Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
File: ajXs8V8abbPIJhCSrr4iEyWRNc4.mft (raw, json)
Hash identifier: Y9TCDm9GsHdYuyK67Qtc30VI4KwDIobpLExn4wKkITM=
Subject key identifier: 17:DB:8D:B5:94:80:E0:AC:61:EE:DC:FE:DE:AF:72:BA:EC:97:03:BF
Authority key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
Certificate issuer: /CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Certificate serial: 019CA7FC7D1F079C8CA1FF8AA6DC62ED4908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
Manifest number: DB
Signing time: Sun 01 Mar 2026 06:01:07 +0000
Manifest this update: Sun 01 Mar 2026 06:01:07 +0000
Manifest next update: Mon 02 Mar 2026 06:01:07 +0000
Files and hashes: 1: Lew-h_DR6pX_cLDKkCKKKvC30n4.asa (hash: d3xiU+jGcgBPAr/J+bp6R3hubPZue+FUp5GBeI9OOQw=)
2: ajXs8V8abbPIJhCSrr4iEyWRNc4.crl (hash: gYA9hfnC1w01QfNIc87CQ5dVkWtkCTTacJ5RHnFVESQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:7d:1f:07:9c:8c:a1:ff:8a:a6:dc:62:ed:49:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Validity
Not Before: Mar 1 06:01:07 2026 GMT
Not After : Mar 2 06:01:07 2026 GMT
Subject: CN=17db8db59480e0ac61eedcfedeaf72baec9703bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:15:ad:2a:d4:2b:70:c1:47:26:e5:1b:2a:
32:65:58:62:ee:54:ee:a4:8b:2f:5a:81:f8:ce:86:
b9:3e:9f:62:18:8b:4d:eb:f9:ac:2b:2c:be:d2:87:
9f:ce:b1:04:58:9b:72:8b:5c:d4:fd:21:66:f6:dd:
79:57:98:78:02:35:0c:7a:9e:0d:50:e7:d7:68:a1:
9b:82:3b:d6:35:11:01:d4:0b:95:66:ae:b4:f1:6b:
27:f6:52:db:69:ec:03:39:96:b7:24:28:93:2e:d9:
6d:35:d4:d3:01:47:17:c2:45:4a:ec:ac:0c:36:4e:
ae:fc:7e:b4:48:11:92:17:84:70:f4:c7:3f:af:0d:
f5:80:83:5e:c3:db:6c:f1:c6:7d:5a:3a:85:2d:53:
24:d5:a0:f0:75:1b:4b:a1:b3:47:5b:81:35:44:15:
72:85:75:91:c2:91:09:0a:2c:5b:34:4c:41:ae:1f:
ba:d8:01:b6:a7:31:cb:bf:59:3b:27:06:f6:95:23:
d9:b2:e8:fe:68:f6:1f:3e:23:2a:36:3c:e2:5c:4f:
be:57:97:41:98:f4:0f:b8:15:c7:53:be:c5:2f:1f:
39:38:72:4a:a6:a2:1e:ea:69:6a:8e:7d:d9:00:de:
a0:5a:60:68:4f:a2:ac:62:72:88:f5:3e:9e:a2:8d:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DB:8D:B5:94:80:E0:AC:61:EE:DC:FE:DE:AF:72:BA:EC:97:03:BF
X509v3 Authority Key Identifier:
keyid:6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bf:31:d3:02:57:23:a3:b1:8b:44:9b:9c:d9:d6:64:5a:34:
3a:5a:32:8b:d9:30:44:8d:94:c4:42:1b:40:f8:ab:a3:9c:ee:
64:04:58:b7:de:24:ec:f3:37:c2:f4:7c:02:90:16:a7:07:94:
c7:d0:c6:45:2b:2c:d5:51:48:e1:03:58:b2:df:1c:87:71:ff:
5a:ca:43:2f:75:56:57:29:6d:59:ad:cc:f2:c3:fd:e5:fa:c4:
11:aa:eb:22:d1:32:cd:2e:00:84:a1:da:c3:37:03:61:94:b8:
ed:c7:a7:f9:61:be:15:4b:e4:45:20:29:64:c4:5c:19:43:b1:
82:f2:22:fe:99:3b:48:2d:7e:06:9e:03:4f:3e:2f:9f:f3:1a:
69:36:67:02:bf:55:50:72:5d:d6:e6:ec:bc:34:eb:67:54:21:
95:64:b4:ba:25:86:fb:e0:81:3b:a2:e3:08:ff:d9:d0:e6:34:
77:1d:fd:f5:70:f8:72:36:de:27:3e:7e:6d:1c:78:fa:2c:97:
1c:30:0e:34:3e:2a:3c:a5:5d:ec:73:a3:cc:1d:10:e6:fb:dd:
4d:f3:3a:4a:14:f0:2f:64:15:46:d2:1f:a4:4a:10:05:84:c0:
f5:0e:15:46:a8:56:f5:69:33:0f:6b:d1:63:89:ea:fb:a8:a3:
46:5d:5a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:44:46 2026 by rpki-client