Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File: Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier: b6mwGkqprp0HjN6F2KHUEkYyXh5TGAbPajKgbUo+OJc=
Subject key identifier: 04:F9:83:CF:08:08:9F:2A:24:BA:09:04:93:B7:F6:34:6C:CE:00:53
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer: /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial: 019D9998EF669A2A247C77FF3F265B0CED59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number: 06CE
Signing time: Fri 17 Apr 2026 04:00:29 +0000
Manifest this update: Fri 17 Apr 2026 04:00:29 +0000
Manifest next update: Sat 18 Apr 2026 04:00:29 +0000
Files and hashes: 1: 8_kucGIrmgrww2gQuMj2PaOsbZQ.asa (hash: 959Y1QCy7S6Njd/ATDYfLCDvVcTQhA7oCE0SACZTltQ=)
2: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: eVynHmjOb75tBvvVly6fI+z3cbaXT0+qornRIk5wP9g=)
3: IQC6LuJcxVvsBm-_EZRDXpPWxCc.roa (hash: wvfm7aMZTdRYHX9ee2IfOerZQpff8X8TbhsJrJvPsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:ef:66:9a:2a:24:7c:77:ff:3f:26:5b:0c:ed:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Validity
Not Before: Apr 17 04:00:29 2026 GMT
Not After : Apr 18 04:00:29 2026 GMT
Subject: CN=04f983cf08089f2a24ba090493b7f6346cce0053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ab:b7:f4:07:3a:ed:b9:8c:03:5c:20:83:ad:
f8:9f:5a:75:27:e9:d8:cb:36:62:9c:e6:06:dc:9d:
10:6f:1c:2d:33:6a:9c:4c:76:8f:2a:1a:f7:ea:23:
47:0e:d7:67:0d:62:64:34:42:30:4f:7e:b5:a0:e1:
8f:fe:2d:8f:0d:fd:75:45:de:54:ec:47:5c:ba:54:
20:31:c0:2f:d1:86:4b:bc:67:20:39:27:c6:13:d7:
bf:6a:8e:50:09:84:ae:50:76:c5:fa:77:74:fe:a7:
83:0c:e6:de:f5:c8:eb:12:97:25:8d:72:01:dc:91:
41:58:16:88:ef:a9:02:43:bb:f6:8f:ed:17:8f:a5:
92:72:c8:8c:8e:db:be:c9:17:8b:6b:cb:b1:29:81:
dc:db:a6:74:4c:37:15:a1:0a:4e:ff:17:40:52:e7:
ab:0f:aa:ce:69:e7:ee:9b:b3:a8:fd:1f:10:93:fe:
06:b7:d6:5f:da:5e:34:b7:71:dc:11:6e:b9:d5:7f:
de:61:41:da:b1:69:ea:dc:8e:26:07:97:2b:4e:7f:
0a:ed:48:cc:54:04:6d:4c:24:06:29:e8:17:09:47:
3b:07:03:72:d7:ab:2b:57:74:cc:c3:38:86:72:eb:
8a:bd:00:b4:8d:65:57:0d:14:51:e5:3e:de:ee:98:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F9:83:CF:08:08:9F:2A:24:BA:09:04:93:B7:F6:34:6C:CE:00:53
X509v3 Authority Key Identifier:
keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9f:ed:ef:04:98:1c:3d:07:02:0f:bc:d6:d1:80:55:92:01:
33:53:3a:af:ec:52:e9:72:8f:62:2a:d6:91:eb:f4:55:96:25:
e7:de:af:1a:51:85:de:fe:a1:a9:01:af:4e:26:6b:f0:bf:d1:
89:f0:6c:2b:9b:1c:d7:f7:d3:b2:0e:55:4a:29:a6:64:ed:56:
51:72:9f:22:dd:84:35:99:51:8d:f5:6b:da:de:01:25:0a:58:
22:a4:70:5b:96:f5:77:bb:80:50:f6:7b:b9:fc:ee:d9:91:34:
34:be:bc:fd:61:41:71:8e:32:26:8a:04:80:e9:40:ad:45:38:
41:6d:2d:bf:cb:15:96:28:f6:f1:13:aa:0c:80:81:20:12:d2:
3b:b5:5b:9f:c6:da:9a:ab:56:42:67:77:f6:ba:29:70:7f:51:
da:9d:e0:0f:13:01:a3:0d:bf:4b:e5:b2:0a:97:5d:95:98:28:
f6:b6:9c:c1:f4:f5:2a:2b:ad:dc:01:6d:be:69:ea:d6:cd:ee:
13:07:31:ea:b1:e5:a7:4b:c6:ff:17:70:9f:2a:8c:dd:39:44:
51:21:d2:35:b7:b8:f1:6d:37:13:cc:86:b0:31:d5:5b:a7:77:
eb:0d:62:56:98:6f:a8:32:02:2f:8c:f0:33:cd:b0:9f:c6:12:
29:82:30:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:37 2026 by rpki-client