Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
File: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft (raw, json)
Hash identifier: wVSLQq+NgNZ0YaOFSYCufNYqwhoEzMuF3UOSlLcfwm8=
Subject key identifier: AE:B1:CB:9A:A9:93:B9:6D:46:5A:50:1E:0C:72:08:72:E7:5B:A6:88
Authority key identifier: 02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
Certificate issuer: /CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Certificate serial: 01A0016F064BF86D8A17CF77D510012B5773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
Manifest number: 166C
Signing time: Fri 14 Aug 2026 18:00:48 +0000
Manifest this update: Fri 14 Aug 2026 18:00:48 +0000
Manifest next update: Sat 15 Aug 2026 18:00:48 +0000
Files and hashes: 1: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl (hash: gLKc28e5IxawOJr4TWsr4bzivGU5/Ruh+eYeo+acgQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:06:4b:f8:6d:8a:17:cf:77:d5:10:01:2b:57:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Validity
Not Before: Aug 14 18:00:48 2026 GMT
Not After : Aug 15 18:00:48 2026 GMT
Subject: CN=aeb1cb9aa993b96d465a501e0c720872e75ba688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:7e:11:1f:24:da:2c:2f:f0:bf:c1:c4:3d:
57:94:fb:c5:f9:36:85:c0:ff:07:db:d8:80:dc:e2:
5c:8a:4b:c8:c6:2a:e9:ac:82:63:2d:41:6b:7f:f9:
53:0d:1d:6a:89:d2:f0:9e:c9:50:ce:35:12:db:43:
dc:2f:bd:49:85:70:5f:31:65:37:be:27:c6:5f:02:
38:9d:35:c6:f0:9e:a7:63:4a:1c:08:18:5a:c1:d7:
17:3f:bc:8c:04:65:95:45:f5:9c:db:d5:88:ac:b4:
ee:72:ad:77:fa:5f:a4:3f:b6:9d:de:73:04:42:74:
6e:b3:fe:dc:fa:2f:b3:25:8b:c9:c4:ff:1e:f3:90:
93:62:c1:59:82:e1:dc:3b:28:fc:05:94:9b:16:d5:
28:b0:4a:2f:92:0f:12:3d:75:3d:8f:41:b3:71:0e:
22:f0:67:8a:cd:06:7f:9c:7a:06:ef:33:9d:85:9f:
c4:31:3e:d5:26:5f:c9:84:af:3f:04:6b:4b:4a:68:
0e:e4:36:14:e0:eb:31:3d:eb:91:c0:e7:0f:5e:bc:
41:50:03:e9:58:63:04:6a:2d:44:f7:1c:09:bd:4f:
40:79:f9:21:69:12:f4:dd:2d:d1:40:e7:9f:44:0f:
b0:37:ad:64:eb:7d:5e:d3:e2:f3:43:24:4a:7b:a7:
0d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B1:CB:9A:A9:93:B9:6D:46:5A:50:1E:0C:72:08:72:E7:5B:A6:88
X509v3 Authority Key Identifier:
keyid:02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:bd:2f:0b:51:b3:14:2e:b5:f0:d7:dc:24:f2:ab:70:e2:49:
a0:cb:d8:5f:8e:38:bf:04:b1:4e:ca:53:53:bb:3b:fd:cf:65:
c5:cb:b3:89:64:52:23:91:b4:14:16:c1:1a:ae:54:a3:f2:4e:
2c:79:25:be:3c:6d:f6:e1:e4:d2:e3:90:62:2f:96:b6:38:eb:
9b:3c:e7:37:61:fd:c4:b6:cb:3a:de:2f:7c:27:17:d4:ab:1e:
08:5c:ec:a8:de:2e:84:73:9a:ff:3b:e3:be:28:f1:7b:c7:6f:
1e:12:6c:11:f4:2f:48:3e:45:04:da:06:e9:01:12:e2:5b:a0:
d5:ca:1b:3c:08:cd:61:54:74:65:52:0a:c4:8d:d0:08:87:c0:
e0:d8:ab:35:11:a5:42:67:46:4f:73:a3:c4:19:1c:2a:e9:bb:
64:bd:8c:d9:23:d8:45:4c:c8:c5:b4:f3:31:d4:e1:99:55:9f:
0b:41:c2:7d:df:3e:61:9f:8b:9e:5f:c8:67:81:07:b7:13:56:
a9:5c:77:87:72:d7:78:b2:7a:be:40:4a:05:91:ca:76:f2:44:
b9:76:6f:11:37:28:b3:d2:3c:a2:29:fd:41:8f:c4:a0:40:b8:
55:7c:4b:85:12:80:17:12:ae:3a:d4:32:ad:7a:2e:26:85:f9:
e2:77:02:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABbwZL+G2KF8931RABK1dzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyM2MzOTcxMDkzNDBiNzY3YmNiMzI0NTE1ZjZkMWY4MmM4
Y2M3Y2YwHhcNMjYwODE0MTgwMDQ4WhcNMjYwODE1MTgwMDQ4WjAzMTEwLwYDVQQD
EyhhZWIxY2I5YWE5OTNiOTZkNDY1YTUwMWUwYzcyMDg3MmU3NWJhNjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq15+ER8k2iwv8L/BxD1XlPvF+TaF
wP8H29iA3OJcikvIxirprIJjLUFrf/lTDR1qidLwnslQzjUS20PcL71JhXBfMWU3
vifGXwI4nTXG8J6nY0ocCBhawdcXP7yMBGWVRfWc29WIrLTucq13+l+kP7ad3nME
QnRus/7c+i+zJYvJxP8e85CTYsFZguHcOyj8BZSbFtUosEovkg8SPXU9j0GzcQ4i
8GeKzQZ/nHoG7zOdhZ/EMT7VJl/JhK8/BGtLSmgO5DYU4OsxPeuRwOcPXrxBUAPp
WGMEai1E9xwJvU9AefkhaRL03S3RQOefRA+wN61k631e0+LzQyRKe6cNqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6xy5qpk7ltRlpQHgxyCHLnW6aIMB8GA1UdIwQY
MBaAFAI8OXEJNAt2e8syRRX20fgsjMfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWp3NWNRazBDM1o3eXpKRkZmYlItQ3lNeDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hNTU5MzUtNTJiZi00ZDZmLThiOTAt
ZTkwZWVmZGIzYWM1LzEvQWp3NWNRazBDM1o3eXpKRkZmYlItQ3lNeDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hNTU5MzUtNTJiZi00ZDZmLThiOTAtZTkwZWVmZGIzYWM1
LzEvQWp3NWNRazBDM1o3eXpKRkZmYlItQ3lNeDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEb0vC1Gz
FC618NfcJPKrcOJJoMvYX444vwSxTspTU7s7/c9lxcuziWRSI5G0FBbBGq5Uo/JO
LHklvjxt9uHk0uOQYi+WtjjrmzznN2H9xLbLOt4vfCcX1KseCFzsqN4uhHOa/zvj
vijxe8dvHhJsEfQvSD5FBNoG6QES4lug1cobPAjNYVR0ZVIKxI3QCIfA4NirNRGl
QmdGT3OjxBkcKum7ZL2M2SPYRUzIxbTzMdThmVWfC0HCfd8+YZ+Lnl/IZ4EHtxNW
qVx3h3LXeLJ6vkBKBZHKdvJEuXZvETcos9I8oin9QY/EoEC4VXxLhRKAFxKuOtQy
rXouJoX54ncCAg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:40 2026 by rpki-client