Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: Hjjx4iE1Zs+NfXQOyZxgd3H9+p4igYZ8roieMHJlyJg=
Subject key identifier: 2C:F6:47:C9:07:72:1A:B4:EB:CD:6A:91:89:29:C2:60:FE:4F:E4:03
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 019DA3E623AA42CE41BF8D99A4B67C102704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 0FAE
Signing time: Sun 19 Apr 2026 04:01:01 +0000
Manifest this update: Sun 19 Apr 2026 04:01:01 +0000
Manifest next update: Mon 20 Apr 2026 04:01:01 +0000
Files and hashes: 1: 8oGUZV5rDuOAmPAiHSVq6YFIa4c.roa (hash: itFCiAzcsWnQOTmyfhBB9FmGr68OYeNmm+DboS8k52c=)
2: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: /efxHNrWs1bhicz8do/wm/vNwUMcu2nQVvmyvQrLnSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:23:aa:42:ce:41:bf:8d:99:a4:b6:7c:10:27:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Apr 19 04:01:01 2026 GMT
Not After : Apr 20 04:01:01 2026 GMT
Subject: CN=2cf647c907721ab4ebcd6a918929c260fe4fe403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:9b:60:61:5e:92:08:b2:08:dc:90:7d:86:
70:00:f8:33:76:d2:1c:05:a7:a6:92:bf:22:c9:21:
2f:b0:8c:0a:fa:bb:10:5b:07:04:c7:6a:83:4e:15:
7c:66:00:ba:35:3c:d9:60:5e:69:15:07:41:24:93:
00:07:21:d0:99:98:be:95:cc:49:51:56:93:23:88:
1e:f3:44:f4:79:21:59:2d:91:02:73:f0:fb:eb:bc:
61:64:72:15:2d:54:d1:7b:a1:47:93:33:54:19:2e:
b7:36:bc:17:8d:52:d1:75:51:74:5a:51:3d:12:81:
81:33:d7:d5:c6:38:85:f5:be:9a:14:fe:fc:6c:f9:
ec:40:ee:45:38:67:a1:29:29:f5:63:da:13:ea:4e:
6f:31:44:e1:ad:31:26:37:48:bc:b7:85:9c:77:3b:
15:d2:e8:91:c2:01:02:71:ab:ea:f4:19:70:62:34:
64:90:1c:48:ea:e1:59:d4:31:f6:fe:e2:45:82:97:
f9:e1:4f:d0:e2:a9:6d:fc:18:b0:67:ec:13:39:59:
b6:ca:de:fb:26:6c:d0:6e:a4:ae:6d:77:40:89:99:
e9:88:68:5e:f4:6b:57:90:ac:9e:6b:de:ef:92:3c:
d2:cc:db:16:83:0b:7f:7e:e0:0f:15:84:ea:31:a4:
4f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F6:47:C9:07:72:1A:B4:EB:CD:6A:91:89:29:C2:60:FE:4F:E4:03
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8b:68:38:d2:15:39:50:d7:5c:f4:aa:49:9e:b2:d3:1c:d8:
7f:30:f9:e1:74:19:d9:51:ec:0f:7e:e8:97:5e:2a:d1:6a:4f:
b7:20:3b:06:25:62:ed:68:d7:27:24:2e:0f:8b:8a:d9:c4:ab:
08:9c:41:41:2c:87:4d:03:6a:03:d1:af:89:58:18:7c:3c:e2:
04:67:f8:60:79:d4:6f:17:b3:52:2b:05:3f:0d:e9:4e:1f:8c:
77:8e:ef:fa:27:b1:d6:35:15:51:37:8b:88:86:92:f2:ba:bd:
3e:9c:94:59:9e:32:39:69:25:0d:7b:63:f7:dd:e3:dd:bf:5b:
0b:66:a6:b1:72:c7:cf:20:c5:ca:84:31:63:43:a1:e6:47:18:
bd:8e:3f:6d:82:a6:9c:71:d7:06:d9:db:23:8d:d3:4d:ff:5f:
37:cf:02:2c:fe:4c:69:67:12:71:70:28:d4:40:3e:ac:58:dc:
14:3a:68:43:4c:4c:a4:03:7b:8a:e5:50:e7:31:16:cb:33:b0:
5a:98:e9:5c:70:05:f6:a1:6d:40:e1:ec:34:87:0c:46:a8:a8:
e0:d6:6a:7d:da:e4:79:59:ae:cc:e1:fc:65:ba:9f:26:8f:b2:
2d:95:9e:e3:40:18:77:df:48:fc:e0:2b:7e:55:14:f1:ff:4a:
09:f2:c7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:28 2026 by rpki-client