Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
File: AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json)
Hash identifier: nFyXXvwv4wiFlZeGCyjjVfL671+OtxPjD/9MHf20gVA=
Subject key identifier: A3:E1:19:AD:9D:03:24:4A:78:CF:59:B4:E4:6B:1F:07:90:0B:FA:51
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial: 01A0C7EADD26D442E3EFF2FDD6CDD295E8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
Manifest number: 030A
Signing time: Tue 22 Sep 2026 07:00:53 +0000
Manifest this update: Tue 22 Sep 2026 07:00:53 +0000
Manifest next update: Wed 23 Sep 2026 07:00:53 +0000
Files and hashes: 1: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: UFEStfFs3wlyawRgS9IHzvD1Dq3iowSu7zrQ7w23peQ=)
2: EorLfiIdTLqramNOmKdv9GCOB38.asa (hash: DJtU7WzPtfml3v/eu+a/l4hvtaitE70F0oGlmKAGZGY=)
3: Sdyoi-DJheUx969WiGu9zZYw2R4.roa (hash: zNk/KkOF+ii1aUgCLSl3f+9W1j7Kt8UQ+x8h5WRuSFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:dd:26:d4:42:e3:ef:f2:fd:d6:cd:d2:95:e8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
Validity
Not Before: Sep 22 07:00:53 2026 GMT
Not After : Sep 23 07:00:53 2026 GMT
Subject: CN=a3e119ad9d03244a78cf59b4e46b1f07900bfa51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:54:23:12:06:00:f8:4d:71:9f:bb:1c:8f:7e:
c1:44:f2:e4:f4:d8:35:d1:31:f0:10:a0:49:2c:d3:
c1:9c:0d:74:c2:4d:f4:a8:b2:e4:58:e7:5b:5d:5d:
ec:d3:48:58:36:db:db:76:c2:15:c8:9e:6e:9e:47:
01:4c:c8:5f:69:d4:8c:d3:da:2b:71:6b:f3:87:dc:
79:4c:9e:a3:4f:3b:c5:dc:da:6b:92:77:49:8e:3b:
2e:61:d2:0b:b7:26:3c:4c:8a:92:86:12:61:9f:61:
33:41:ea:dc:20:5f:5a:88:7f:b0:1c:9c:ac:77:a9:
19:21:58:be:13:53:ec:93:bc:2c:7f:4e:f4:f2:b2:
25:cc:54:8c:b7:3f:5b:5a:a0:74:d0:8c:e3:37:c4:
27:d7:b4:9e:34:54:3b:52:d5:98:69:f2:c6:fe:35:
c1:6f:c1:b8:b9:fe:17:cf:15:b3:ee:50:05:f7:70:
5a:d5:fe:8a:92:45:6e:d2:65:eb:e7:a9:af:e3:09:
4c:cc:18:eb:23:49:44:3d:9b:da:2d:e9:e8:9d:bc:
5d:ef:1c:ea:7d:be:98:f9:ba:b0:5b:15:d5:0c:80:
d7:0d:c0:ed:f1:b1:81:bf:b0:aa:fc:d5:c0:bc:01:
fa:a6:04:cf:81:65:5b:e4:51:e3:94:5c:e4:a8:e8:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E1:19:AD:9D:03:24:4A:78:CF:59:B4:E4:6B:1F:07:90:0B:FA:51
X509v3 Authority Key Identifier:
keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:39:0f:af:5d:ea:6e:10:65:77:01:c5:9d:88:d2:84:8b:40:
4c:27:d6:d9:73:ae:1f:32:d6:e3:01:d0:8b:4e:c4:73:c0:c7:
f7:14:b7:63:9f:6e:24:0b:40:25:56:0f:d0:ed:cf:25:23:4d:
35:28:af:d0:a8:0a:5c:80:f4:be:6d:8a:6f:e0:f6:55:63:ca:
07:2f:66:1d:72:f4:2c:46:92:36:81:72:bb:ed:ce:53:e4:b9:
39:4b:c8:28:62:9d:d6:a5:59:08:40:4b:4f:72:59:69:ca:15:
ca:24:ce:2c:ca:9b:f6:f9:51:67:81:b9:50:ad:cf:83:c5:26:
5b:dd:b2:4d:0d:54:a1:4b:24:fc:39:60:c7:4e:b5:c4:fa:ec:
17:d9:a7:d1:06:56:e5:54:61:04:f2:06:a1:77:f3:7c:7c:49:
73:1c:97:99:2d:3b:c9:f5:05:18:fa:da:ae:f8:0c:fa:0d:ab:
4d:42:85:fa:31:46:21:9c:cf:9f:3c:e3:bf:7d:fe:7c:86:56:
c9:14:09:9e:4a:80:3e:4f:80:a3:d1:fc:42:fe:7f:c3:db:2c:
a0:14:68:3f:67:2f:37:42:51:6f:4b:b7:7f:8a:69:9a:52:68:
9d:2d:cf:d9:6e:12:85:5e:ca:37:3f:74:f2:47:5a:50:e4:3e:
3d:4c:e0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:28:41 2026 by rpki-client