Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
File: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft (raw, json)
Hash identifier: bceOjkNGLDtwQyvC9HAl1Xr3EyPIcAKmtlHLrIhYJ0s=
Subject key identifier: 85:F2:22:06:32:95:0F:EB:0C:D9:44:B6:43:56:5A:C3:11:62:0A:EC
Authority key identifier: 02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
Certificate issuer: /CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Certificate serial: 01A0D2008E8A2800165B14C60B564B41F345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
Manifest number: 16D8
Signing time: Thu 24 Sep 2026 06:00:46 +0000
Manifest this update: Thu 24 Sep 2026 06:00:46 +0000
Manifest next update: Fri 25 Sep 2026 06:00:46 +0000
Files and hashes: 1: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl (hash: ZMyvjjvEEwGqzr7zQS4mSdETk6mpLePC6AavFA1mSCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:8e:8a:28:00:16:5b:14:c6:0b:56:4b:41:f3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Validity
Not Before: Sep 24 06:00:46 2026 GMT
Not After : Sep 25 06:00:46 2026 GMT
Subject: CN=85f2220632950feb0cd944b643565ac311620aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:44:85:fc:1a:15:7c:80:d0:cd:fb:3d:ff:1c:
e0:2a:00:8a:a0:c6:2e:fc:85:6c:95:31:45:57:dd:
3a:fe:02:e0:50:c8:0f:8e:ae:b1:e8:fa:d5:ed:b0:
f3:9f:4f:67:9d:76:13:ff:c1:dd:48:20:b4:f0:99:
e2:3c:f3:b1:8c:7f:48:7a:b6:69:4d:d6:e0:67:79:
b4:cd:66:99:82:34:db:06:cc:e3:34:8d:3b:e9:39:
f7:04:58:a0:18:07:d2:c1:f6:c5:b6:85:b4:a2:e2:
b9:55:30:0f:74:71:c2:db:90:9c:c4:e8:e9:99:7f:
2e:22:32:2d:4e:e8:07:18:22:f1:7e:3e:8f:9e:44:
31:de:d1:42:5f:75:b2:f9:45:58:10:d5:46:ec:7d:
2d:66:70:b7:97:e7:85:28:9b:2c:48:e2:c3:59:77:
e9:aa:33:dc:2b:ee:78:b1:b3:1d:37:ef:09:55:49:
e8:67:f0:75:15:32:8f:dd:c3:64:38:0f:3c:5d:fe:
ce:2c:66:0f:95:e8:3e:5e:94:29:67:07:39:2c:c8:
a6:7b:e9:57:54:04:a4:86:5d:f6:f7:05:df:fe:b0:
f9:9f:d4:17:61:32:60:ed:d6:d9:23:d8:f6:b1:92:
56:4a:43:be:66:ac:a1:b6:42:54:b4:e9:8f:e0:22:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F2:22:06:32:95:0F:EB:0C:D9:44:B6:43:56:5A:C3:11:62:0A:EC
X509v3 Authority Key Identifier:
keyid:02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5e:b2:72:d2:47:7d:85:55:da:54:f8:4a:57:db:20:7e:99:
13:bb:01:c3:d7:05:a9:0d:be:a3:3b:8d:ef:f6:48:ce:ca:8d:
7c:dd:da:af:d0:45:28:5c:7d:16:fb:e3:bd:37:14:70:66:1c:
9e:50:a6:7f:c7:b9:9f:0b:a2:60:16:f7:15:95:17:d0:3e:32:
94:8f:3b:6b:b1:d9:23:23:0f:4b:26:bb:42:da:98:45:7c:cb:
7e:4c:19:43:4b:39:1d:ef:0e:4f:57:b6:5c:f4:ad:18:d0:9b:
01:ab:71:7f:63:6c:92:6c:a7:bf:af:b9:02:5a:3f:89:cd:38:
7a:81:d3:27:00:0b:74:3b:57:30:c1:57:99:22:5b:5b:66:bb:
ef:6b:3c:ce:05:39:b2:68:61:b5:db:f2:b4:7d:2f:3f:83:f4:
08:33:f9:f2:2d:ac:50:c2:e0:a7:06:c5:64:1b:a2:bb:bd:4a:
4d:49:8b:3b:f4:19:5f:55:1c:a7:e6:05:4e:ae:d6:91:32:d1:
a5:6f:80:db:9a:ea:b7:6f:f5:c5:2b:1e:7a:d9:e5:a8:47:07:
c6:da:fa:5e:3a:bb:74:e6:b2:6a:63:98:2a:17:5f:b7:c1:16:
5d:f2:6c:61:a6:40:02:28:58:a5:72:79:f9:00:c8:fe:62:2d:
22:35:5a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:12:48 2026 by rpki-client