Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
File: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft (raw, json)
Hash identifier: fdA2vzYgexy6v3XP6QbcmfYZwOkSaForP+xrPv9dHpo=
Subject key identifier: 16:79:E1:C3:C7:F0:5A:1F:FF:44:0A:C3:5F:C2:D9:78:57:AC:EF:D4
Authority key identifier: 02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
Certificate issuer: /CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Certificate serial: 019D38D3A677F8C2F2655A228288561DDF13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
Manifest number: 14FB
Signing time: Sun 29 Mar 2026 09:01:27 +0000
Manifest this update: Sun 29 Mar 2026 09:01:27 +0000
Manifest next update: Mon 30 Mar 2026 09:01:27 +0000
Files and hashes: 1: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl (hash: ZOur21LH4tGSnPK65G/HO85ccwNvmyjz81U1grpPzR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a6:77:f8:c2:f2:65:5a:22:82:88:56:1d:df:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Validity
Not Before: Mar 29 09:01:27 2026 GMT
Not After : Mar 30 09:01:27 2026 GMT
Subject: CN=1679e1c3c7f05a1fff440ac35fc2d97857acefd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:fb:71:b1:86:1e:0e:a3:6b:68:c7:53:47:
b4:64:25:a8:5e:11:ff:be:4c:74:f1:45:40:a8:67:
ca:fe:8f:0f:1d:dc:e2:2f:28:63:bf:e5:55:64:75:
8c:e5:2f:f5:33:c4:e3:a3:e3:5e:41:8c:0c:fc:0e:
ae:11:c5:93:22:05:d6:57:1e:0c:bf:73:09:dc:b6:
35:1f:4b:c3:03:c6:29:7d:a3:29:b6:91:29:a6:f2:
25:ef:ed:a4:ba:49:da:b7:ca:a3:df:60:ce:f3:9b:
11:51:61:fa:69:81:50:10:d0:45:31:0f:8f:c0:48:
5e:81:3a:8b:6b:71:fc:e3:09:9a:a5:0f:40:8f:0b:
c2:df:75:8b:57:cb:17:01:fc:44:04:68:23:18:1d:
d9:a2:99:9f:06:56:a6:c8:01:38:ff:3e:6b:59:30:
0e:d2:6b:52:da:6d:b8:56:9a:b6:ce:68:98:34:25:
e6:07:c3:25:83:6a:5e:a5:5a:d4:f3:05:29:16:69:
ba:f4:01:e8:a9:b0:7c:e2:15:25:d0:19:fb:eb:49:
a4:b2:12:99:b7:18:90:18:41:e2:08:38:25:54:34:
9f:9e:89:62:a9:f0:a8:08:db:fa:20:c5:56:58:af:
0c:a2:50:7e:be:15:25:c0:74:9d:dd:84:c1:fa:8b:
c9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:79:E1:C3:C7:F0:5A:1F:FF:44:0A:C3:5F:C2:D9:78:57:AC:EF:D4
X509v3 Authority Key Identifier:
keyid:02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2b:54:ad:ab:c3:1b:da:be:94:63:2a:3a:ae:f6:2e:7f:f5:
71:a7:53:95:8a:03:02:ae:2e:19:53:1a:4c:12:a1:36:4f:b5:
e5:7c:c2:0a:e9:d1:59:b6:09:da:0d:2b:d5:e4:af:76:cd:c8:
d2:64:10:77:88:ae:23:0e:83:ca:55:60:b7:37:a5:46:47:db:
d5:af:00:3a:bb:f9:f6:f5:c8:8e:d6:d5:48:b2:02:23:e5:e0:
e9:52:c1:6b:f9:ae:43:65:23:3f:be:ff:e3:de:07:dc:93:26:
4b:03:d4:df:b2:ef:ae:54:d8:dd:0b:af:36:04:d3:ff:cd:45:
46:0a:b8:c5:f7:57:92:22:a6:2e:50:55:9e:d6:29:9e:57:08:
04:95:01:dc:f5:47:3d:8d:e0:5c:12:84:31:ea:24:e3:17:24:
1a:3a:2e:c8:cf:b9:38:16:3b:bc:5b:3c:48:8f:cf:cb:e0:ce:
c9:b2:0f:f9:fa:dd:60:ab:10:b3:ae:7d:c9:4a:ae:35:4f:b3:
07:1f:6f:57:26:11:33:d4:fb:7a:4a:e8:58:ce:d8:42:09:36:
a5:ac:2c:b8:a1:be:79:f4:4d:63:11:44:b0:53:9f:a8:2b:5a:
2f:7d:5e:ca:ea:69:15:5d:a8:66:38:36:4d:45:35:c8:86:91:
dd:82:5b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:40 2026 by rpki-client