Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
File: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft (raw, json)
Hash identifier: osigX8qmCsM/CizYOn7W1FzkQoBoyUhqWJmB7l5DauA=
Subject key identifier: E4:74:79:8C:63:6C:AD:44:BC:33:1E:80:21:2A:7B:21:9B:F7:6E:58
Authority key identifier: 02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
Certificate issuer: /CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Certificate serial: 019F8F7F293B321CDD8187C29D4A821F708D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
Manifest number: 1631
Signing time: Thu 23 Jul 2026 15:01:43 +0000
Manifest this update: Thu 23 Jul 2026 15:01:43 +0000
Manifest next update: Fri 24 Jul 2026 15:01:43 +0000
Files and hashes: 1: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl (hash: widtwDC0h3vKXhQefC92OQqVm+xD62BZHO7N7PSRCzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:29:3b:32:1c:dd:81:87:c2:9d:4a:82:1f:70:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Validity
Not Before: Jul 23 15:01:43 2026 GMT
Not After : Jul 24 15:01:43 2026 GMT
Subject: CN=e474798c636cad44bc331e80212a7b219bf76e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9c:bd:fe:bc:93:a4:75:1b:76:63:79:9c:79:
78:76:6a:dc:d2:aa:d0:95:91:64:8d:15:fd:9a:d3:
69:87:4f:73:8a:05:bf:a2:2f:7f:6d:d3:26:d7:2c:
7d:e1:42:3f:90:7f:e0:4f:64:f7:b5:d6:f6:e3:78:
88:0d:1b:dc:62:7f:e7:84:19:f7:ab:2b:09:4f:26:
50:39:43:37:9f:af:77:08:c5:11:b2:9e:c8:21:21:
df:bf:14:0b:e1:dd:33:24:fd:89:38:fe:81:82:63:
e8:37:0b:5a:ad:d3:8e:06:b9:7a:e9:cd:08:1e:b0:
29:11:34:34:e6:4f:e0:d9:ba:2d:2d:73:d1:fc:21:
e6:7b:69:1d:50:9e:28:11:3c:f2:03:1e:cb:e2:0c:
f9:f2:86:e3:09:10:81:6e:64:43:ba:3e:9d:78:b3:
ad:47:39:5e:f1:3b:2f:14:cb:5f:8b:25:95:73:00:
3a:62:a8:00:22:59:36:38:a2:2f:c1:59:6b:68:a6:
bd:88:7d:c4:16:4f:d1:72:4a:f7:8f:6f:9d:05:4c:
20:34:60:70:b2:8d:bf:a4:bf:44:c0:5f:09:11:08:
56:b9:06:88:e2:b5:a9:dc:a4:78:75:37:50:1f:99:
9f:fd:ee:32:44:8e:26:a9:bd:cc:69:15:ba:80:ea:
9c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:74:79:8C:63:6C:AD:44:BC:33:1E:80:21:2A:7B:21:9B:F7:6E:58
X509v3 Authority Key Identifier:
keyid:02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4c:c6:39:05:3a:85:84:95:46:d5:a9:e5:37:2a:9a:22:e6:
a4:66:14:f1:45:76:87:cc:56:9f:40:96:1a:be:dd:00:1d:d2:
4a:72:e9:fa:7a:29:4a:56:d1:34:f2:7c:62:68:0c:2f:99:16:
36:66:04:13:3c:8d:5f:9f:2a:df:85:76:74:07:37:93:59:7c:
30:6a:de:e2:72:2a:0a:f1:cf:a3:45:16:86:45:ff:18:bc:f5:
73:a6:8b:14:64:b8:a8:ed:24:59:81:58:1a:a3:1e:ac:85:b2:
dd:06:b0:2f:98:3a:3c:29:8a:64:d4:8f:07:bf:71:f6:45:26:
d0:d4:9d:74:5e:79:1b:cd:da:51:1f:60:6c:48:24:1c:64:8e:
69:a1:d3:3a:d7:78:3a:40:b0:25:9b:32:7e:a7:b2:05:a9:0a:
e0:69:2c:f2:2c:87:0b:f0:2f:9b:6e:57:2d:3f:3a:52:9e:28:
09:6c:dc:6e:b1:72:7d:67:28:92:f3:d5:06:95:ea:05:e4:59:
9a:3d:01:54:79:9a:bf:a7:1e:24:b8:e2:b0:da:e6:60:f4:9e:
4d:34:5f:7e:f2:6a:94:24:90:54:1d:d3:57:30:d6:47:bd:dc:
75:72:4d:ec:a5:fe:96:08:ed:a9:4e:8f:36:64:00:85:9a:40:
8d:0f:9a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:08 2026 by rpki-client