Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
File: ajXs8V8abbPIJhCSrr4iEyWRNc4.mft (raw, json)
Hash identifier: qpuxdKg5qMAIf11aToENSH6Cc59/EZBsjPh02MZDk24=
Subject key identifier: 08:17:38:FC:71:EB:EC:84:3B:D8:0F:06:D5:E2:5E:48:D7:74:16:BB
Authority key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
Certificate issuer: /CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Certificate serial: 019D330809BCCD0DC8EEEA8079C83FC3D8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
Manifest number: 0123
Signing time: Sat 28 Mar 2026 06:00:57 +0000
Manifest this update: Sat 28 Mar 2026 06:00:57 +0000
Manifest next update: Sun 29 Mar 2026 06:00:57 +0000
Files and hashes: 1: Lew-h_DR6pX_cLDKkCKKKvC30n4.asa (hash: d3xiU+jGcgBPAr/J+bp6R3hubPZue+FUp5GBeI9OOQw=)
2: ajXs8V8abbPIJhCSrr4iEyWRNc4.crl (hash: 4LeD2MKMWHWE9GSnCnIX9/d988vSpkBNouCrwUdHoos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:09:bc:cd:0d:c8:ee:ea:80:79:c8:3f:c3:d8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Validity
Not Before: Mar 28 06:00:57 2026 GMT
Not After : Mar 29 06:00:57 2026 GMT
Subject: CN=081738fc71ebec843bd80f06d5e25e48d77416bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:e7:54:3f:ae:6f:55:b3:c9:3c:f3:ec:83:
7f:b3:35:da:99:7c:d4:df:79:c8:25:4d:05:b0:6b:
b1:01:d5:31:b2:98:fb:14:c6:72:8a:2d:c4:b8:5b:
1a:ac:34:d7:9e:40:f7:b1:1c:01:d6:b4:c1:c9:8f:
f3:55:7a:b6:8d:89:07:06:1d:ad:28:e2:b5:99:f5:
f1:aa:c8:7b:d6:5c:e4:ad:68:ce:06:fc:fc:90:7c:
3d:37:20:11:15:64:aa:41:cf:71:c1:50:11:c8:1c:
4a:ed:24:f6:79:53:6e:57:11:7c:55:81:20:be:09:
7d:8a:3c:14:77:a1:51:b1:5c:ab:7b:fb:eb:ec:a9:
8c:ef:ce:f0:0f:f3:9b:21:d1:4c:a2:d1:ad:f6:eb:
9a:90:b3:a5:7f:43:aa:2c:63:02:50:82:83:a0:e5:
a5:51:b4:51:18:60:56:f3:63:33:dc:22:46:e0:72:
8c:c2:58:0b:01:68:72:da:66:f5:97:12:09:ef:ee:
7e:dc:df:f8:ec:51:c8:89:38:82:6e:e8:86:32:ff:
4a:7c:20:8d:6b:3f:e9:52:12:fa:aa:8d:c1:38:9b:
a9:c9:df:83:9e:1a:95:3c:bc:c3:2e:99:ce:30:d8:
6f:70:ad:fc:48:2c:23:db:7d:ac:a2:cc:6d:37:53:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:17:38:FC:71:EB:EC:84:3B:D8:0F:06:D5:E2:5E:48:D7:74:16:BB
X509v3 Authority Key Identifier:
keyid:6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7f:76:4f:68:ae:88:78:fe:76:a6:54:16:06:4f:e9:48:f6:
57:f5:5b:b7:03:62:2f:ed:42:1a:47:b7:a7:ef:78:b9:48:35:
a8:1d:3d:1e:66:11:93:b6:b4:96:b9:23:5c:92:fc:eb:79:cb:
34:58:91:89:50:48:ce:47:03:6a:55:6e:f6:e9:8e:ba:d1:35:
d2:a5:e3:46:ea:f1:36:7b:00:cd:21:fe:7d:ae:6a:7e:c8:bb:
73:d3:69:1f:31:32:af:14:05:f3:9b:5e:dd:d9:53:e8:27:a6:
5e:bc:e5:68:f5:c1:6c:3f:05:36:90:27:76:6f:4d:86:08:6f:
83:6a:ef:ed:0a:5e:43:44:40:c8:e0:0c:c2:79:5a:83:29:42:
55:df:64:3b:cb:97:25:0a:99:6b:1d:61:44:78:ca:11:28:f2:
d0:ab:64:19:8c:c7:17:90:e0:90:09:77:36:fe:de:b3:92:42:
79:85:86:cc:43:e7:46:97:a6:8d:13:ac:1d:63:6c:a7:5f:03:
45:5b:38:96:90:34:e2:47:61:99:28:4d:f9:03:4a:37:69:c8:
05:60:5d:8e:f3:3e:6c:a4:62:9b:5e:22:71:0d:0d:2a:62:ee:
28:ac:ce:c1:21:ad:92:94:6f:cf:84:ee:e6:3b:dc:d5:a4:b8:
d1:80:6c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:07 2026 by rpki-client