Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
File: aajmjRKuKTryNpBDzVmgINrCQGI.mft (raw, json)
Hash identifier: NdTxxZyi/M62REJq0z9EyiCs8Yu3IZFxyjoA+ot3+ds=
Subject key identifier: 22:D0:77:52:03:B6:8E:71:40:DE:E5:75:23:B3:21:D0:28:B9:D6:59
Authority key identifier: 69:A8:E6:8D:12:AE:29:3A:F2:36:90:43:CD:59:A0:20:DA:C2:40:62
Certificate issuer: /CN=69a8e68d12ae293af2369043cd59a020dac24062
Certificate serial: 01A0C70F311138ED271C04223B7BA38314DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
Manifest number: 0F59
Signing time: Tue 22 Sep 2026 03:00:56 +0000
Manifest this update: Tue 22 Sep 2026 03:00:56 +0000
Manifest next update: Wed 23 Sep 2026 03:00:56 +0000
Files and hashes: 1: aajmjRKuKTryNpBDzVmgINrCQGI.crl (hash: XgZ+0LrTq9ig4nxfQLmjgF6dhkjLDv6r0YK/Dp7URpA=)
2: yXkD904wFbX88UGQ5CKmV5wKmSY.roa (hash: lYxnL52wtUr2micMeYUTFrTapb4xBck2cprtfMipDjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0f:31:11:38:ed:27:1c:04:22:3b:7b:a3:83:14:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a8e68d12ae293af2369043cd59a020dac24062
Validity
Not Before: Sep 22 03:00:56 2026 GMT
Not After : Sep 23 03:00:56 2026 GMT
Subject: CN=22d0775203b68e7140dee57523b321d028b9d659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a7:86:20:7a:5d:12:ee:ec:94:98:a9:95:eb:
10:a5:cf:56:54:f7:9c:66:d4:b2:c4:70:43:79:ea:
ee:db:70:11:0a:ff:f7:83:84:09:3c:49:ee:11:56:
a2:29:20:c7:e1:f8:87:e4:78:98:f0:4c:f6:7f:e2:
e8:3e:31:41:e6:f1:12:ce:6a:67:3b:a5:19:70:8e:
30:9a:09:97:9e:b9:f7:6b:2c:31:9f:47:ea:ca:01:
70:e3:fe:c5:ab:07:9a:f5:e3:0b:d0:c1:f8:57:22:
80:26:ba:2b:bb:36:06:c3:bc:21:5e:7c:f5:e6:74:
61:90:f0:4c:4a:7e:5d:6e:a7:f8:11:0c:36:8e:3f:
9b:ce:a5:40:84:d5:84:19:49:f0:32:c2:09:4c:e3:
89:0b:d7:e4:3b:0c:b0:d7:8b:28:d4:79:c5:18:a1:
55:38:48:6c:b4:3e:0b:b6:27:ca:fb:33:cf:65:76:
83:a1:1b:50:ce:34:f2:a4:be:ac:cf:da:62:1c:25:
2c:5f:e4:d9:03:6d:cd:7c:49:c9:1a:ec:b1:39:3f:
64:86:a0:d2:8b:5a:da:a5:95:8a:4d:d3:17:5c:93:
4b:a0:29:d1:bf:76:3f:7b:89:1e:51:d7:4c:69:74:
b7:7a:5e:90:9d:29:c8:6d:ac:35:64:39:eb:e3:f7:
4f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D0:77:52:03:B6:8E:71:40:DE:E5:75:23:B3:21:D0:28:B9:D6:59
X509v3 Authority Key Identifier:
keyid:69:A8:E6:8D:12:AE:29:3A:F2:36:90:43:CD:59:A0:20:DA:C2:40:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:ef:1c:ec:4e:eb:88:28:14:24:83:a7:c6:c9:a1:d9:1f:b8:
60:81:38:05:28:f5:79:b0:7c:a9:e7:38:c7:3c:6f:76:12:d9:
95:4c:58:92:1c:d3:9a:6b:f6:c8:9b:33:47:8a:41:47:f8:22:
b4:8e:cb:7f:6e:80:e4:e5:9d:c8:f2:73:e5:21:12:5a:37:8c:
45:45:1b:9e:d6:e6:09:d8:c6:47:4a:07:0b:6f:54:a9:35:6c:
75:06:e0:26:1e:0a:fa:02:1c:8f:f7:4d:c2:d5:18:e2:34:87:
66:e4:2a:ff:6e:be:a2:59:c8:ac:91:69:e1:49:43:2e:4f:e0:
71:c9:55:5d:56:34:8e:02:60:59:25:ec:e9:20:06:ac:e3:59:
65:c8:fc:6b:cf:85:27:46:af:89:6a:b8:8f:ea:ec:31:5e:65:
32:5f:48:33:c4:34:4c:62:db:8a:25:52:39:11:b9:8a:a4:a7:
6c:85:23:08:fc:52:40:2a:46:b0:4e:c6:ed:45:6a:61:cc:0e:
23:a5:3d:58:87:3c:8b:ba:c6:1a:39:40:ad:9e:67:96:2d:9a:
33:5b:d2:d7:07:ae:5f:43:44:b0:52:80:34:cb:8c:fb:a3:35:
dc:3d:e8:ba:a9:ba:2a:59:15:ee:ba:cc:07:7b:83:55:90:b0:
ad:f7:9d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:25:13 2026 by rpki-client