Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier: 8VqzBJecVpzQfLXUmbP4cEa9ARg2Q/HT/r4Ww5xb2kw=
Subject key identifier: 84:84:AA:DC:26:C3:CC:E4:58:11:AE:E3:6F:DB:70:BB:50:6D:47:CA
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial: 01A0D9BB25BEEBDA1878594A466E93F6E394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number: 148D
Signing time: Fri 25 Sep 2026 18:01:55 +0000
Manifest this update: Fri 25 Sep 2026 18:01:55 +0000
Manifest next update: Sat 26 Sep 2026 18:01:55 +0000
Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: 8z9mEHP1SFLsz9iACCoaAptT7lXoVOyRuSZsnzENq+E=)
2: Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa (hash: YCd6cvHJBCdabpC8lbHyTL8mL5CdagCiCJRtT8E/huA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:25:be:eb:da:18:78:59:4a:46:6e:93:f6:e3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
Validity
Not Before: Sep 25 18:01:55 2026 GMT
Not After : Sep 26 18:01:55 2026 GMT
Subject: CN=8484aadc26c3cce45811aee36fdb70bb506d47ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4f:4f:59:24:7f:86:b0:b4:74:00:90:16:50:
d2:9f:5b:95:33:4b:43:db:e4:93:af:e2:05:5c:e3:
fc:6b:1e:f8:a4:7b:34:a5:e2:94:17:85:d1:99:23:
b0:40:7d:58:b2:5b:ae:81:aa:f8:ee:f9:4a:2d:7a:
0c:7d:70:bc:cc:29:37:c9:2b:08:88:f3:2c:56:b3:
c1:f2:54:39:e9:64:cc:6d:4e:de:75:fb:f8:b3:50:
a2:06:89:53:23:fa:de:b4:c8:6c:20:b8:6f:ac:10:
60:c4:a3:21:d8:1a:a8:1e:65:90:73:23:50:ec:4b:
60:7c:ca:cf:66:0d:d8:09:ca:d2:4f:14:a5:56:41:
7a:1f:5e:90:f3:4b:a6:74:b2:90:26:3e:be:5b:6b:
5a:41:5b:91:1a:64:b0:00:cc:19:38:fc:e7:71:c9:
94:b5:7f:b0:51:15:c9:0c:45:47:ad:56:2a:96:9b:
b6:80:8c:02:fd:6c:77:74:9e:9a:f2:e7:a0:15:2e:
d6:a4:4b:7a:a6:6b:37:39:13:2c:8e:98:83:4b:a7:
64:71:be:7a:b4:e2:75:90:c1:4a:0d:6a:d6:de:10:
1b:20:b4:07:e3:c8:33:06:89:c9:cb:0d:05:3c:3c:
b3:c4:ea:07:ec:91:19:01:0a:57:f4:66:a1:26:46:
60:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:84:AA:DC:26:C3:CC:E4:58:11:AE:E3:6F:DB:70:BB:50:6D:47:CA
X509v3 Authority Key Identifier:
keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ca:bb:8f:7b:47:c8:ec:5a:61:af:1f:aa:37:65:06:dc:32:
78:0c:20:20:c1:17:50:40:9c:bc:88:61:71:26:51:d7:94:e7:
de:28:2f:40:76:b6:a4:0a:9b:f3:1c:6d:46:8a:6b:ef:c8:40:
2b:7b:68:72:72:3e:54:b7:3d:5d:bc:e3:ee:8d:74:86:9f:c8:
f2:6e:ca:b2:97:17:bf:4f:b1:e6:bd:a0:fc:a1:88:cb:88:4b:
b8:80:2d:2e:03:30:d4:72:a5:1d:ee:1c:7d:bf:78:5b:81:1c:
0c:0b:ed:a9:bb:4b:ec:bb:4a:ac:85:26:af:a5:af:f0:b3:36:
75:37:ac:72:f8:dd:34:37:bf:8a:0d:0b:fe:b2:9e:ae:bd:7b:
5d:8d:5a:36:a5:79:3d:a2:36:67:5e:98:ab:3d:d5:61:82:70:
60:90:54:12:fd:0f:ca:5b:79:28:7b:f0:a1:1e:61:75:c4:a2:
a0:e7:cd:c9:e9:ff:f8:79:28:b4:57:cc:9f:3c:98:aa:0f:50:
0b:76:1b:be:7c:b8:e1:a3:1b:18:dd:cc:11:c4:9e:c0:95:63:
20:3d:0e:74:7b:46:a7:99:22:42:6c:5a:9f:aa:78:aa:26:29:
af:b3:4d:87:da:5a:90:b4:07:ec:68:40:a1:2d:74:3b:03:1e:
c9:e7:68:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:02:44 2026 by rpki-client