Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
File: AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json)
Hash identifier: 3r/9HH8aowk1LyFTvSPQ3EvWhbbtlsMvNKtoB0Qskp8=
Subject key identifier: 57:B0:F1:E0:7A:11:6C:A6:44:D1:A4:F0:E1:2B:F3:DF:04:FE:34:70
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial: 019CAB33F1067F00BC4AE36C6D62E719C003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
Manifest number: D9
Signing time: Sun 01 Mar 2026 21:00:33 +0000
Manifest this update: Sun 01 Mar 2026 21:00:33 +0000
Manifest next update: Mon 02 Mar 2026 21:00:33 +0000
Files and hashes: 1: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: TERBU5iJV38MlB6SW1KaXVv+ktA7dlImwcj1fLQOWQQ=)
2: nkmX4dnhq0haH7w-EQ-8AZXl9C0.asa (hash: cPe2C7iQQrkCBE7f1csKKk2nKejgvpQ7QC9Rodszwfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f1:06:7f:00:bc:4a:e3:6c:6d:62:e7:19:c0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
Validity
Not Before: Mar 1 21:00:33 2026 GMT
Not After : Mar 2 21:00:33 2026 GMT
Subject: CN=57b0f1e07a116ca644d1a4f0e12bf3df04fe3470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:88:0d:86:d4:2b:ae:48:6d:b8:26:25:5c:d0:
fb:5c:0e:ad:85:ea:16:4f:49:e4:28:13:a3:53:4c:
f1:1f:b1:5b:bd:5d:db:02:e8:5e:c3:ed:e8:10:0b:
63:69:57:a2:e4:13:75:ec:54:49:ed:7c:cf:ce:21:
95:ed:2e:91:a7:7c:37:82:38:58:a1:6a:b0:e5:42:
87:e1:b0:dc:d6:f9:c0:28:53:2e:eb:18:72:8a:6b:
85:29:ca:f3:ed:a0:b7:70:51:21:33:6b:6c:8c:f5:
af:ca:31:6c:b8:35:1e:5a:96:82:85:05:52:2a:1f:
a3:75:69:41:23:b3:aa:bd:91:52:f8:29:95:5f:d5:
88:65:1a:c1:d9:41:65:cb:db:0b:69:f3:45:aa:ad:
6f:9d:79:f9:10:c8:4f:64:a3:68:82:64:f6:22:eb:
73:f8:2b:05:e9:5f:86:66:46:f0:d5:f9:3f:a9:02:
82:4c:32:1b:28:ef:2f:6a:54:f3:e4:0b:02:de:af:
e0:46:11:cb:85:0f:39:29:3f:aa:0c:bd:36:f2:80:
2f:75:50:dd:85:9c:20:b4:ce:bb:f0:96:d7:1b:3b:
48:66:65:7f:7c:49:65:2d:61:61:9e:1c:4b:37:3a:
ac:f9:37:7c:5b:c4:93:6a:7b:78:9a:17:7c:5c:99:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B0:F1:E0:7A:11:6C:A6:44:D1:A4:F0:E1:2B:F3:DF:04:FE:34:70
X509v3 Authority Key Identifier:
keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:af:45:ab:fd:5d:bd:1e:a7:65:44:74:a3:14:5b:fc:d5:dc:
da:30:14:2f:e2:d6:d2:14:70:bb:4b:02:5a:04:e6:40:62:ea:
c1:78:8e:91:d0:0b:d6:3b:c3:7a:8a:7c:27:46:e0:62:05:2a:
6e:c1:3b:4e:7f:85:3e:b8:a6:40:45:7f:99:b3:c0:0f:2d:70:
19:de:c4:22:4d:a8:d3:05:eb:5f:b0:f3:f7:28:ff:97:a8:a8:
50:b1:e5:ff:f5:b1:2c:9f:21:d0:9f:e7:b5:67:54:24:7d:b9:
a9:aa:51:b0:68:f8:a4:d0:8d:a2:00:08:71:11:d8:d2:ca:0b:
70:01:6a:27:17:08:e6:88:e5:07:9c:84:02:3d:c8:61:12:f5:
e5:96:e8:52:78:e9:91:a1:f2:1a:da:c7:1e:83:92:c1:7e:7f:
6e:dc:51:69:af:64:4b:96:69:86:a0:af:b3:71:86:9b:53:36:
a5:87:fe:1d:64:07:ac:2c:71:5f:bf:03:f0:2c:4b:d6:da:69:
40:47:0e:04:1c:8f:61:53:68:0a:84:c5:13:5d:9a:f1:29:a7:
8f:4e:3f:e9:c3:5e:fc:2b:b8:70:50:f7:2e:e7:b2:72:81:c5:
7f:21:06:73:94:a7:9e:a9:42:42:71:0e:10:f1:62:2d:18:a9:
88:27:9f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:59 2026 by rpki-client