Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
File: ajXs8V8abbPIJhCSrr4iEyWRNc4.mft (raw, json)
Hash identifier: X2vIJYFG9GP4/hwTGCx1h7IDKomE8CIfbp7RITW7nOc=
Subject key identifier: 0B:92:40:9F:05:EB:DF:42:4F:9D:C8:64:A2:A4:E4:1E:2C:0F:22:58
Authority key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
Certificate issuer: /CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Certificate serial: 019E1BD88BE4BF35DEE19DC6034A8D684C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
Manifest number: 019C
Signing time: Tue 12 May 2026 11:00:36 +0000
Manifest this update: Tue 12 May 2026 11:00:36 +0000
Manifest next update: Wed 13 May 2026 11:00:36 +0000
Files and hashes: 1: ajXs8V8abbPIJhCSrr4iEyWRNc4.crl (hash: 84OV0XNrZxjkteskiLlraBsUPRn7GsotufwTJGMiP2s=)
2: bE-Zx7pJextm2dOAdeG5Axd6NfI.asa (hash: AKf5YMxr7u8QSu3cgJVHOwtWLUq68VXdyfOrAzi++uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:8b:e4:bf:35:de:e1:9d:c6:03:4a:8d:68:4c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Validity
Not Before: May 12 11:00:36 2026 GMT
Not After : May 13 11:00:36 2026 GMT
Subject: CN=0b92409f05ebdf424f9dc864a2a4e41e2c0f2258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1b:67:15:33:39:2a:08:18:f0:73:70:e8:9c:
e7:e4:15:69:d8:56:9e:da:5a:90:27:b4:35:6f:85:
b4:98:6a:b8:56:14:2e:b3:13:a5:f5:e0:a3:77:6f:
63:93:54:32:17:3f:22:34:aa:a3:14:5a:00:92:4a:
e5:f8:db:fa:ed:24:e0:e5:fb:2b:6e:a5:c9:c5:f9:
c2:e7:92:fa:1b:b7:0d:97:09:f5:20:ab:17:34:6e:
fc:b7:32:42:c4:45:21:55:a0:af:f8:07:ca:96:01:
13:93:c9:45:19:41:99:dd:82:ba:e9:49:71:a2:0a:
29:39:b3:53:1b:21:27:0c:5d:23:c3:57:f8:6e:aa:
0f:a3:94:41:77:01:8b:2d:ed:4c:7b:e0:63:eb:a6:
2d:b6:92:e4:ce:d8:fb:5b:17:56:1b:79:0e:19:50:
49:2c:3e:0c:0a:0a:d3:97:ad:ec:7b:40:02:1c:d9:
7b:2b:06:dc:b0:92:f0:4e:da:60:fd:62:e2:9a:f2:
8f:f6:71:b3:8c:a8:33:64:59:56:76:e6:fd:fb:54:
74:eb:d4:99:3b:37:a0:c1:e3:6c:02:71:37:69:82:
b5:c3:98:34:2b:f8:ba:af:b2:6f:47:b8:a7:67:83:
9c:0b:36:fa:75:64:95:c1:c5:f8:2d:af:ca:82:1f:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:92:40:9F:05:EB:DF:42:4F:9D:C8:64:A2:A4:E4:1E:2C:0F:22:58
X509v3 Authority Key Identifier:
keyid:6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:eb:c3:da:23:d6:5e:72:69:65:30:7a:7e:bb:b3:ac:00:da:
8f:35:45:1c:12:65:85:eb:be:1c:08:0d:1b:8d:89:73:44:8f:
