Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: 8jTMEkgSM1GOdWzl/amiIYDwm1jqBjPvaEqxW+LYEOc=
Subject key identifier: 38:70:69:8C:5C:FD:CB:8B:61:E5:A9:91:2C:1F:DD:AD:07:4F:D1:91
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 01A13F022327B9368255C40A503D751E135F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 118C
Signing time: Thu 15 Oct 2026 10:01:06 +0000
Manifest this update: Thu 15 Oct 2026 10:01:06 +0000
Manifest next update: Fri 16 Oct 2026 10:01:06 +0000
Files and hashes: 1: 8oGUZV5rDuOAmPAiHSVq6YFIa4c.roa (hash: itFCiAzcsWnQOTmyfhBB9FmGr68OYeNmm+DboS8k52c=)
2: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: qY/r8+cjSc3TWUxNiyIufy/f/3oO233dnC+4/4SGIPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:23:27:b9:36:82:55:c4:0a:50:3d:75:1e:13:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Oct 15 10:01:06 2026 GMT
Not After : Oct 16 10:01:06 2026 GMT
Subject: CN=3870698c5cfdcb8b61e5a9912c1fddad074fd191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a5:56:76:23:fc:fa:9c:d8:69:d8:1d:5d:dc:
56:89:39:8f:b9:61:1f:dd:a5:b2:1b:3c:5f:3f:33:
ec:f3:a4:08:12:aa:36:02:78:6b:22:b6:a3:c3:21:
bc:c1:20:7a:46:cc:4d:82:d8:48:0b:ef:29:50:04:
81:70:d4:ec:bc:87:30:eb:af:0f:38:0f:85:58:ce:
40:b8:c8:8c:d4:09:cf:d4:cf:40:37:10:af:cc:74:
73:6d:2a:6f:f1:4d:67:c0:8a:18:8f:a7:a3:13:62:
8d:1c:14:b0:ac:fe:08:c1:ff:53:4a:0e:68:a0:eb:
a4:2f:60:66:4a:59:f6:8c:66:c0:bd:64:e8:62:41:
70:23:90:aa:0b:e7:6c:89:4e:09:52:7c:c6:54:d7:
4d:5e:54:91:08:f0:5b:44:2c:ed:21:e0:99:f1:5b:
e9:49:e3:59:b0:d8:a2:d4:45:18:99:53:64:e5:d2:
f4:61:87:cc:b1:ca:ab:05:e4:c3:9f:c0:f6:a7:ce:
22:72:b2:45:cd:70:04:70:f0:72:7e:01:d5:c4:bf:
a2:d6:c9:6f:3a:4d:6a:e8:fa:69:18:7d:14:e3:48:
3b:60:9f:cf:61:38:0a:2a:ed:3e:54:c9:c4:c2:89:
a0:e7:a9:c2:00:9a:88:b4:a4:3e:b8:5a:63:c0:90:
69:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:70:69:8C:5C:FD:CB:8B:61:E5:A9:91:2C:1F:DD:AD:07:4F:D1:91
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:bf:6c:31:a2:e0:d2:38:fa:ca:c6:e9:7b:de:fa:3d:8f:70:
c0:4c:bd:a6:66:20:12:dd:c1:32:d2:36:7c:4e:38:9c:3d:48:
49:d4:f5:88:d8:5b:5f:11:19:d7:2f:e1:6f:db:cb:a8:78:2f:
39:d4:5f:bf:a2:49:8a:8c:50:60:27:02:be:16:54:b3:45:4e:
80:99:03:88:90:fe:50:93:21:55:c5:eb:7a:83:17:f6:61:a0:
b7:21:d0:91:60:d6:65:39:a8:53:71:12:2b:f5:19:dc:ce:80:
fc:a7:78:34:f6:83:59:25:f5:9e:b1:3b:0f:ff:08:62:f7:0a:
6c:ed:a3:17:a1:6c:61:27:ed:da:60:4c:b8:a6:d7:5f:04:6e:
ba:4f:a4:ca:a1:14:70:0f:0d:d7:4f:b2:27:69:9a:c0:11:de:
84:f6:0e:12:4d:1b:3a:2c:0e:31:60:f3:e9:9c:3b:1f:26:dd:
c8:d6:37:f7:5e:9a:8c:14:12:cf:9a:8f:2f:a0:49:ec:23:b6:
1c:a8:de:f0:64:15:70:fa:26:1d:46:36:5f:b2:1f:9a:a4:fd:
57:1a:ab:44:ac:24:32:75:02:38:d8:06:91:bb:c5:6c:9c:f2:
6d:ce:08:84:e6:14:2f:22:7e:9c:10:3d:a7:1c:47:4a:7e:f3:
54:95:08:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:40:47 2026 by rpki-client