Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: HLBo7fMU15sUFQyYEnkVhZiOUq4t9gwHnK1ShgIBtrk=
Subject key identifier: 1A:A5:71:35:43:60:99:94:B0:FE:F7:E5:59:BC:0F:7F:10:A9:5A:74
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 019EBFC8687143A92DEBA2050AB82F6C8ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 1041
Signing time: Sat 13 Jun 2026 07:00:42 +0000
Manifest this update: Sat 13 Jun 2026 07:00:42 +0000
Manifest next update: Sun 14 Jun 2026 07:00:42 +0000
Files and hashes: 1: 8oGUZV5rDuOAmPAiHSVq6YFIa4c.roa (hash: itFCiAzcsWnQOTmyfhBB9FmGr68OYeNmm+DboS8k52c=)
2: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: kGT9RXhqEafi/3D8rGUr99fAdBNsHeDynYgFf50PvvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:68:71:43:a9:2d:eb:a2:05:0a:b8:2f:6c:8e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Jun 13 07:00:42 2026 GMT
Not After : Jun 14 07:00:42 2026 GMT
Subject: CN=1aa5713543609994b0fef7e559bc0f7f10a95a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3a:93:93:8f:68:96:10:a2:c3:ba:2a:7c:66:
41:39:2c:25:05:aa:34:97:5c:aa:58:5a:65:77:18:
ce:7f:24:80:7c:d5:ca:75:f5:fc:8a:f6:8c:6c:77:
a5:d9:96:55:b8:6f:a0:27:82:9c:d1:61:29:e2:a7:
1c:1e:f6:5e:d7:3d:9e:3a:aa:74:cc:86:e9:55:2f:
91:2c:a1:7e:d5:d3:58:41:a2:4e:c9:db:c5:2a:72:
85:78:11:4b:ff:4d:ed:f8:b0:91:55:be:fb:f7:57:
47:1a:bd:bc:88:d0:76:79:30:f1:35:60:05:ae:48:
67:18:31:0d:c5:7a:2a:56:09:0a:3a:22:5e:28:08:
44:be:df:8b:38:cc:cf:15:c7:1e:ea:c9:4b:57:85:
86:ca:01:68:33:86:a3:55:4c:87:c2:18:6e:60:4e:
5d:a2:3d:ab:4b:98:eb:e4:5e:17:37:8f:93:9e:bb:
45:31:3c:e3:b3:e3:3a:16:ae:d4:c0:c4:e8:39:09:
bc:83:ed:92:08:39:e9:2d:4c:e7:b1:17:5d:56:29:
8d:34:14:d7:91:90:45:ef:da:22:ce:5f:92:ae:d7:
35:74:ba:f8:d9:58:7c:23:08:ff:e1:7a:15:df:d4:
55:57:e6:8d:79:c5:70:e5:3c:9c:23:52:f3:21:34:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A5:71:35:43:60:99:94:B0:FE:F7:E5:59:BC:0F:7F:10:A9:5A:74
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:16:7f:75:0d:62:b9:18:56:43:a7:a7:b8:af:6b:d2:22:4f:
fe:12:8a:31:1c:5d:0b:97:b1:b4:03:ac:a5:74:2a:ad:da:21:
25:fb:b8:fd:00:f5:fa:0b:04:aa:f2:9e:0e:45:23:47:9d:60:
19:0d:f3:a0:3b:12:13:99:9d:36:38:ab:ef:74:bd:29:65:fa:
3b:1d:50:33:c4:74:7b:3e:25:5c:d2:5f:8f:58:4f:9d:0f:83:
c6:c8:5e:62:b4:2c:ce:8c:3d:63:7f:c9:f4:f4:46:a0:63:80:
37:f2:f1:14:2d:98:1f:67:f0:ac:dd:f3:43:34:69:9a:99:89:
cd:c3:21:b8:56:17:2b:a9:38:60:1a:21:fa:81:51:b1:3a:fe:
4c:1d:d9:cb:de:37:cb:f6:1e:90:44:36:b0:e0:b0:19:90:03:
5f:26:81:d1:0c:85:10:7b:01:b1:14:ad:4c:79:80:27:0f:83:
cc:4c:39:61:67:10:da:7c:6a:e7:7e:c8:ab:2b:99:70:50:88:
5a:b0:6a:3b:f3:fb:17:47:18:cb:19:a9:7f:2d:64:70:16:5c:
ab:e5:73:be:c4:81:92:63:d3:76:7e:df:cd:5d:25:2b:61:6d:
d5:c5:c0:7c:d7:fb:5b:2d:d2:d4:b0:7d:d1:61:f4:90:61:a3:
da:e2:90:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:29:10 2026 by rpki-client