Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
File: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft (raw, json)
Hash identifier: XPbUlCrOzfshLqdddlsXf8qX+7n0eHU1PaJJqu8eIgg=
Subject key identifier: 5C:23:F3:F1:91:7E:F1:74:75:04:F5:DD:FA:9C:DE:A1:8B:A4:49:CE
Authority key identifier: 02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
Certificate issuer: /CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Certificate serial: 019FAA88C491F45C1F29CD391CA4A787CFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
Manifest number: 163F
Signing time: Tue 28 Jul 2026 21:01:57 +0000
Manifest this update: Tue 28 Jul 2026 21:01:57 +0000
Manifest next update: Wed 29 Jul 2026 21:01:57 +0000
Files and hashes: 1: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl (hash: fKvjVcaMk67bltTfmSPIR4fMGjeDVa+PhL9hMk1xl4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:c4:91:f4:5c:1f:29:cd:39:1c:a4:a7:87:cf:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Validity
Not Before: Jul 28 21:01:57 2026 GMT
Not After : Jul 29 21:01:57 2026 GMT
Subject: CN=5c23f3f1917ef1747504f5ddfa9cdea18ba449ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a7:8e:f7:69:ac:d0:08:62:d1:8b:cf:d8:40:
a8:c4:e3:21:66:e5:5d:8c:b3:f2:cb:e5:b1:d6:d8:
78:ab:00:ae:fa:65:52:6e:00:64:32:ba:2c:33:93:
9c:31:73:aa:ac:a1:87:c4:3a:2f:69:f7:ba:67:2c:
ed:f4:04:9f:c7:bd:58:8a:7c:a8:25:51:04:74:95:
b3:ae:a6:23:70:4d:15:74:c8:79:9a:9a:85:a6:2d:
2f:84:6c:dc:a1:c2:2d:72:48:3b:28:2e:18:04:28:
95:25:e9:a2:88:91:64:d6:2c:83:17:34:d0:39:00:
b1:5d:f8:16:d9:0c:f8:77:93:be:09:59:0b:4e:44:
20:3d:8b:36:b1:5a:d6:0e:f0:d6:04:8e:b4:da:39:
81:79:01:fc:2a:02:d5:71:1b:1b:71:e6:c1:3a:ef:
cf:ba:a1:2d:0f:49:6b:c2:92:44:34:7f:ba:3a:57:
18:4a:6a:ae:79:e4:df:d5:0d:28:1f:35:e8:2c:82:
dd:89:92:cb:dd:7e:50:5e:14:c2:35:32:8a:ac:2c:
70:1e:e4:aa:f1:27:d6:a4:2f:8b:3f:07:9d:fc:87:
da:f0:18:76:20:48:cc:91:a6:1f:7d:5d:a6:1b:d1:
a1:07:d7:55:a7:e8:78:ae:25:50:be:2c:6c:9d:00:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:23:F3:F1:91:7E:F1:74:75:04:F5:DD:FA:9C:DE:A1:8B:A4:49:CE
X509v3 Authority Key Identifier:
keyid:02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f5:4a:f4:98:86:02:ab:8a:8a:d4:8a:78:4e:54:10:2f:b0:
1c:70:be:bf:5c:49:7e:2b:cc:97:ca:12:fa:e6:dc:f2:73:fc:
3c:cc:50:ff:3c:1e:ed:0a:08:02:0c:53:de:cf:38:f1:99:76:
e5:d5:06:cb:44:58:e9:94:93:ad:b4:f7:97:db:4d:2a:a5:d7:
1d:5b:e2:05:6b:c7:ac:30:0e:6c:91:a4:cd:87:c8:02:8e:52:
4e:f6:f4:3c:90:5c:05:72:c8:b3:e9:02:56:80:58:27:d0:81:
69:bc:77:95:86:bf:a9:df:bb:e5:ad:f6:f6:04:56:f4:ed:4d:
bd:a4:56:bd:3e:ba:b5:2c:82:18:43:62:0d:43:5f:f2:e7:60:
7c:4a:9a:44:09:c3:30:28:fa:16:5c:55:71:20:b3:61:ed:f3:
76:de:40:7d:71:fd:40:60:80:6f:7e:2e:70:d9:cf:31:b9:cc:
1e:af:0c:99:37:3d:91:27:dc:27:0a:1d:11:49:e8:0b:a6:39:
65:98:61:83:b8:dd:d8:d7:28:a0:ac:55:53:51:a3:85:5f:0c:
65:79:82:d2:e2:78:ad:42:f9:14:b3:48:e3:2c:d9:e5:bd:d6:
8d:e9:28:5f:c3:02:39:8e:37:47:57:a3:f5:cc:52:2f:70:2e:
ee:d2:da:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:25:54 2026 by rpki-client