Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
File: ajXs8V8abbPIJhCSrr4iEyWRNc4.mft (raw, json)
Hash identifier: Jvx3aWDSac19xTqgww3LUI5Z8M2Za6iKrQ17R5x9ZVA=
Subject key identifier: C7:78:A7:41:E9:8A:0A:29:7D:2C:C6:08:8D:F4:F6:A0:53:96:23:B8
Authority key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
Certificate issuer: /CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Certificate serial: 01A1AB5EB839FD0B43325E8924D40FFF9134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
Manifest number: 0374
Signing time: Thu 05 Nov 2026 11:01:13 +0000
Manifest this update: Thu 05 Nov 2026 11:01:13 +0000
Manifest next update: Fri 06 Nov 2026 11:01:13 +0000
Files and hashes: 1: ajXs8V8abbPIJhCSrr4iEyWRNc4.crl (hash: MR1DfPTwzTs/jT8phrV4fZB40lr8MZELJig79gKDb8k=)
2: bE-Zx7pJextm2dOAdeG5Axd6NfI.asa (hash: AKf5YMxr7u8QSu3cgJVHOwtWLUq68VXdyfOrAzi++uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:5e:b8:39:fd:0b:43:32:5e:89:24:d4:0f:ff:91:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Validity
Not Before: Nov 5 11:01:13 2026 GMT
Not After : Nov 6 11:01:13 2026 GMT
Subject: CN=c778a741e98a0a297d2cc6088df4f6a0539623b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:33:b4:b3:75:64:75:cc:20:d3:bc:22:a5:
f8:13:a6:72:2f:e5:e5:5a:52:9c:c7:a5:cc:4a:ca:
e0:74:7f:57:d9:37:0c:72:12:f1:85:e3:58:67:74:
0e:33:70:37:12:71:19:bb:67:f8:74:21:b3:2e:ac:
dd:36:57:2d:20:89:5e:db:d3:22:4f:ed:56:04:b9:
fe:cd:78:2d:ae:74:f4:47:90:ac:af:2b:14:58:66:
e1:4f:7e:75:cc:5f:95:3e:ab:47:ca:04:bf:c0:c3:
3a:5b:28:2c:7c:a2:b2:53:0e:b0:f1:84:d5:78:c8:
67:a5:12:55:6e:56:be:29:aa:e5:25:c8:f4:bc:e5:
f5:af:fd:d0:ef:d9:4a:cb:06:07:6b:bb:17:0d:72:
e8:84:d3:bc:c9:af:0e:85:ad:c3:90:09:99:8e:34:
ef:9f:de:4f:50:25:96:cd:e0:bf:e3:88:5f:6c:86:
9f:8f:ed:b9:39:7d:ca:f8:ae:1b:d6:cc:42:53:2d:
4e:4e:36:2b:a2:82:94:88:0b:7c:7d:e4:95:26:04:
db:db:6d:12:34:04:96:7a:e2:41:61:8f:cc:a6:97:
b9:5f:f1:e5:eb:e6:99:92:36:e4:96:b8:c5:08:80:
1b:45:53:0a:a8:b7:2f:f4:5f:8d:9c:7a:dd:8c:a7:
4d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:78:A7:41:E9:8A:0A:29:7D:2C:C6:08:8D:F4:F6:A0:53:96:23:B8
X509v3 Authority Key Identifier:
keyid:6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b0:56:8d:41:8c:91:f7:6a:7b:c8:0b:84:99:46:c5:b8:e1:
83:a0:09:59:d7:11:cc:b3:e7:63:1f:82:32:28:17:cf:95:7b:
23:8a:1f:9e:24:8f:dc:d2:c9:8a:5d:dd:b2:81:8d:9a:c9:c4:
67:71:49:07:6d:70:e2:eb:74:07:2c:18:28:0f:99:53:ea:44:
79:26:a7:cb:df:af:71:1d:37:4c:7e:ef:59:df:6a:eb:c1:6d:
d8:95:f5:6a:b0:33:39:ae:27:65:43:78:b5:68:94:fe:3f:3e:
17:d8:16:12:91:07:c1:34:c5:ef:d4:c1:56:1b:79:e1:52:ff:
16:49:b9:5c:d3:d4:0d:d2:e0:30:69:63:5b:6f:d0:42:47:78:
6b:93:58:24:be:9f:fd:74:4c:6f:da:63:49:ef:2f:18:ed:a5:
04:8e:95:f4:65:f0:26:4a:d7:95:38:e4:41:cc:a5:d2:6b:31:
1f:e9:ce:8e:51:95:6b:fe:ae:6d:2c:3c:3b:87:8f:54:28:31:
8f:1a:ad:eb:72:72:dc:fc:89:d4:ad:5b:1b:d4:58:2f:4b:43:
e4:bc:6f:df:1e:d3:ec:8b:7c:55:6b:4b:99:e9:bf:e2:e7:2c:
0a:64:14:47:7a:d7:80:4e:d0:1a:a2:5b:0b:7d:a3:df:f0:d9:
52:ac:2e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:03:30 2026 by rpki-client