Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
File: ajXs8V8abbPIJhCSrr4iEyWRNc4.mft (raw, json)
Hash identifier: EOS7EcvGLDDRgRT9CWI5USGXlG+czXRKj2tYAXg/KXs=
Subject key identifier: 35:5B:23:F4:E6:F4:35:C1:5C:CA:A6:31:3A:F4:13:BD:29:4A:93:E4
Authority key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
Certificate issuer: /CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Certificate serial: 019D38D374FA1C28948B550CB7C1F8118A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
Manifest number: 0126
Signing time: Sun 29 Mar 2026 09:01:15 +0000
Manifest this update: Sun 29 Mar 2026 09:01:15 +0000
Manifest next update: Mon 30 Mar 2026 09:01:15 +0000
Files and hashes: 1: Lew-h_DR6pX_cLDKkCKKKvC30n4.asa (hash: d3xiU+jGcgBPAr/J+bp6R3hubPZue+FUp5GBeI9OOQw=)
2: ajXs8V8abbPIJhCSrr4iEyWRNc4.crl (hash: aRwu4mOZj7Swe+5mArC7GsD9F053J/JlzmXnlxf3FWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:74:fa:1c:28:94:8b:55:0c:b7:c1:f8:11:8a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Validity
Not Before: Mar 29 09:01:15 2026 GMT
Not After : Mar 30 09:01:15 2026 GMT
Subject: CN=355b23f4e6f435c15ccaa6313af413bd294a93e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f6:cf:b4:f8:7f:c1:83:2f:c0:f0:a5:90:c7:
80:fd:94:02:69:df:82:dc:4c:a8:9d:10:90:1d:4b:
f8:af:42:bd:d5:74:9b:34:ea:94:5a:cd:b7:79:0f:
31:ca:c4:95:fd:08:3b:d6:94:ba:1e:a9:cb:72:31:
d6:be:f6:6a:59:ed:89:9b:d0:1c:54:e4:ea:b0:2d:
be:8c:0b:36:81:b5:11:41:65:93:c3:b7:f6:7d:87:
b9:01:b7:4f:69:fa:c6:f9:fc:98:fd:3f:f3:7d:9e:
bb:df:ec:02:a2:6a:2c:af:c4:95:43:a3:dc:60:88:
6b:24:8c:b8:ef:8a:ab:07:04:0e:bc:3a:96:14:69:
75:62:d7:1d:d3:4b:a3:16:85:3c:4f:04:12:8b:5b:
3d:c0:62:53:39:8f:f6:20:16:dd:e5:44:39:50:ca:
18:10:f3:a7:83:3e:7b:39:63:36:ef:cb:ae:9d:b4:
d5:51:72:26:21:83:c2:d0:17:d4:54:a6:ff:9e:8c:
eb:09:03:2b:3b:5f:16:49:36:8c:a9:9d:f9:94:99:
ab:59:cb:4d:d5:77:5f:5f:2a:5e:25:21:63:ad:3e:
9b:ad:51:67:a1:1e:51:9e:66:4a:15:40:dc:d5:94:
93:35:64:52:0c:05:4d:7e:dc:08:ad:68:fb:9f:ad:
5e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5B:23:F4:E6:F4:35:C1:5C:CA:A6:31:3A:F4:13:BD:29:4A:93:E4
X509v3 Authority Key Identifier:
keyid:6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7c:68:d9:e0:6e:c9:58:fe:56:09:47:d4:c1:ef:e5:3b:eb:
39:7e:67:6d:d1:d9:cf:85:0c:96:03:9c:6a:63:d9:aa:57:0f:
1a:27:ab:e3:54:5f:21:80:c3:01:25:2b:9d:a3:39:48:14:55:
ed:f4:5e:29:79:7e:fd:ed:34:2d:67:0a:df:3a:be:c1:1b:c0:
3c:db:f6:f0:5e:bc:97:7c:14:5e:62:27:5f:29:99:3f:d3:0a:
4d:20:10:5e:8d:25:44:82:c9:f5:92:db:34:88:17:cb:13:ff:
13:8f:c6:72:bc:6a:bf:aa:60:b9:d5:6a:e8:e6:24:17:78:a5:
af:87:c7:4b:f7:dd:e3:5c:ed:b8:88:8b:d7:f5:80:59:fa:ec:
7f:4f:9a:44:8e:02:98:69:7b:29:0e:54:7d:39:49:d0:9d:a6:
e2:02:c5:65:83:dc:50:9c:ec:c4:e2:1d:31:1e:e0:bd:90:8c:
30:17:d9:ff:25:38:d9:ee:18:1d:af:b5:71:83:a0:ce:4a:2f:
4a:ac:2a:51:99:9e:68:aa:5a:91:9b:1d:48:f7:4e:1c:c8:5c:
9d:db:78:a9:d4:34:1e:f4:cb:c9:41:77:f6:77:35:75:94:fb:
5f:f1:e4:80:cd:7d:0a:f4:53:71:cf:11:40:f0:f0:77:04:c7:
59:ad:13:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:44 2026 by rpki-client