81:1e:a3:d3:04:fd:8e:76:40:b6:8f:a6:af:cd:c9:d4:41:7d:
17:ab:fb:b8:e6:cd:5a:33:b3:75:ba:22:31:31:80:4d:96:51:
bd:08:53:6b:b9:dd:8e:1a:08:bf:4d:d7:e8:17:48:73:a4:06:
92:bd:f4:78:e0:5b:7f:a1:6c:2b:a8:b4:5d:d8:7d:78:f0:44:
54:38:09:3b:82:d5:12:c9:d9:bb:be:05:12:7c:aa:11:2f:9d:
11:05:74:bf:21:3a:35:ed:8e:f0:b8:59:f4:e8:c3:ae:c9:12:
82:1d:2d:57:95:f2:31:6f:3f:ed:c0:e9:eb:39:b2:5e:f6:7f:
ca:5d:2a:b7:ae:5f:0c:1e:3a:fd:9d:df:95:b4:dc:e9:74:60:
ca:95:d0:d1:68:67:a5:46:04:49:10:2e:23:f6:a3:30:ef:14:
0a:37:f2:93:c2:16:b8:c2:cd:9e:5e:da:1b:9e:55:34:d1:e1:
f2:96:b6:23:db:85:3d:d4:3e:11:bc:a4:69:37:47:da:73:67:
cb:ba:b6:68:f2:2f:6e:53:31:69:87:eb:f5:18:90:db:bc:06:
66:e8:64:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2IvkvzXe4Z3GA0qNaEwVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMzVlY2YxNWYxYTZkYjNjODI2MTA5MmFlYmUyMjEzMjU5
MTM1Y2UwHhcNMjYwNTEyMTEwMDM2WhcNMjYwNTEzMTEwMDM2WjAzMTEwLwYDVQQD
EygwYjkyNDA5ZjA1ZWJkZjQyNGY5ZGM4NjRhMmE0ZTQxZTJjMGYyMjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRtnFTM5KggY8HNw6Jzn5BVp2Fae
2lqQJ7Q1b4W0mGq4VhQusxOl9eCjd29jk1QyFz8iNKqjFFoAkkrl+Nv67STg5fsr
bqXJxfnC55L6G7cNlwn1IKsXNG78tzJCxEUhVaCv+AfKlgETk8lFGUGZ3YK66Ulx
ogopObNTGyEnDF0jw1f4bqoPo5RBdwGLLe1Me+Bj66YttpLkztj7WxdWG3kOGVBJ
LD4MCgrTl63se0ACHNl7KwbcsJLwTtpg/WLimvKP9nGzjKgzZFlWdub9+1R069SZ
OzegweNsAnE3aYK1w5g0K/i6r7JvR7inZ4OcCzb6dWSVwcX4La/Kgh//nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuSQJ8F699CT53IZKKk5B4sDyJYMB8GA1UdIwQY
MBaAFGo17PFfGm2zyCYQkq6+IhMlkTXOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWpYczhWOGFiYlBJSmhDU3JyNGlFeVdSTmM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yYTY5NDMtMTA2MC00YmFlLWE3YTQt
N2EyODg0OTZlZDY2LzEvYWpYczhWOGFiYlBJSmhDU3JyNGlFeVdSTmM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8yYTY5NDMtMTA2MC00YmFlLWE3YTQtN2EyODg0OTZlZDY2
LzEvYWpYczhWOGFiYlBJSmhDU3JyNGlFeVdSTmM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+vD2iPW
XnJpZTB6fruzrADajzVFHBJlheu+HAgNG42Jc0SPgR6j0wT9jnZAto+mr83J1EF9
F6v7uObNWjOzdboiMTGATZZRvQhTa7ndjhoIv03X6BdIc6QGkr30eOBbf6FsK6i0
Xdh9ePBEVDgJO4LVEsnZu74FEnyqES+dEQV0vyE6Ne2O8LhZ9OjDrskSgh0tV5Xy
MW8/7cDp6zmyXvZ/yl0qt65fDB46/Z3flbTc6XRgypXQ0WhnpUYESRAuI/ajMO8U
Cjfyk8IWuMLNnl7aG55VNNHh8pa2I9uFPdQ+EbykaTdH2nNny7q2aPIvblMxaYfr
9RiQ27wGZuhkHA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:52:17 2026 by rpki-client