Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
File: ajXs8V8abbPIJhCSrr4iEyWRNc4.mft (raw, json)
Hash identifier: arICQLJ+jE3ABqsSU3vUQSLm6XMDnCVsfqSDfUGZ5Is=
Subject key identifier: BB:0D:63:44:1F:29:3B:FE:BA:D0:3F:36:7C:EE:0D:A4:20:EB:23:F8
Authority key identifier: 6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
Certificate issuer: /CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Certificate serial: 01A0CB592EA13A437DA5D6E810EC20CA76C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
Manifest number: 0300
Signing time: Tue 22 Sep 2026 23:00:14 +0000
Manifest this update: Tue 22 Sep 2026 23:00:14 +0000
Manifest next update: Wed 23 Sep 2026 23:00:14 +0000
Files and hashes: 1: ajXs8V8abbPIJhCSrr4iEyWRNc4.crl (hash: pWEPs6et2Uxr4AqktO0cm1nvaAZt849+LEw1Fh4dBMA=)
2: bE-Zx7pJextm2dOAdeG5Axd6NfI.asa (hash: AKf5YMxr7u8QSu3cgJVHOwtWLUq68VXdyfOrAzi++uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:2e:a1:3a:43:7d:a5:d6:e8:10:ec:20:ca:76:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a35ecf15f1a6db3c8261092aebe2213259135ce
Validity
Not Before: Sep 22 23:00:14 2026 GMT
Not After : Sep 23 23:00:14 2026 GMT
Subject: CN=bb0d63441f293bfebad03f367cee0da420eb23f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:12:8b:80:14:d6:ee:13:df:19:95:f9:47:
19:55:d1:94:58:0f:ae:36:e2:42:c8:25:7b:1e:af:
48:e4:51:e0:a9:50:29:9a:c6:46:7f:b3:49:fa:06:
64:3d:19:02:2a:0b:55:7c:de:5a:a1:42:10:a3:69:
5e:c1:4e:53:ea:96:20:55:c0:9f:9e:4e:12:ff:0f:
e8:ac:05:01:25:77:ba:fb:41:55:28:c3:1a:20:82:
9f:46:27:60:73:9c:be:55:3f:39:ee:75:4a:3c:fd:
99:36:43:21:27:60:dd:6a:52:a1:f2:81:4d:0c:43:
83:9c:fe:37:78:3f:6e:f1:1c:2e:ef:bb:31:e1:a8:
3b:03:d4:4b:c6:6e:0b:66:7f:c4:4a:e5:4d:94:79:
99:75:2f:a1:3b:d8:23:36:4b:92:8b:4d:3f:b0:ed:
7a:ce:2e:47:f7:50:e6:bd:14:07:f1:e0:04:a8:78:
cf:e1:0e:1d:2c:94:c9:85:fa:b3:bb:af:f0:74:2e:
6d:3a:49:f3:db:1a:0b:39:fc:e4:90:74:91:63:9c:
35:bc:ad:f7:90:f7:ad:c8:6e:74:44:cc:e2:3a:01:
e9:ee:52:e6:7d:40:a1:6f:b1:19:87:42:f7:25:c3:
cb:40:e6:99:9a:04:e0:b6:01:56:e2:54:fb:5d:63:
3c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0D:63:44:1F:29:3B:FE:BA:D0:3F:36:7C:EE:0D:A4:20:EB:23:F8
X509v3 Authority Key Identifier:
keyid:6A:35:EC:F1:5F:1A:6D:B3:C8:26:10:92:AE:BE:22:13:25:91:35:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajXs8V8abbPIJhCSrr4iEyWRNc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2a6943-1060-4bae-a7a4-7a288496ed66/1/ajXs8V8abbPIJhCSrr4iEyWRNc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:db:57:b8:13:3a:bc:6e:47:69:73:36:d8:a1:69:9e:e8:22:
55:0e:36:3f:a6:94:1b:c1:2e:22:a3:fb:1a:0e:62:50:da:f8:
ac:a4:7a:0c:a1:55:40:8c:21:88:ba:1c:52:f5:72:f3:df:da:
49:43:c5:b6:4f:ef:a4:96:49:f4:ca:bf:a5:69:dc:f3:9e:73:
19:33:14:64:6c:b2:44:42:42:db:44:c8:ac:0d:1e:1f:6d:f0:
27:ac:ab:80:42:bd:3b:5d:fc:de:05:38:57:a4:e9:67:0f:bd:
25:db:dc:3f:6a:60:d7:23:a7:05:81:1a:6e:9b:b5:d2:51:38:
ce:5a:9d:3e:a7:f7:59:6c:9e:00:b0:91:17:fa:f4:f3:02:97:
f5:b2:4e:b7:c5:e1:87:fe:a3:de:e3:2f:85:76:e9:66:fa:14:
cd:43:11:d1:75:a1:18:f2:13:d0:77:7e:75:23:2f:76:a7:ba:
78:c0:25:dc:0f:31:82:a8:08:db:be:32:cf:41:f2:14:2d:35:
99:88:7c:2e:52:09:ec:0a:41:97:9c:9f:5f:b3:41:12:7a:d8:
57:3b:c2:24:f9:49:a9:db:41:1a:e6:a1:e5:fc:1d:b9:38:6b:
ea:51:65:8a:54:99:63:70:ff:cf:d6:9f:b2:4f:b2:a8:db:41:
d1:11:44:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:22:01 2026 by rpki-client