Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: 2+wgLFG+JV7SCPNFWvrB/T07lCjRdQG+G0zUGEGSRyI=
Subject key identifier: 43:3B:E8:3E:00:37:4A:10:93:CB:49:74:42:85:63:5C:57:C3:3C:88
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 01A0C36904F4D0D89B7597EC0EB59BD74039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 114C
Signing time: Mon 21 Sep 2026 10:00:34 +0000
Manifest this update: Mon 21 Sep 2026 10:00:34 +0000
Manifest next update: Tue 22 Sep 2026 10:00:34 +0000
Files and hashes: 1: 8oGUZV5rDuOAmPAiHSVq6YFIa4c.roa (hash: itFCiAzcsWnQOTmyfhBB9FmGr68OYeNmm+DboS8k52c=)
2: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: EWaZ814aJ2jR0QBiesiyG288RJc2bV8CVZXb3eyfHuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:04:f4:d0:d8:9b:75:97:ec:0e:b5:9b:d7:40:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Sep 21 10:00:34 2026 GMT
Not After : Sep 22 10:00:34 2026 GMT
Subject: CN=433be83e00374a1093cb49744285635c57c33c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:fc:aa:85:84:59:bf:6a:ad:15:f0:c6:c7:
1e:db:29:70:49:27:a7:9b:e5:10:22:9a:3b:f7:24:
2f:be:fc:88:70:aa:9b:97:c3:d4:1c:f7:a1:a4:a8:
dd:e8:b3:9a:0d:d2:ef:ba:cb:77:a5:d0:05:c5:f4:
4f:2f:11:5f:51:af:ad:b7:11:18:9e:f1:b7:b0:38:
33:35:0b:ea:18:d6:59:54:fb:39:be:63:aa:24:ff:
13:6e:01:02:87:99:36:72:be:f1:dd:e2:62:55:c5:
68:eb:e1:74:14:74:9f:40:4e:4d:be:46:5c:eb:2d:
e0:ba:cf:45:fb:3d:e6:b6:f6:8e:a8:9a:b6:b8:d3:
15:6e:0a:9b:f4:07:0e:01:b7:cd:b6:b3:94:5d:ff:
84:44:ac:d5:bd:04:c0:c3:23:34:6c:36:3f:3e:f3:
47:f1:f2:29:80:8c:ac:13:ee:5a:64:df:55:01:db:
d3:5f:85:ed:0a:b5:f1:b6:f8:4d:29:3b:e4:d8:cc:
f6:e1:fa:41:ae:d7:a7:cf:98:70:1e:69:7f:9d:96:
c7:f3:45:a7:5d:16:66:1f:83:f7:32:51:74:25:47:
2a:6a:cf:0a:02:76:67:ae:68:8c:21:8f:f5:88:48:
53:a6:93:57:62:bf:9a:96:3d:aa:29:c7:e9:cc:d2:
0a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3B:E8:3E:00:37:4A:10:93:CB:49:74:42:85:63:5C:57:C3:3C:88
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:23:5e:00:a8:14:4c:da:95:4e:5b:5c:09:84:13:8b:c3:13:
4c:95:45:fc:93:46:9e:cd:84:4c:fa:a5:4e:80:11:9a:5d:bc:
4e:92:18:95:25:70:90:c0:bc:48:f3:9a:8f:13:33:60:d2:a5:
e9:9d:9f:23:a4:d9:dc:1b:44:99:d7:50:ca:9d:90:7e:95:06:
64:e4:5d:ac:e4:a8:00:f1:76:b8:84:c9:7c:f1:fd:e1:03:4a:
fd:c7:93:4b:3f:64:14:f4:33:fc:02:b5:2d:84:ec:d5:c5:9a:
1b:c4:eb:51:b1:83:9d:8b:87:c7:ce:da:4c:3e:a8:73:61:eb:
71:e9:c6:11:00:5b:29:c0:7b:34:b7:b6:a9:6c:0b:ed:70:a2:
57:95:26:0c:09:09:fb:c9:d5:da:3c:86:dd:e7:05:79:d5:51:
e0:d3:0e:88:ce:86:51:77:7f:37:9c:ab:c1:62:87:d6:a2:ff:
4d:bb:28:ec:4b:0e:c8:66:38:dc:a2:9b:f1:b0:28:e0:66:24:
b4:a1:6c:aa:12:59:25:3c:1e:fc:bd:6f:8d:1a:3d:10:72:fc:
10:8b:12:8d:4b:36:7c:48:49:fb:00:98:a9:3d:f7:9b:a6:ca:
fb:5c:28:cf:47:07:1f:07:92:16:7e:7d:03:b7:a1:fe:95:d8:
7e:b2:b1:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDaQT00NibdZfsDrWb10A5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyM2FkNmM0NDU4ZmU2OWY0NTkxZmFjY2I1NmJkYzMzMWFm
NmI0Y2QwHhcNMjYwOTIxMTAwMDM0WhcNMjYwOTIyMTAwMDM0WjAzMTEwLwYDVQQD
Eyg0MzNiZTgzZTAwMzc0YTEwOTNjYjQ5NzQ0Mjg1NjM1YzU3YzMzYzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/L8qoWEWb9qrRXwxsce2ylwSSen
m+UQIpo79yQvvvyIcKqbl8PUHPehpKjd6LOaDdLvust3pdAFxfRPLxFfUa+ttxEY
nvG3sDgzNQvqGNZZVPs5vmOqJP8TbgECh5k2cr7x3eJiVcVo6+F0FHSfQE5NvkZc
6y3gus9F+z3mtvaOqJq2uNMVbgqb9AcOAbfNtrOUXf+ERKzVvQTAwyM0bDY/PvNH
8fIpgIysE+5aZN9VAdvTX4XtCrXxtvhNKTvk2Mz24fpBrtenz5hwHml/nZbH80Wn
XRZmH4P3MlF0JUcqas8KAnZnrmiMIY/1iEhTppNXYr+alj2qKcfpzNIKawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEM76D4AN0oQk8tJdEKFY1xXwzyIMB8GA1UdIwQY
MBaAFAI61sRFj+afRZH6zLVr3DMa9rTNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQt
MjRmMjg3YzlhNWY0LzEvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQtMjRmMjg3YzlhNWY0
LzEvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyNeAKgU
TNqVTltcCYQTi8MTTJVF/JNGns2ETPqlToARml28TpIYlSVwkMC8SPOajxMzYNKl
6Z2fI6TZ3BtEmddQyp2QfpUGZORdrOSoAPF2uITJfPH94QNK/ceTSz9kFPQz/AK1
LYTs1cWaG8TrUbGDnYuHx87aTD6oc2HrcenGEQBbKcB7NLe2qWwL7XCiV5UmDAkJ
+8nV2jyG3ecFedVR4NMOiM6GUXd/N5yrwWKH1qL/Tbso7EsOyGY43KKb8bAo4GYk
tKFsqhJZJTwe/L1vjRo9EHL8EIsSjUs2fEhJ+wCYqT33m6bK+1woz0cHHweSFn59
A7eh/pXYfrKxyw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:34:02 2026 by rpki-client