Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier: J9wI2wLDMG0bgOwqTa611JIlilisRbljky+dAX8i6Ss=
Subject key identifier: E4:69:04:91:C4:D9:09:5A:15:22:1C:5B:2A:67:AD:31:5D:20:D6:9F
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 01A0DEAA044E803A2D1B4771D0052095E97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number: 12A2
Signing time: Sat 26 Sep 2026 17:01:19 +0000
Manifest this update: Sat 26 Sep 2026 17:01:19 +0000
Manifest next update: Sun 27 Sep 2026 17:01:19 +0000
Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: DD8XTkQ72TgFk43gk9WcR/IvesBN8MT2YMuCZFpIrpU=)
2: IseXGFrOHh1SrFUGwBGdimL1xPE.roa (hash: QRfGT54r8WrtHwlE62/eFdNxhXQLn2BRJl4Hpjv4kZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:aa:04:4e:80:3a:2d:1b:47:71:d0:05:20:95:e9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: Sep 26 17:01:19 2026 GMT
Not After : Sep 27 17:01:19 2026 GMT
Subject: CN=e4690491c4d9095a15221c5b2a67ad315d20d69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:d0:ab:c0:5d:c5:93:e6:66:ac:ab:6a:8a:
e1:f2:01:31:10:5c:95:74:ec:91:9a:d6:0e:c5:8c:
e9:f3:b7:3f:31:dd:4c:30:e5:94:49:76:7e:82:0e:
d1:fe:20:b8:b9:4e:b1:c4:5b:78:29:2a:0f:3c:6e:
f6:19:c1:f1:93:cd:d4:25:b9:ca:c8:05:d7:df:19:
fa:e4:61:0d:be:a8:04:af:45:9c:84:97:9c:90:2c:
06:92:dc:96:9e:66:60:c4:92:44:b9:24:6e:4d:e6:
3b:6b:9a:7f:2d:3f:40:da:e8:52:14:cc:b5:69:6e:
90:d0:ff:de:52:93:93:eb:2b:3b:93:1c:96:08:f3:
1f:ec:bc:f9:9c:98:9e:50:44:97:76:85:38:3d:ba:
b0:a6:48:83:83:5c:39:3c:6f:2f:59:f8:38:2f:96:
f9:f8:ba:ee:ae:ce:3e:a2:3e:24:80:79:78:a4:fe:
3a:0f:b0:dc:eb:53:51:79:b9:f5:d9:36:ea:96:18:
54:48:d7:e5:66:13:02:f9:60:4c:a4:2e:2e:75:47:
a4:8b:88:87:3d:c3:b9:ce:91:02:a5:94:05:6c:91:
6b:4c:93:06:49:ff:28:09:b4:30:36:1d:b1:fb:78:
27:03:c3:c9:59:b9:e4:36:c7:d3:e1:ef:e5:0b:49:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:69:04:91:C4:D9:09:5A:15:22:1C:5B:2A:67:AD:31:5D:20:D6:9F
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5e:10:1f:7a:2f:dd:a6:27:3c:80:33:2e:32:72:8a:cb:1a:
92:98:24:31:c2:e4:3b:0f:5b:92:65:94:69:cc:42:a0:8b:77:
31:2f:b1:fc:41:8a:f1:e7:55:55:fc:6f:21:0d:e5:70:17:78:
13:22:cf:ca:92:2a:cf:82:f1:bb:82:b5:91:78:fc:2c:29:3f:
b2:e7:c8:30:26:ff:68:3a:64:c7:21:a4:f7:41:64:43:06:5d:
62:10:a6:ee:e0:fd:24:13:49:6e:2b:f1:e3:55:d2:17:c9:12:
b3:f6:69:10:37:f9:e6:70:c7:8a:e5:b9:5b:f1:92:53:9a:34:
54:27:9c:e4:1e:f0:ec:a0:c0:ff:7b:48:17:9e:ac:58:e9:46:
8e:fa:4b:ee:c3:f0:e4:8e:20:be:56:fe:54:01:0d:73:a4:6c:
01:d7:a0:89:c4:8b:96:f3:29:2f:98:59:91:c0:8a:c7:ab:b3:
0a:fa:7d:46:53:e4:ca:f5:4b:57:ed:6f:c4:25:ed:8e:02:c1:
fd:8e:ef:c1:ad:48:57:04:7f:74:03:74:13:d8:29:e5:2a:bd:
c5:11:e3:57:8a:df:d5:cc:81:3a:86:80:76:9d:c7:44:8b:ad:
7e:4c:ad:8f:a5:c5:c1:ff:71:fc:ba:a4:64:17:ea:7d:8f:cd:
91:db:cb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:46:55 2026 by rpki-client