:2c:25:56:f4:05:84:4b:f0:4c:2a:19:25:30:94:96:37:
bb:ec:10:05:11:e4:eb:c9:00:78:a1:e5:84:4c:cf:53:c8:7f:
81:f9:86:25:3d:d3:9f:8f:fa:d7:20:06:b7:0d:c1:c9:27:57:
51:d9:21:fa:24:da:cd:2a:54:54:f5:0f:34:52:38:aa:ef:be:
29:5e:af:16:1c:11:c6:44:6a:53:79:3d:0a:e7:8f:8e:26:b5:
ef:55:b5:81:65:f6:da:7b:77:83:05:92:17:05:2e:b5:69:93:
b8:b3:8c:0c:ae:b0:63:99:a2:c7:4e:71:a9:aa:90:42:bb:f7:
25:55:5e:76:9b:02:b1:90:ad:74:db:0d:68:97:0e:fc:78:8b:
10:1d:ae:53:95:f7:c1:35:c6:9d:2c:c5:6d:f4:00:b7:27:d4:
50:14:82:a7:cc:11:d1:75:68:ed:fc:fd:38:53:3d:c6:93:63:
f3:4d:91:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:27:55 2026 by rpki-client