Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
File: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft (raw, json)
Hash identifier: qw9oQ8ceICFiZaNowcqJy+5LjoOqkf9FPWFePG8cdU4=
Subject key identifier: C8:31:A0:BD:B4:D0:A6:79:8A:E4:34:B2:28:F1:71:E8:6A:DF:6E:04
Authority key identifier: 02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
Certificate issuer: /CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Certificate serial: 019D27722D809390DEFD438AB6697B4D0E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
Manifest number: 14F2
Signing time: Thu 26 Mar 2026 00:01:27 +0000
Manifest this update: Thu 26 Mar 2026 00:01:27 +0000
Manifest next update: Fri 27 Mar 2026 00:01:27 +0000
Files and hashes: 1: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl (hash: c4BKojNBWLj1acPl05DMtcnGTGBn1Z2WwtTJmVk/Hvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:2d:80:93:90:de:fd:43:8a:b6:69:7b:4d:0e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Validity
Not Before: Mar 26 00:01:27 2026 GMT
Not After : Mar 27 00:01:27 2026 GMT
Subject: CN=c831a0bdb4d0a6798ae434b228f171e86adf6e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b2:83:f5:7b:4e:30:1b:b0:31:ba:3a:d6:1f:
d8:48:67:06:fc:f6:a5:d1:9e:2a:5d:5d:44:ae:01:
d1:19:72:ea:f1:6f:a6:e2:fb:08:54:95:f0:21:6e:
8c:64:b8:38:a3:37:93:08:39:6f:20:02:04:79:03:
7a:11:c7:51:fd:50:26:60:f7:33:45:fc:29:f1:79:
5a:56:13:a5:ae:34:e3:77:83:6a:a4:f9:83:8d:8a:
45:4d:85:ca:9c:43:06:32:08:74:be:b1:2f:3a:eb:
46:13:de:91:07:fd:1c:ef:d8:bb:cb:cd:a9:dd:f5:
b1:9e:01:c0:11:d0:01:b4:d5:68:22:e4:94:a8:7f:
c1:86:ac:6c:db:07:7c:ef:6f:ea:39:0a:b2:0b:77:
54:13:e7:f2:de:c2:e6:63:38:92:89:1c:44:9f:43:
e1:51:fb:16:a1:9e:9f:25:56:65:eb:c7:4d:b0:74:
ca:16:da:bf:32:4c:ba:55:20:94:b7:23:c7:65:50:
45:73:8f:00:cd:e1:5c:17:42:6a:3a:6d:80:ca:fe:
46:2b:ba:17:43:c4:d4:20:d1:62:0e:91:c2:6a:7b:
2b:ba:77:e3:6c:36:2c:23:47:05:8c:84:30:52:89:
14:8e:05:e9:d3:09:62:ab:bc:8c:a0:08:91:16:63:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:31:A0:BD:B4:D0:A6:79:8A:E4:34:B2:28:F1:71:E8:6A:DF:6E:04
X509v3 Authority Key Identifier:
keyid:02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4c:0d:a4:fd:88:76:10:6f:c7:17:61:f5:aa:17:2a:d8:fe:
64:4e:8e:8a:f6:16:33:86:50:d2:cc:b8:7d:5d:b0:2d:20:76:
a1:d2:6f:69:73:bf:c5:44:ad:46:bf:e2:f6:03:10:65:87:eb:
af:a5:ba:75:b6:ce:e9:d0:f7:a1:d7:50:2f:c6:2c:46:9a:af:
f9:42:23:de:2f:a3:0b:5b:ba:e5:e7:8b:4e:20:fa:eb:9a:9e:
eb:ff:b9:29:15:56:f6:b0:10:00:e6:82:36:2f:c9:ad:a5:50:
3e:09:85:82:fe:27:e2:49:c1:5a:89:2a:07:e6:9a:77:fa:0f:
61:7d:75:43:32:74:a7:be:a3:e3:01:2f:ee:1c:91:a6:d6:48:
b1:50:c0:92:89:76:58:b7:60:89:0f:82:c6:a0:12:96:cf:b8:
81:34:86:09:be:1b:b6:a6:1b:21:3d:2c:e0:f2:eb:db:10:bf:
64:6b:76:f4:d7:ac:55:9b:ac:d3:69:5b:49:1d:5a:ae:29:38:
55:90:e7:87:69:ad:b6:c6:57:6f:34:95:77:d9:48:90:4c:c7:
2b:58:b0:6d:50:7b:55:37:85:bd:e9:ff:fc:5f:17:12:e1:4f:
91:2b:76:13:d8:8b:52:1c:43:85:c5:ac:6b:fc:ff:9d:46:d8:
78:b3:a9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:23:15 2026 by rpki-client