Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier: 9G4rEewKQXR+iVBZS/Bm5JhPF3l8tsuaVDC4Ald2hUY=
Subject key identifier: EC:3D:6C:E3:02:C0:56:DA:73:D1:2B:0D:2D:4C:49:51:AA:AB:E4:60
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 019CACEB706FE51B56661B79D9B8533DC5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number: 1076
Signing time: Mon 02 Mar 2026 05:00:36 +0000
Manifest this update: Mon 02 Mar 2026 05:00:36 +0000
Manifest next update: Tue 03 Mar 2026 05:00:36 +0000
Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: QhNO8FIehMRPvqdWDdnkKHxRByq3T1QaKHuSk0PuZ9g=)
2: IseXGFrOHh1SrFUGwBGdimL1xPE.roa (hash: QRfGT54r8WrtHwlE62/eFdNxhXQLn2BRJl4Hpjv4kZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:70:6f:e5:1b:56:66:1b:79:d9:b8:53:3d:c5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: Mar 2 05:00:36 2026 GMT
Not After : Mar 3 05:00:36 2026 GMT
Subject: CN=ec3d6ce302c056da73d12b0d2d4c4951aaabe460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:03:b7:77:c2:fd:9b:0b:df:e6:3d:29:99:
9b:8f:a3:48:32:f6:7f:af:61:c5:3b:92:bc:3c:1d:
dc:fa:df:2d:52:98:fd:bb:09:f1:b3:20:8d:5e:78:
37:39:56:63:bd:49:2d:56:58:1d:86:eb:88:b0:d7:
80:a7:12:61:02:bc:be:a9:7b:9b:b2:51:68:55:69:
79:ef:a2:73:3f:17:36:b1:4e:76:95:aa:8d:6a:67:
f6:8e:d5:16:da:86:bd:1f:bb:67:58:a8:32:da:3e:
ed:4d:52:3f:f4:7f:85:f3:34:a7:87:5a:cb:60:70:
68:95:84:32:90:77:f4:a8:d9:ee:14:ee:db:69:d6:
29:b0:a7:da:d0:28:95:e2:61:06:90:f7:62:72:0f:
44:e0:1e:9b:46:b0:8c:5b:fe:cf:3a:df:bb:0b:88:
3d:0a:8e:77:b2:2d:e1:42:7d:21:9a:20:1a:f1:9a:
3e:a5:cb:a8:f2:82:4f:2a:fe:60:44:26:ab:7d:f5:
9d:8e:27:28:f3:85:6c:4d:01:49:6d:3e:46:ce:dd:
8a:f1:ed:07:36:db:c2:49:93:2a:b9:81:c8:69:24:
3a:50:71:ca:48:71:33:21:90:6f:f3:9b:61:11:8d:
23:e9:dd:42:b7:df:fb:81:7c:64:4d:8e:3d:2c:10:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3D:6C:E3:02:C0:56:DA:73:D1:2B:0D:2D:4C:49:51:AA:AB:E4:60
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f9:ef:c0:dd:eb:cf:70:bd:3d:8d:13:5f:72:1b:4d:b6:96:
3a:55:60:44:8d:e7:2f:ea:90:21:0e:7b:97:c4:11:51:dd:db:
c5:d6:b1:6e:db:1f:3b:64:93:4f:4b:d0:8d:4a:e9:24:4e:51:
bf:6f:7e:d6:46:40:a0:73:25:52:8a:00:02:e0:e4:67:44:a0:
65:c1:b9:9b:3a:48:57:e1:06:1a:da:e4:03:25:fc:0b:70:a2:
54:81:51:92:6b:59:64:f2:81:61:f5:e9:39:e1:74:0c:9b:fc:
e4:10:9a:de:c3:12:15:1d:20:3d:14:8f:1e:93:4e:a8:7e:da:
be:60:3d:e1:ca:31:ff:cc:a1:b8:0a:97:bf:b1:23:6d:d6:5e:
45:72:c1:ad:3b:2b:68:0d:d4:e5:6f:db:14:5f:6e:bd:15:5c:
9b:90:8a:4f:dc:c5:4f:45:24:d8:6d:cb:45:9d:25:1c:a0:84:
2e:c7:96:3f:05:c0:68:26:f0:7d:34:05:8f:8c:8e:f9:60:dd:
69:10:3f:ac:3f:a2:00:25:c9:35:c1:dd:ad:2a:ee:b8:3c:f2:
9b:39:8d:b3:00:1a:b3:8d:bf:02:84:30:46:88:18:94:ea:29:
c1:7e:08:1d:ee:38:93:37:a4:8d:82:7e:c5:b1:d4:08:c4:4a:
c9:e1:ba:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:11 2026 by rpki-client