Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
File: AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json)
Hash identifier: 9mvNGq+DROPD1tVPojZoPe+1vIbeXhjAyeSpwED5HRs=
Subject key identifier: B8:B9:43:9F:AC:39:E2:06:7D:6A:A1:C1:DB:43:78:93:0E:CF:33:52
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial: 019EBF91588D83436465FD5AAA458A493826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
Manifest number: 01F3
Signing time: Sat 13 Jun 2026 06:00:34 +0000
Manifest this update: Sat 13 Jun 2026 06:00:34 +0000
Manifest next update: Sun 14 Jun 2026 06:00:34 +0000
Files and hashes: 1: 7VpUwdzvtYsNQgLFVimTvb7Z36E.asa (hash: wjvABcW2VEyfBBqr+y4ACXwxJq5x22L5rHuzxhC3ht8=)
2: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: Rmc9vT6Sc/oXQALd2hUDe1HtvfJvnCAr8ALPfO3CJ/0=)
3: Sdyoi-DJheUx969WiGu9zZYw2R4.roa (hash: zNk/KkOF+ii1aUgCLSl3f+9W1j7Kt8UQ+x8h5WRuSFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:58:8d:83:43:64:65:fd:5a:aa:45:8a:49:38:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
Validity
Not Before: Jun 13 06:00:34 2026 GMT
Not After : Jun 14 06:00:34 2026 GMT
Subject: CN=b8b9439fac39e2067d6aa1c1db4378930ecf3352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:d9:a4:e9:e2:c9:9a:5b:49:6a:62:14:28:
93:14:4a:1f:75:89:c2:f6:ad:57:6a:8d:22:6f:b1:
20:3f:f3:50:c3:bf:e7:31:56:2d:47:24:57:c4:21:
22:70:b1:6d:7e:21:b8:19:91:ca:21:5f:ab:9f:f0:
25:ef:e2:fe:7f:2d:83:45:ef:fc:cd:2a:2a:6b:4a:
e8:57:8e:40:28:27:bd:86:23:a7:14:b7:1a:ef:82:
4b:cb:47:57:90:38:94:87:6e:11:44:d9:41:03:4a:
d1:ad:b3:de:9c:8d:99:74:39:23:c7:d0:83:42:be:
b3:03:ce:0e:ad:98:e1:2c:ca:44:98:b1:b2:eb:b4:
ab:87:12:cf:63:00:9d:b4:50:d5:4b:6d:84:9c:6e:
a5:39:60:39:09:0d:4c:e8:d2:0b:87:a3:4a:34:7a:
7a:30:bc:4a:d4:6b:9c:ac:17:38:90:1a:cf:8c:4a:
e8:b2:c1:0b:47:dc:41:5c:d6:7a:c2:11:fa:7d:30:
a3:ee:11:d5:f7:0b:c7:fd:bd:cc:93:09:63:23:5d:
4b:5b:40:73:d9:e4:f0:6c:53:57:27:de:fa:bf:d9:
01:16:fb:41:52:86:49:1a:6c:67:74:c8:2b:0e:3b:
1d:6f:53:20:61:04:72:e4:a1:53:46:1c:9f:fe:9e:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B9:43:9F:AC:39:E2:06:7D:6A:A1:C1:DB:43:78:93:0E:CF:33:52
X509v3 Authority Key Identifier:
keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3c:74:b6:c9:4c:57:c3:70:35:56:52:e8:22:47:0c:64:a4:
76:09:e0:21:17:b0:2c:57:78:34:d3:81:e6:7c:2a:19:32:bf:
c7:b1:29:57:46:3f:11:1a:4f:ea:b7:d0:22:6c:56:52:bf:37:
d7:d5:66:9b:ba:92:d8:c0:6b:24:f7:bd:9f:57:f6:44:49:c0:
c3:72:c5:29:cf:07:e7:d8:75:ef:ae:af:e2:38:14:e8:a5:5e:
12:37:5b:77:d4:9a:13:4f:57:aa:8b:02:ea:8e:44:a6:cb:77:
c0:bb:cd:ae:3a:7e:ff:7e:d4:ad:1f:10:91:35:9d:34:94:0f:
37:53:17:55:09:7a:fb:f9:8f:78:09:75:fc:89:4b:f7:02:ac:
e4:32:06:32:c2:37:e1:fd:1d:0f:35:8e:71:49:1c:92:42:f2:
6a:d3:3e:73:15:93:71:fd:c9:31:44:c0:27:bd:26:31:46:63:
49:c4:57:8c:aa:07:4c:9c:2d:c0:d3:e0:8a:38:44:14:59:97:
41:fd:d4:eb:f3:9c:94:33:c6:79:bc:cd:d0:a7:b4:e8:93:f9:
1a:89:a7:ad:ed:03:92:2d:8a:d6:a7:7d:e2:c7:01:b5:31:11:
db:5c:1c:cf:46:fe:f9:99:09:95:bb:85:56:f1:2f:56:77:f8:
95:31:b6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:47:25 2026 by rpki-client