
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
File: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft (raw, json)
Hash identifier: 3VWPH36TZLG0QK5ZPu9fcEARL7i5ofgkgqD4GE/zjL8=
Subject key identifier: 68:C6:CE:0F:5E:3E:F4:0D:D7:8E:E8:C4:60:7E:5E:5E:66:45:E9:47
Authority key identifier: 02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
Certificate issuer: /CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Certificate serial: 01A13E26C922D4226BDB71D61BF631B7A063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
Manifest number: 1710
Signing time: Thu 15 Oct 2026 06:01:31 +0000
Manifest this update: Thu 15 Oct 2026 06:01:31 +0000
Manifest next update: Fri 16 Oct 2026 06:01:31 +0000
Files and hashes: 1: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl (hash: MJiFPeIWLW1O7FxsiVmJjrc4rAAXXLnNbIXHGzBm+iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:c9:22:d4:22:6b:db:71:d6:1b:f6:31:b7:a0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Validity
Not Before: Oct 15 06:01:31 2026 GMT
Not After : Oct 16 06:01:31 2026 GMT
Subject: CN=68c6ce0f5e3ef40dd78ee8c4607e5e5e6645e947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:51:b4:7b:2d:18:43:eb:90:e3:f4:a7:35:
42:98:b4:54:67:0a:b2:8a:ec:d5:f2:ea:78:42:2f:
0d:68:7f:4c:db:10:fc:0c:6a:39:a1:bf:97:99:31:
91:f2:c9:fe:28:e0:0f:ee:a0:e3:e5:5e:10:60:25:
32:be:e8:d8:ed:1d:88:61:e2:31:da:e1:71:1d:b6:
e4:96:ce:07:ac:c9:d1:d3:e2:be:52:eb:69:8e:dc:
06:4f:70:19:cb:fa:0c:60:c9:1e:0b:ab:99:ad:78:
fa:03:c4:c9:10:8e:a5:fc:bc:ae:86:ac:99:2d:ae:
82:14:d9:85:fb:4b:f0:82:6e:73:c9:bb:49:27:33:
ae:1d:27:7d:b9:dc:50:de:2d:bd:09:bc:c5:64:2e:
fc:9f:e4:0e:e0:01:7e:fd:9f:62:55:d9:ec:8b:fd:
99:b1:35:05:84:34:1e:14:ac:c0:e1:21:c4:17:96:
c2:f5:94:3e:1b:53:8c:19:f8:48:c0:63:a3:d1:d8:
3d:52:67:b0:20:81:bb:cf:64:44:ac:aa:32:72:c9:
87:52:57:d2:e7:2c:39:a8:13:11:bf:69:65:26:ba:
b4:86:f0:d4:53:1d:31:d5:5b:0d:ff:ed:d4:f3:ba:
46:45:67:26:d4:1e:f6:9b:d6:a6:98:20:44:15:d8:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C6:CE:0F:5E:3E:F4:0D:D7:8E:E8:C4:60:7E:5E:5E:66:45:E9:47
X509v3 Authority Key Identifier:
keyid:02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:71:fb:5f:f2:b7:44:80:3d:10:c2:d6:92:20:1c:2c:9a:2f:
4e:8a:97:d7:c4:04:27:9f:94:47:70:ae:6b:65:b3:2f:bb:55:
e0:68:8c:02:a8:a5:40:59:82:23:cc:fe:1d:97:7a:1d:97:f9:
29:05:27:ee:84:1f:4e:6c:fe:81:85:19:32:0f:e2:41:89:51:
ae:f9:79:b0:34:db:a7:32:a0:8c:47:52:05:09:65:3e:99:4b:
7f:30:f2:ea:7b:ec:b8:46:22:d6:30:8e:43:ad:ac:cf:39:13:
5a:58:16:c1:45:4e:e0:4a:08:fe:95:fb:19:20:d5:e0:09:ca:
1e:3e:01:25:0d:1f:78:66:84:70:f8:02:3f:5d:3d:ae:23:23:
03:62:92:a1:a5:5d:4b:87:e5:35:6d:ef:e0:7a:92:e4:4d:9f:
c4:b4:eb:6f:2f:c5:67:83:f9:f4:1d:77:ce:2b:d5:3a:1d:d2:
90:ac:93:6b:8f:59:a7:71:2c:73:43:5e:fd:62:85:d7:96:88:
3e:33:70:a8:56:4e:77:0c:ef:0b:73:75:39:51:37:a2:9c:ee:
89:63:26:67:8a:be:ae:7c:dd:6d:be:d4:07:06:11:38:15:97:
70:de:7e:c6:bf:27:0f:bd:4b:48:83:d2:ec:98:12:6f:b1:f5:
8f:37:e9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:06:21 2026 by rpki-client