Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
File: ajXs8V8abbPIJhCSrr4iEyWRNc4.mft (raw, json)
Hash identifier: pRD/KKvWLv4mb0exRnGv29AVc8f6QOdVlTSZAtSVjA8=
Subject key identifier: C3:39:37:C4:C7:CD:C3:9B:10:55:AA:28:18:0E:A1:E6:2B:69:14:F5
Authority key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
Certificate issuer: /CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Certificate serial: 019D9C7AB6BB14A70ECA62FF7DD69F58B9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
Manifest number: 015A
Signing time: Fri 17 Apr 2026 17:26:20 +0000
Manifest this update: Fri 17 Apr 2026 17:26:20 +0000
Manifest next update: Sat 18 Apr 2026 17:26:20 +0000
Files and hashes: 1: ajXs8V8abbPIJhCSrr4iEyWRNc4.crl (hash: uXmzDADnb6p3Qx4I3Ayuf+EZlFsuDjqqyeiLL7W7b7U=)
2: bE-Zx7pJextm2dOAdeG5Axd6NfI.asa (hash: AKf5YMxr7u8QSu3cgJVHOwtWLUq68VXdyfOrAzi++uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:7a:b6:bb:14:a7:0e:ca:62:ff:7d:d6:9f:58:b9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Validity
Not Before: Apr 17 17:26:20 2026 GMT
Not After : Apr 18 17:26:20 2026 GMT
Subject: CN=c33937c4c7cdc39b1055aa28180ea1e62b6914f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2f:e9:b2:a9:79:70:e2:4c:d2:3c:7f:a5:e5:
67:8c:ec:f4:b1:48:03:d0:d1:5e:03:a5:b2:e4:a0:
95:05:f1:a8:57:fc:8a:a6:ae:ff:8a:bb:04:2e:85:
6d:c8:a2:3d:14:5a:9b:c5:d2:86:13:8f:30:a4:e9:
94:fa:aa:d4:61:c9:fd:7e:11:4d:40:d7:a1:52:bc:
9d:ce:26:6b:3e:10:6c:f9:ae:50:39:02:15:a9:13:
ca:86:94:43:12:3b:4e:ce:3f:b8:31:5f:58:bc:5e:
d1:08:79:1d:ba:d8:38:5a:dd:ce:e0:f7:aa:17:f4:
43:69:52:7c:e9:68:36:37:df:24:e4:3c:2f:2f:c3:
64:8a:cb:04:5f:c7:b7:0c:8d:07:5e:bd:15:1d:71:
fa:cc:15:fc:25:a3:05:b5:69:b7:ef:f2:bd:60:27:
c3:cf:c8:27:d4:51:83:db:39:64:42:88:1f:7c:48:
33:83:9b:a1:77:8d:44:4a:f3:37:2e:04:b9:4a:91:
19:dd:be:98:35:4c:e0:bf:95:a8:83:0f:77:46:fd:
45:36:24:9b:36:dc:d7:b1:99:dc:5b:2f:f6:f9:20:
b5:12:40:91:6c:2f:ee:93:1f:3a:41:89:51:9c:fe:
95:d2:13:06:17:0c:82:14:d8:55:70:f9:26:9b:f6:
35:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:39:37:C4:C7:CD:C3:9B:10:55:AA:28:18:0E:A1:E6:2B:69:14:F5
X509v3 Authority Key Identifier:
keyid:6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:02:1f:5b:38:f8:ad:52:a0:c2:38:fe:9f:50:95:24:ce:56:
59:cb:9b:cc:2a:55:cb:90:44:80:fa:2f:72:6b:34:4d:7e:2f:
a5:35:d3:d5:b3:ca:b0:a0:d0:0d:28:fd:69:f5:4d:99:6f:b5:
4e:a0:cf:1c:0d:64:64:5e:5b:16:2e:a2:01:a4:26:88:7f:f5:
bc:75:d8:23:33:dd:fc:37:a5:9b:99:c7:9c:59:7b:42:b3:08:
85:22:70:98:87:e1:9c:a3:e5:74:71:1e:12:e0:d7:1a:36:86:
0c:68:c5:7b:43:17:e6:9e:ef:3a:b6:a2:39:d6:85:c2:f8:50:
41:e9:8f:15:69:bb:60:c1:57:9d:79:04:f3:e9:ec:fa:19:28:
34:e3:3c:2c:0d:dc:b1:4f:10:eb:f9:96:5c:96:cf:93:75:d2:
9f:1c:d1:52:a0:86:9f:23:e8:83:14:7d:bc:6e:43:f5:5a:a9:
6e:8c:51:06:f2:4e:5f:8a:6f:20:99:97:de:58:f2:a0:af:eb:
28:9a:f9:45:00:27:15:97:d2:0e:2a:dd:e7:d5:32:a0:c4:f7:
5e:1d:4f:ea:af:64:d6:5f:dc:6c:80:73:a1:e7:5e:64:e3:de:
78:98:81:cb:8c:8d:90:2e:c3:d2:b6:6d:76:8f:ea:4e:90:83:
4a:6b:c1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:38 2026 by rpki-client