Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: NXRnzhNOkFH1MW65BqIRKmp+Wjwurobu3yONBZZZixk=
Subject key identifier: FE:2E:E6:EB:EE:E0:45:FE:E5:14:3B:07:5C:E8:7E:2C:8A:DB:A8:EE
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 019D39AF26135855640C94EAA66C09A66F0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 0F77
Signing time: Sun 29 Mar 2026 13:01:13 +0000
Manifest this update: Sun 29 Mar 2026 13:01:13 +0000
Manifest next update: Mon 30 Mar 2026 13:01:13 +0000
Files and hashes: 1: 8oGUZV5rDuOAmPAiHSVq6YFIa4c.roa (hash: itFCiAzcsWnQOTmyfhBB9FmGr68OYeNmm+DboS8k52c=)
2: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: aFSedD/F8a0tzvcVxa4DyiCc9qP/WTRJh8rU/9qhIss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:26:13:58:55:64:0c:94:ea:a6:6c:09:a6:6f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Mar 29 13:01:13 2026 GMT
Not After : Mar 30 13:01:13 2026 GMT
Subject: CN=fe2ee6ebeee045fee5143b075ce87e2c8adba8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dd:1f:7e:d5:bb:82:4a:85:ea:34:89:5c:eb:
80:07:74:69:f4:7e:1c:81:e3:d2:aa:f0:50:82:f8:
24:29:3f:fb:ff:21:fb:e9:76:10:0d:a7:4f:79:2d:
59:15:ac:47:06:95:73:a6:ac:d8:e6:47:15:09:92:
99:6f:7e:7d:19:72:0a:8b:16:f6:4d:30:02:ee:33:
43:da:90:19:42:1c:07:4c:86:f7:56:76:51:8b:cc:
64:65:0e:60:f4:6a:58:54:06:21:bc:46:6e:1a:18:
97:5e:62:0e:68:35:42:b6:0d:90:f2:24:cb:03:7e:
3d:d2:61:19:e6:4c:34:90:59:3f:c6:39:07:2b:3f:
1c:83:df:5a:9a:9e:ba:9b:92:06:c4:46:8f:f6:88:
64:b0:9e:9b:dc:96:27:89:be:98:9e:ab:67:ca:30:
6e:0f:ed:db:ad:ac:7c:7f:4b:65:bd:55:2c:cd:a1:
23:3b:27:56:2b:ce:9e:5a:ea:72:e0:17:f3:a0:d0:
73:91:18:74:bd:d5:d4:1f:85:bd:d8:a6:a6:6b:14:
f1:02:5f:a2:07:81:98:c9:40:64:56:17:4c:3c:bc:
2e:ec:b4:a9:30:6d:d2:9e:70:28:5f:e7:04:1e:42:
ca:0c:52:12:f3:e9:28:ed:39:99:10:13:53:bc:53:
0d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2E:E6:EB:EE:E0:45:FE:E5:14:3B:07:5C:E8:7E:2C:8A:DB:A8:EE
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7e:6e:e9:a8:7d:ac:4d:0b:f6:04:b5:67:8a:da:6a:9e:87:
48:a5:c7:72:f8:85:3f:45:22:99:60:bc:03:d9:52:74:63:5a:
d6:4d:60:c4:17:c5:79:1b:89:c6:8e:6b:4d:2b:18:b5:14:35:
cf:4b:a7:87:80:aa:63:66:ed:a0:a4:aa:bd:66:31:2d:d8:4e:
e7:f0:7a:ca:9a:55:6c:51:c9:f8:62:46:fe:97:e2:71:a5:55:
24:a9:29:93:de:b6:6e:41:a3:79:f6:11:ab:2c:76:c4:32:00:
97:d4:b1:4c:ce:8e:5b:63:37:55:39:38:66:e7:19:d6:4f:02:
00:f6:8e:16:7e:72:09:ed:00:ef:c0:d9:5c:bd:13:7e:eb:63:
2d:ad:65:75:e4:7e:92:7f:a9:a3:b9:6a:45:bb:17:18:0b:09:
11:d8:0c:4e:d8:30:0d:a5:12:9c:37:1d:b2:41:06:59:c3:92:
31:4a:39:bf:98:1c:85:43:c0:57:4e:8e:21:7b:e0:37:c0:b3:
d5:c0:11:1c:30:96:a9:64:f8:e5:92:b5:7e:86:f8:33:2e:ec:
01:66:88:25:6b:41:ed:42:06:ac:d9:fb:1e:11:3a:e3:f3:7e:
a6:45:bc:dc:35:8d:47:ce:cc:06:5d:93:7b:3b:68:12:47:9f:
a9:94:a9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:22 2026 by rpki-client