Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier: ACv1LvHn0KvS8zUkx29mc1ey1p2olTAi6S9EHRWZWf0=
Subject key identifier: 9D:87:CA:6E:7A:2A:3C:57:DF:89:A2:ED:E9:72:C9:28:25:9C:36:68
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial: 019FA89A3602E0ACD4D2B05D01BAA27B13CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number: 13EF
Signing time: Tue 28 Jul 2026 12:01:46 +0000
Manifest this update: Tue 28 Jul 2026 12:01:46 +0000
Manifest next update: Wed 29 Jul 2026 12:01:46 +0000
Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: ZIQjlQ24FDYoTM5mDOfBfN1dOUNGg7yBz5NHfagVh4Q=)
2: Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa (hash: YCd6cvHJBCdabpC8lbHyTL8mL5CdagCiCJRtT8E/huA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:36:02:e0:ac:d4:d2:b0:5d:01:ba:a2:7b:13:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
Validity
Not Before: Jul 28 12:01:46 2026 GMT
Not After : Jul 29 12:01:46 2026 GMT
Subject: CN=9d87ca6e7a2a3c57df89a2ede972c928259c3668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:83:0a:3d:04:a5:d4:63:db:b5:8c:0d:e4:b4:
5f:7f:32:c1:fc:2c:4d:b6:7b:f4:88:da:ba:ee:6a:
57:47:e6:c1:cb:f4:4d:29:28:28:2a:87:d4:10:38:
79:34:0c:92:bc:21:6a:69:5e:cb:b0:6b:f9:cd:f6:
bf:d9:46:05:aa:43:cc:aa:2a:69:4f:6c:f0:cb:59:
94:e6:a3:8a:d5:10:49:46:60:a1:99:9f:95:b1:80:
61:1a:f8:5a:69:8f:85:2f:5b:88:c2:57:95:e6:d8:
33:a6:4d:43:00:dd:9a:36:07:ad:a5:df:9e:32:67:
c5:fa:58:ad:05:19:dd:c9:9d:f2:ff:31:8e:23:7f:
3f:63:ed:70:15:7c:4e:ed:96:84:62:e1:00:c7:37:
5c:28:1a:6d:a4:f7:6f:3e:a5:60:e5:a3:5d:ea:b5:
f9:f2:77:20:44:74:41:e5:55:58:ad:6c:c1:5f:a2:
62:e5:5f:de:85:96:38:2e:dc:56:78:31:72:f2:8f:
86:8b:a4:d8:56:4b:d8:2e:96:e5:d5:2c:b8:3a:91:
16:e9:50:86:6d:55:39:33:1c:f2:34:d7:02:cf:7e:
f0:9c:79:6e:4b:07:87:aa:b8:6d:97:21:c3:4b:fb:
4e:09:58:2a:35:8a:49:3c:7d:1e:6c:d2:d0:36:4f:
f6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:87:CA:6E:7A:2A:3C:57:DF:89:A2:ED:E9:72:C9:28:25:9C:36:68
X509v3 Authority Key Identifier:
keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0b:e1:44:48:ea:0b:91:46:be:c9:89:7b:b9:06:bf:b2:82:
ed:41:15:7d:ec:33:91:e1:f0:18:73:de:d5:1a:b2:84:32:7f:
c6:82:24:48:dd:7d:f7:c6:f4:b4:35:f6:28:c7:63:98:3c:8a:
a2:ea:fa:cd:e7:1b:33:c4:c2:31:af:15:b1:d5:da:36:f1:60:
48:73:53:a4:f9:24:a2:a5:43:b1:9a:04:e0:55:8c:7e:ff:03:
6c:a5:66:f1:b3:b7:32:fd:ec:d7:fe:af:a2:02:a6:65:00:95:
7d:9f:d6:30:2f:4b:6b:ed:a5:c7:75:b3:0b:83:a6:2a:21:82:
fc:50:bd:01:0b:99:d2:ed:06:1c:48:36:d4:c4:f5:8a:36:98:
6a:61:24:36:be:88:17:04:de:2e:03:44:57:c5:28:f8:cb:87:
92:c5:d5:8a:70:04:0a:5f:55:36:c6:e8:13:e9:f8:66:34:f3:
f1:4e:9e:22:32:46:bf:15:18:6e:48:e2:a6:d7:53:a4:83:a8:
47:f8:d4:e8:d6:f4:96:71:10:29:e2:96:5c:5a:d0:99:9b:9c:
a2:ab:f9:a7:93:b6:83:29:4f:1c:b0:59:36:0d:9c:57:a9:f2:
2f:f5:4d:97:bf:89:82:a3:d8:9c:c8:67:c5:32:7e:b1:80:0b:
24:da:fc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:06 2026 by rpki-client