Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: +8bI/Yn/1CSDm+y0KIh8X1wk5yZMPD/4vzabhH3uGjI=
Subject key identifier: 21:31:6A:68:F3:01:A6:DB:46:49:1F:47:5F:B6:AB:CC:15:FE:51:C8
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 019F189EE53FD386F097BCF03B15BAC91037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 106F
Signing time: Tue 30 Jun 2026 13:01:34 +0000
Manifest this update: Tue 30 Jun 2026 13:01:34 +0000
Manifest next update: Wed 01 Jul 2026 13:01:34 +0000
Files and hashes: 1: 8oGUZV5rDuOAmPAiHSVq6YFIa4c.roa (hash: itFCiAzcsWnQOTmyfhBB9FmGr68OYeNmm+DboS8k52c=)
2: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: LI3zhbXBS2/Ps9J9mgF1YYzbLmSsNNWYShQjZD9T2+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:e5:3f:d3:86:f0:97:bc:f0:3b:15:ba:c9:10:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Jun 30 13:01:34 2026 GMT
Not After : Jul 1 13:01:34 2026 GMT
Subject: CN=21316a68f301a6db46491f475fb6abcc15fe51c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:35:87:63:8a:fc:7d:6c:23:da:7a:ce:95:
8d:d0:a0:50:b6:4f:18:c3:e6:3e:a6:d3:27:26:00:
78:40:a0:d0:00:90:9d:27:a7:00:2c:92:3e:53:a0:
b8:21:ba:2e:96:20:ad:a1:a1:c9:b9:4c:c4:f3:a8:
7a:0f:49:ca:46:80:34:95:e5:76:35:5c:45:91:60:
fd:fb:4b:18:8f:71:4a:8a:14:b3:ac:a7:67:71:48:
3a:c1:ab:d5:e6:71:69:56:8c:35:21:40:1f:8e:ea:
f0:a5:9c:3b:c2:6a:2f:df:ad:07:66:70:8c:3e:7b:
3e:be:70:e9:47:f2:69:0d:12:be:ee:69:5d:24:5d:
54:08:f9:ea:97:11:8c:bd:d8:d9:8c:41:cc:f0:76:
96:c0:93:52:f3:01:5b:86:37:4c:38:8f:f5:56:e4:
7f:e5:37:c9:d9:49:96:33:d4:71:43:cb:c7:b2:12:
1a:08:7e:ae:b8:4b:25:75:75:f8:dd:9a:6c:e3:ed:
b2:06:75:ad:3e:b6:83:40:a3:2d:7c:70:10:d2:2f:
7b:5f:cf:62:c7:1e:a6:b3:a3:bb:67:97:e5:eb:c1:
19:2d:89:51:f6:cf:2c:6b:0b:4f:a2:b8:aa:04:f9:
16:23:7b:71:e7:df:3c:95:42:03:8c:d4:33:c6:16:
99:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:31:6A:68:F3:01:A6:DB:46:49:1F:47:5F:B6:AB:CC:15:FE:51:C8
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c2:b8:56:a5:be:38:6a:0a:f3:c4:62:ce:aa:98:5a:b4:42:
04:8b:fc:4e:50:1d:2b:ed:b3:07:d2:ef:b6:c2:c1:8b:c4:87:
bd:fe:66:7d:23:64:54:df:74:b9:e3:ec:5b:b8:d5:b6:bb:20:
a2:59:df:47:b0:77:89:7d:46:47:43:44:ac:82:e4:c8:8e:f2:
90:be:f1:d3:ef:27:56:96:0b:37:bb:25:37:d6:f0:ea:ff:59:
80:e1:fa:73:62:29:5c:cb:36:9a:79:87:ee:8e:d9:6a:03:10:
29:50:46:e7:f6:77:47:1d:a6:cd:9b:47:a7:cf:aa:f9:22:96:
1d:24:3d:3f:a9:01:06:55:44:54:9f:cd:a1:22:3b:13:6a:6b:
81:5b:48:bc:5d:b1:a1:26:d0:e3:e5:eb:96:f6:ee:08:c7:73:
4b:25:ab:32:13:90:03:61:9a:a7:83:8a:3f:a4:cc:0f:2f:a2:
e3:6d:33:dc:31:64:c4:19:0e:48:57:48:17:86:44:d1:50:b3:
32:38:41:16:5a:3e:bb:53:6a:95:63:68:11:c8:49:02:c1:c6:
59:bf:c7:b7:e3:52:ad:ba:2c:50:0a:cb:0d:55:69:a6:c5:6f:
87:5e:66:2a:bc:f9:36:5c:1c:27:72:21:72:5b:7f:b7:0e:fe:
e5:b1:8c:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnuU/04bwl7zwOxW6yRA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyM2FkNmM0NDU4ZmU2OWY0NTkxZmFjY2I1NmJkYzMzMWFm
NmI0Y2QwHhcNMjYwNjMwMTMwMTM0WhcNMjYwNzAxMTMwMTM0WjAzMTEwLwYDVQQD
EygyMTMxNmE2OGYzMDFhNmRiNDY0OTFmNDc1ZmI2YWJjYzE1ZmU1MWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFY1h2OK/H1sI9p6zpWN0KBQtk8Y
w+Y+ptMnJgB4QKDQAJCdJ6cALJI+U6C4IbouliCtoaHJuUzE86h6D0nKRoA0leV2
NVxFkWD9+0sYj3FKihSzrKdncUg6wavV5nFpVow1IUAfjurwpZw7wmov360HZnCM
Pns+vnDpR/JpDRK+7mldJF1UCPnqlxGMvdjZjEHM8HaWwJNS8wFbhjdMOI/1VuR/
5TfJ2UmWM9RxQ8vHshIaCH6uuEsldXX43Zps4+2yBnWtPraDQKMtfHAQ0i97X89i
xx6ms6O7Z5fl68EZLYlR9s8sawtPoriqBPkWI3tx5988lUIDjNQzxhaZjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCExamjzAabbRkkfR1+2q8wV/lHIMB8GA1UdIwQY
MBaAFAI61sRFj+afRZH6zLVr3DMa9rTNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQt
MjRmMjg3YzlhNWY0LzEvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQtMjRmMjg3YzlhNWY0
LzEvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMK4VqW+
OGoK88RizqqYWrRCBIv8TlAdK+2zB9LvtsLBi8SHvf5mfSNkVN90uePsW7jVtrsg
olnfR7B3iX1GR0NErILkyI7ykL7x0+8nVpYLN7slN9bw6v9ZgOH6c2IpXMs2mnmH
7o7ZagMQKVBG5/Z3Rx2mzZtHp8+q+SKWHSQ9P6kBBlVEVJ/NoSI7E2prgVtIvF2x
oSbQ4+XrlvbuCMdzSyWrMhOQA2Gap4OKP6TMDy+i420z3DFkxBkOSFdIF4ZE0VCz
MjhBFlo+u1NqlWNoEchJAsHGWb/Ht+NSrbosUArLDVVppsVvh15mKrz5NlwcJ3Ih
clt/tw7+5bGM4Q==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:23 2026 by rpki-client