Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: JeymPfKDV09Zxgy7izOkrQAyBdkXyJh18dHPzCwcqU4=
Subject key identifier: A1:3C:D8:86:9E:64:FD:97:1E:A2:22:FF:DF:83:05:C9:C8:45:E7:1F
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 019FA975981331950BFC1C941319601F2E05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 10BA
Signing time: Tue 28 Jul 2026 16:01:23 +0000
Manifest this update: Tue 28 Jul 2026 16:01:23 +0000
Manifest next update: Wed 29 Jul 2026 16:01:23 +0000
Files and hashes: 1: 8oGUZV5rDuOAmPAiHSVq6YFIa4c.roa (hash: itFCiAzcsWnQOTmyfhBB9FmGr68OYeNmm+DboS8k52c=)
2: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: L0oW71eJ8E2gYat+De3rH764kmvb24FEuxp7GJz2o0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:98:13:31:95:0b:fc:1c:94:13:19:60:1f:2e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Jul 28 16:01:23 2026 GMT
Not After : Jul 29 16:01:23 2026 GMT
Subject: CN=a13cd8869e64fd971ea222ffdf8305c9c845e71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:ee:93:de:95:8d:9d:37:8f:ae:c1:d8:71:
54:f6:7f:02:aa:cc:de:d1:c0:e3:bf:e8:54:5c:57:
6f:8a:cb:8b:b2:9a:1b:f5:61:2e:16:2c:ea:f5:d3:
2e:18:69:ca:34:98:96:e4:8b:26:dc:38:d9:d9:0c:
ba:58:65:b7:1c:3c:7a:f5:d5:16:15:67:09:9f:a9:
25:b6:79:88:92:a7:50:6a:33:74:1e:c4:22:33:b1:
a4:a4:63:2d:4b:36:57:92:c2:c3:93:87:78:0c:df:
1e:7e:fd:dc:ad:36:2e:1c:ae:2c:41:a0:7d:33:d4:
46:d7:8c:13:a2:59:7b:d6:98:c3:bc:37:84:f0:f3:
66:1f:a9:7f:cd:08:45:ef:ca:ca:f8:ae:8b:cc:50:
2e:dd:74:86:47:02:cd:b2:64:35:2b:fa:c4:cd:ca:
88:04:0f:53:b3:54:f0:b9:7a:f9:93:76:e8:b4:78:
68:2e:e8:e4:24:7b:94:75:b2:a8:70:e8:12:07:31:
1c:fe:be:63:07:6c:52:1d:4c:4a:6c:7a:ed:32:7f:
68:15:33:19:ad:a4:ef:38:7d:db:18:18:97:18:e4:
be:15:64:6a:bd:65:4d:5b:4a:ef:85:30:25:a6:7c:
aa:bf:01:c2:4b:ef:03:a6:d6:2d:9b:d9:d6:24:48:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3C:D8:86:9E:64:FD:97:1E:A2:22:FF:DF:83:05:C9:C8:45:E7:1F
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:71:75:a7:bb:9a:41:6d:d0:97:75:0b:07:6f:df:28:bd:09:
c2:b1:0a:dd:7a:c8:da:bd:f3:b3:05:a7:c1:ee:f6:75:36:48:
df:bd:2f:b8:af:a9:48:4a:4f:6d:f9:74:86:64:7d:05:88:39:
c4:89:e3:eb:0a:d5:55:fa:1b:55:6a:b7:32:67:34:37:3a:f7:
9e:57:64:d3:1e:48:f7:ca:b8:76:c1:2c:d9:e9:1a:1d:1a:05:
06:a9:37:e8:f2:1f:6b:d0:2a:a0:bd:b1:2a:34:72:2f:7d:9b:
da:9b:a9:e0:5d:5d:6a:7e:99:0f:76:af:47:82:7b:3b:f2:b4:
c6:57:2d:7e:1c:3a:76:9d:bd:81:0e:f2:b6:e6:48:f5:a8:7f:
3d:cf:e9:3e:9a:14:05:97:9d:3e:d3:ba:f7:46:4f:08:63:b1:
71:1e:df:3c:a6:43:91:fc:da:84:76:68:03:23:bb:f8:0a:35:
6e:d2:e8:1a:f5:7d:51:9c:0e:8b:4b:f3:77:97:7b:4f:08:82:
af:51:4e:7a:a3:75:f0:40:fa:b1:3b:c5:81:94:c0:b8:4b:26:
6f:03:43:a3:0d:0f:33:43:47:93:78:e1:3b:47:16:37:33:e1:
08:14:e1:a9:53:31:4b:d2:11:a4:6a:b2:bd:aa:14:21:1a:60:
14:d4:93:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdZgTMZUL/ByUExlgHy4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyM2FkNmM0NDU4ZmU2OWY0NTkxZmFjY2I1NmJkYzMzMWFm
NmI0Y2QwHhcNMjYwNzI4MTYwMTIzWhcNMjYwNzI5MTYwMTIzWjAzMTEwLwYDVQQD
EyhhMTNjZDg4NjllNjRmZDk3MWVhMjIyZmZkZjgzMDVjOWM4NDVlNzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy3uk96VjZ03j67B2HFU9n8Cqsze
0cDjv+hUXFdvisuLspob9WEuFizq9dMuGGnKNJiW5Ism3DjZ2Qy6WGW3HDx69dUW
FWcJn6kltnmIkqdQajN0HsQiM7GkpGMtSzZXksLDk4d4DN8efv3crTYuHK4sQaB9
M9RG14wToll71pjDvDeE8PNmH6l/zQhF78rK+K6LzFAu3XSGRwLNsmQ1K/rEzcqI
BA9Ts1TwuXr5k3botHhoLujkJHuUdbKocOgSBzEc/r5jB2xSHUxKbHrtMn9oFTMZ
raTvOH3bGBiXGOS+FWRqvWVNW0rvhTAlpnyqvwHCS+8DptYtm9nWJEjTpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKE82IaeZP2XHqIi/9+DBcnIRecfMB8GA1UdIwQY
MBaAFAI61sRFj+afRZH6zLVr3DMa9rTNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQt
MjRmMjg3YzlhNWY0LzEvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQtMjRmMjg3YzlhNWY0
LzEvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3F1p7ua
QW3Ql3ULB2/fKL0JwrEK3XrI2r3zswWnwe72dTZI370vuK+pSEpPbfl0hmR9BYg5
xInj6wrVVfobVWq3Mmc0Nzr3nldk0x5I98q4dsEs2ekaHRoFBqk36PIfa9AqoL2x
KjRyL32b2pup4F1dan6ZD3avR4J7O/K0xlctfhw6dp29gQ7ytuZI9ah/Pc/pPpoU
BZedPtO690ZPCGOxcR7fPKZDkfzahHZoAyO7+Ao1btLoGvV9UZwOi0vzd5d7TwiC
r1FOeqN18ED6sTvFgZTAuEsmbwNDow0PM0NHk3jhO0cWNzPhCBThqVMxS9IRpGqy
vaoUIRpgFNSTrQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:07:43 2026 by rpki-client