Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
File: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft (raw, json)
Hash identifier: a4UdpLC2Lp5/ON473LzpxGUwSLlI2F/HWUnrZWCFRS4=
Subject key identifier: 29:3C:90:91:4F:78:0A:6A:3C:A8:0A:A1:F6:EF:49:58:A7:DD:30:2B
Authority key identifier: 02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
Certificate issuer: /CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Certificate serial: 01A0C8586CC34F90F6F315A10A3D29CBAB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
Manifest number: 16D3
Signing time: Tue 22 Sep 2026 09:00:33 +0000
Manifest this update: Tue 22 Sep 2026 09:00:33 +0000
Manifest next update: Wed 23 Sep 2026 09:00:33 +0000
Files and hashes: 1: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl (hash: c2S9zqiM1kJPQXFTbo3P8p8elSgaedypFHP/qnsbmLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:6c:c3:4f:90:f6:f3:15:a1:0a:3d:29:cb:ab:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Validity
Not Before: Sep 22 09:00:33 2026 GMT
Not After : Sep 23 09:00:33 2026 GMT
Subject: CN=293c90914f780a6a3ca80aa1f6ef4958a7dd302b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:85:bc:22:65:bf:8c:00:7c:f1:78:50:ce:cf:
13:6c:3f:e3:3a:e0:d8:16:9d:5c:b3:a8:13:30:6b:
d7:67:28:49:49:bd:cf:16:0f:93:79:aa:84:fb:13:
9b:0d:0b:34:64:2e:06:2c:79:7a:05:96:55:0d:69:
4b:93:1a:18:16:cf:64:22:2e:e4:01:54:6c:a0:f3:
18:fb:a1:9f:4b:00:14:b1:53:f3:cf:18:c1:f3:c4:
ab:1c:6c:51:1f:1a:20:9b:97:6c:08:9c:17:df:e9:
f6:30:8d:e6:68:d8:d9:8a:bb:32:42:f4:9d:46:f1:
09:73:94:20:39:3a:43:b7:0d:fd:c9:cf:37:2b:a1:
2d:d6:e2:b0:02:6b:15:d5:9f:86:40:8e:56:7d:d7:
76:c9:64:33:a7:dd:1d:9a:42:75:af:95:b9:96:8b:
79:82:0f:6d:90:d0:34:e3:47:e9:0c:f1:dc:6c:80:
91:ca:7e:d5:4d:8d:fa:b8:0c:fb:84:4a:41:26:a3:
dc:2f:d8:44:e7:23:a7:b2:36:ed:c8:a1:ed:67:df:
0f:ee:b6:b1:9a:15:fa:2f:5f:6f:21:71:1a:f6:4d:
e1:fd:7d:ac:b3:1b:b6:a9:46:42:a7:76:a9:4b:89:
e4:f5:56:b1:cf:1c:3d:94:35:f0:11:03:1f:e3:e2:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3C:90:91:4F:78:0A:6A:3C:A8:0A:A1:F6:EF:49:58:A7:DD:30:2B
X509v3 Authority Key Identifier:
keyid:02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:91:2f:ab:2f:28:94:a5:1e:1c:89:86:89:46:19:a5:72:13:
26:2c:29:f9:d1:57:d7:32:74:e7:69:1c:f0:43:04:ad:7b:e6:
96:7e:6c:03:f2:28:3a:5c:da:e9:9e:f1:a8:4c:f1:2c:20:f1:
27:b5:16:0e:ff:9b:d5:fc:e3:53:fc:ec:18:4d:de:ea:05:7c:
ce:6c:b2:ff:e0:ea:81:04:3f:c6:d6:2e:c5:4a:ce:bc:7d:3f:
f1:42:d3:2c:09:0e:9c:04:14:61:51:f8:bf:6c:72:2e:83:ff:
45:b8:19:72:29:78:d6:26:10:f7:6e:20:12:52:29:94:74:1d:
b1:32:d8:ab:9b:32:99:39:f7:91:b0:3b:dd:8a:55:fe:86:0f:
d8:7e:33:6b:dc:71:09:59:ec:fd:24:8d:24:0d:62:21:f7:7b:
0a:0d:ce:de:55:fb:10:88:79:ac:da:22:37:40:38:b9:60:c1:
aa:ac:93:db:8a:3d:90:3d:82:ea:3d:3c:54:3c:1e:56:ef:7d:
fa:e7:5f:27:a5:6c:f3:70:01:66:5e:bd:78:78:72:6b:be:de:
b2:3c:a3:9e:8a:3c:d3:9c:49:bc:55:f8:d0:76:21:d0:c8:7d:
99:57:1e:3b:db:95:ad:7e:20:94:c8:33:31:03:0c:ba:f3:3b:
d3:50:78:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:54:23 2026 by rpki-client