Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier: 3HgnpP9p/slUkaU1D2HPM8rmHiK9fJcgrRMEP7wighw=
Subject key identifier: BC:5C:FC:F5:44:9F:88:BC:B4:52:2D:34:D3:37:51:13:51:EB:42:4E
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 019DA30AE2399FE575B9694460831AEFB21E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 00:01:32 +0000
Manifest this update: Sun 19 Apr 2026 00:01:32 +0000
Manifest next update: Mon 20 Apr 2026 00:01:32 +0000
Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: ste+p8nQ856ChAWIXejXpFTdOnV6PP6OLSn2t3+jsL8=)
2: j51-vhqySrtPDmWytRuJdkGEvC8.roa (hash: hWPfWXr9RPCgElnT55rpdjybwa6yeKeJ6tIi6IBtbEE=)
3: lBelNikhE64GysX2fGFFE4vhjCQ.roa (hash: OyoE+SKk2HTXSgPYtWOQOXKI4eO+3EXXvE2q2Oo53nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:e2:39:9f:e5:75:b9:69:44:60:83:1a:ef:b2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: Apr 19 00:01:32 2026 GMT
Not After : Apr 20 00:01:32 2026 GMT
Subject: CN=bc5cfcf5449f88bcb4522d34d337511351eb424e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:fd:30:01:86:63:99:92:38:a8:98:58:ad:
88:0e:3a:8b:43:ff:a5:e8:46:78:7a:5d:f1:9e:81:
4e:5b:e7:be:77:9e:3d:99:01:55:c3:57:e0:b5:67:
59:29:20:56:36:20:36:b9:55:c6:61:a3:a3:de:93:
e9:a5:50:47:d9:2d:aa:91:ca:de:54:51:0b:ee:af:
bd:a1:9f:51:1e:9a:2c:4d:58:f5:b0:0b:e1:47:1b:
b1:e3:6f:55:4c:69:43:1f:17:59:e1:0e:a2:fe:02:
60:4d:04:d6:4b:f1:12:bc:c1:0a:28:5f:02:31:19:
b8:c1:34:57:76:70:7b:ed:44:5b:fa:03:b4:dd:89:
2e:6f:22:6f:3b:e2:09:b2:41:05:d7:fa:05:ec:b9:
d2:f2:aa:bf:fa:b6:3f:b7:ae:11:c0:f4:e4:47:65:
53:e8:7c:31:72:4b:50:24:2e:5a:5e:cf:b8:5a:b3:
ba:21:1b:f6:e8:44:61:fd:7a:cb:6b:9f:85:7f:e0:
7d:22:0d:99:bf:26:40:b6:fb:bb:49:15:3e:e3:8f:
69:9d:91:30:dc:60:7d:85:9c:80:f2:11:3e:96:7e:
61:61:40:d3:81:02:4f:3f:92:e8:5b:ce:70:de:1a:
3d:9f:e7:96:19:64:c2:17:dc:6a:3b:1e:54:9b:f5:
6a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5C:FC:F5:44:9F:88:BC:B4:52:2D:34:D3:37:51:13:51:EB:42:4E
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:10:f6:82:d1:9e:c3:0f:41:7e:0b:59:31:8a:e5:28:26:44:
0c:83:5b:3a:dd:2b:87:55:c8:91:cb:e6:99:84:f9:05:a6:d1:
13:e0:95:04:71:e3:81:5a:6e:cf:06:d4:8e:b6:e8:3c:6a:c1:
78:16:d3:ff:d0:5b:76:07:f3:ab:42:dc:90:fb:f4:5b:35:d9:
61:fb:84:17:93:76:03:5d:ef:eb:e7:38:ea:1f:89:40:08:de:
64:eb:bc:ea:50:2a:83:33:f5:2b:16:7e:e2:d6:23:ba:22:df:
60:4d:ae:70:2c:60:c5:92:07:f1:a2:eb:c9:6a:0f:b6:54:36:
53:98:93:6b:17:4b:e8:06:62:1f:9e:a0:37:1a:4f:a5:39:f9:
19:2a:68:b2:d5:b0:5b:d4:da:b6:eb:75:5c:da:25:73:90:0c:
8b:68:44:2f:5f:63:77:47:19:bb:46:d3:9b:81:81:ca:e7:81:
4b:bb:c5:2a:9e:6d:cb:00:29:8a:4e:56:0c:ab:28:59:a3:4c:
d7:72:da:e0:6a:ad:48:58:4c:92:6b:65:ce:1d:74:ef:d7:f7:
e1:d6:cd:ab:68:f7:d8:da:ab:13:dc:c6:d4:95:45:0c:96:28:
fe:2c:d0:be:1c:ba:d1:a4:93:12:28:d8:3b:e0:5f:84:69:e8:
b5:5b:22:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:17 2026 by rpki-client