Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier: fIscR9sQz55l+XDeyUD6sywr5Xis8EMY5vNuVKcPL6c=
Subject key identifier: 1C:85:39:B4:7D:A5:8C:ED:E7:37:87:A1:9D:1C:2A:25:40:F1:46:3C
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial: 019CABD97E3A2A41C826A856D909C4725866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number: 1263
Signing time: Mon 02 Mar 2026 00:01:23 +0000
Manifest this update: Mon 02 Mar 2026 00:01:23 +0000
Manifest next update: Tue 03 Mar 2026 00:01:23 +0000
Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: GVr1PATGEoFdO3KuvCgL0zfyJl3/zrCTCaji/QQVwMQ=)
2: Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa (hash: YCd6cvHJBCdabpC8lbHyTL8mL5CdagCiCJRtT8E/huA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:7e:3a:2a:41:c8:26:a8:56:d9:09:c4:72:58:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
Validity
Not Before: Mar 2 00:01:23 2026 GMT
Not After : Mar 3 00:01:23 2026 GMT
Subject: CN=1c8539b47da58cede73787a19d1c2a2540f1463c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:3f:f1:5c:bb:b3:ee:f8:39:55:54:f8:52:
cb:f8:47:d8:91:5b:86:67:89:f8:cf:47:c1:c1:04:
9e:a9:c9:ff:d2:45:a1:90:8a:6b:fa:96:1d:03:93:
ae:48:03:54:16:72:43:49:f5:78:34:96:aa:91:59:
9f:f0:12:21:85:8e:c8:9d:3c:7f:ca:3d:1a:81:67:
c9:70:3f:bf:b8:95:3f:6b:61:bb:5c:58:1b:25:54:
81:76:d2:84:7b:4d:75:fa:c4:b0:f4:90:2f:09:d4:
b2:b7:a5:d8:56:21:aa:c8:f0:76:fc:3d:17:f4:cc:
a8:24:4c:aa:b7:35:98:e1:2d:33:e3:c3:8e:c4:f5:
13:45:48:bc:f3:8d:dc:97:a8:f9:bb:ce:db:12:a5:
8d:d4:48:e3:76:2e:db:42:84:eb:a5:74:2a:f7:6d:
1c:76:2b:bd:fe:51:8c:4f:6f:06:ca:a5:f2:82:a2:
40:62:e9:4a:91:1e:dd:cd:fe:8c:ec:8a:70:1f:dc:
d5:af:d4:88:94:bb:1c:77:47:07:94:29:65:7d:fb:
5b:bc:5e:03:10:0c:00:6d:fb:7a:b9:a2:f2:51:dd:
9c:2b:57:8d:06:ac:ed:e1:90:7e:5d:73:51:70:21:
91:8b:40:ee:ab:6e:6f:67:b9:74:d5:1c:23:94:48:
5c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:85:39:B4:7D:A5:8C:ED:E7:37:87:A1:9D:1C:2A:25:40:F1:46:3C
X509v3 Authority Key Identifier:
keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4a:51:f9:9a:fa:e3:e8:42:33:9b:eb:40:14:e3:fa:25:34:
e8:58:54:e9:69:a8:9b:e2:ed:cc:fc:df:e0:19:07:1d:a0:6c:
f7:a1:29:60:11:3d:a4:86:74:e1:07:c0:b2:79:16:b2:dd:d3:
cc:a8:4f:d2:5c:aa:f1:02:41:a4:44:c9:7c:5e:da:a6:15:0c:
d8:b7:c4:49:ad:c1:bc:3d:b8:e6:3b:c5:a9:d6:fd:c7:2f:44:
12:27:66:6a:6d:d6:2a:9a:ba:f7:53:ca:c7:da:05:86:6a:a8:
3c:ce:ff:4b:9e:92:d8:0e:05:77:e7:c0:e4:2a:4e:51:0d:31:
4a:cb:d0:8f:e6:0f:df:af:1b:38:04:6c:94:f3:bb:23:53:42:
4a:fb:41:ae:57:2b:5e:14:14:f0:0c:93:00:08:fa:fd:e6:b5:
6c:10:ca:7b:3b:1e:09:87:24:d3:65:64:3f:c1:f1:e3:9f:0c:
e8:ce:ef:79:18:24:6c:bf:e3:fc:f4:86:e9:31:d1:75:0a:0c:
4a:e2:a5:aa:eb:12:5c:b7:69:bb:6d:5c:06:a3:4e:9b:1d:73:
ef:b1:2d:29:30:c0:79:db:02:61:25:0a:47:ea:70:49:25:61:
51:6c:e4:af:88:5f:70:f9:a2:67:6e:16:67:f3:ea:80:89:23:
6c:57:bd:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2X46KkHIJqhW2QnEclhmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTMzODQ4MDIxZDM4ODg4NjBkYWRmNzE4ODA5NGQ3OTJh
ZjZhZTYwHhcNMjYwMzAyMDAwMTIzWhcNMjYwMzAzMDAwMTIzWjAzMTEwLwYDVQQD
EygxYzg1MzliNDdkYTU4Y2VkZTczNzg3YTE5ZDFjMmEyNTQwZjE0NjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjw/8Vy7s+74OVVU+FLL+EfYkVuG
Z4n4z0fBwQSeqcn/0kWhkIpr+pYdA5OuSANUFnJDSfV4NJaqkVmf8BIhhY7InTx/
yj0agWfJcD+/uJU/a2G7XFgbJVSBdtKEe011+sSw9JAvCdSyt6XYViGqyPB2/D0X
9MyoJEyqtzWY4S0z48OOxPUTRUi8843cl6j5u87bEqWN1Ejjdi7bQoTrpXQq920c
diu9/lGMT28GyqXygqJAYulKkR7dzf6M7IpwH9zVr9SIlLscd0cHlCllfftbvF4D
EAwAbft6uaLyUd2cK1eNBqzt4ZB+XXNRcCGRi0Duq25vZ7l01RwjlEhcNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByFObR9pYzt5zeHoZ0cKiVA8UY8MB8GA1UdIwQY
MBaAFACTOEgCHTiIhg2t9xiAlNeSr2rmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84Njc2MmItYWE2MS00ODRhLWIxNTkt
OTdmMzliYjEzMzJkLzEvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84Njc2MmItYWE2MS00ODRhLWIxNTktOTdmMzliYjEzMzJk
LzEvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUpR+Zr6
4+hCM5vrQBTj+iU06FhU6Wmom+LtzPzf4BkHHaBs96EpYBE9pIZ04QfAsnkWst3T
zKhP0lyq8QJBpETJfF7aphUM2LfESa3BvD245jvFqdb9xy9EEidmam3WKpq691PK
x9oFhmqoPM7/S56S2A4Fd+fA5CpOUQ0xSsvQj+YP368bOARslPO7I1NCSvtBrlcr
XhQU8AyTAAj6/ea1bBDKezseCYck02VkP8Hx458M6M7veRgkbL/j/PSG6THRdQoM
SuKlqusSXLdpu21cBqNOmx1z77EtKTDAedsCYSUKR+pwSSVhUWzkr4hfcPmiZ24W
Z/PqgIkjbFe9SA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:52 2026 by rpki-client