Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File: Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier: Q30NVBzdS3RjcezS790vUdj10Jdk3YSjbbnVwSELbi4=
Subject key identifier: C9:9E:3B:90:8A:88:8D:C6:CA:AD:BF:6B:90:F3:F5:F6:65:44:EA:99
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer: /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial: 019CAA21981CFD03AB8597EDA8AD475697BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number: 0652
Signing time: Sun 01 Mar 2026 16:00:54 +0000
Manifest this update: Sun 01 Mar 2026 16:00:54 +0000
Manifest next update: Mon 02 Mar 2026 16:00:54 +0000
Files and hashes: 1: 8_kucGIrmgrww2gQuMj2PaOsbZQ.asa (hash: 959Y1QCy7S6Njd/ATDYfLCDvVcTQhA7oCE0SACZTltQ=)
2: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: t4PcmjsI5IgfuH2RFdMBtKwUqWAxiVfzcc1z4ONKmqo=)
3: IQC6LuJcxVvsBm-_EZRDXpPWxCc.roa (hash: wvfm7aMZTdRYHX9ee2IfOerZQpff8X8TbhsJrJvPsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:98:1c:fd:03:ab:85:97:ed:a8:ad:47:56:97:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Validity
Not Before: Mar 1 16:00:54 2026 GMT
Not After : Mar 2 16:00:54 2026 GMT
Subject: CN=c99e3b908a888dc6caadbf6b90f3f5f66544ea99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:6b:6b:c3:a9:f8:0f:a5:26:e7:b9:60:d9:
7f:d3:31:c8:61:f4:77:cc:21:79:f4:00:71:77:c5:
8d:8b:3c:4a:fd:01:05:12:2d:70:b4:16:4e:aa:25:
06:79:3f:93:af:63:a6:02:5a:4d:bc:8b:dd:75:cc:
a3:66:1b:0b:b2:7d:62:fe:b8:88:9e:45:89:45:a9:
f5:0f:f4:c2:8a:57:44:fb:df:6f:80:53:8d:9d:3b:
8b:d2:a0:49:10:2f:8c:be:0c:31:13:ec:41:50:b5:
7c:93:20:58:7e:0e:96:b1:c0:d0:97:4b:33:ac:d5:
5a:dd:41:90:f4:9c:d3:4b:a6:86:ed:b7:a0:f4:47:
1a:8e:cb:80:d5:65:5a:47:49:1e:58:cc:29:95:eb:
5c:17:b3:df:77:1a:34:37:2c:b9:13:6b:f8:5f:7f:
d7:d9:40:f1:6b:35:9e:32:e6:e7:12:2a:27:e4:c9:
68:d9:47:a6:08:f8:26:4a:70:97:4f:c3:b3:00:79:
5d:dc:a2:ba:15:fc:d9:03:fa:8d:bc:cc:d7:94:25:
70:92:2f:a3:c5:37:12:d7:0e:9e:f4:0c:53:44:2a:
6f:f0:e1:64:31:32:9f:62:e5:0a:b7:2d:f0:01:24:
64:da:48:d6:44:eb:1c:ad:25:46:be:87:28:3d:12:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:9E:3B:90:8A:88:8D:C6:CA:AD:BF:6B:90:F3:F5:F6:65:44:EA:99
X509v3 Authority Key Identifier:
keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:46:ca:f1:32:62:80:12:ce:6e:8d:f8:44:89:5d:30:ce:4b:
3f:e7:23:01:ef:48:f9:59:5c:3d:c2:9a:37:b3:ee:1b:21:39:
fa:5c:9f:11:07:5d:35:87:09:d5:6a:12:f4:da:37:c4:64:f9:
11:6a:09:0c:2a:76:e2:19:ca:a3:1a:1c:31:8f:eb:96:de:79:
1e:fd:72:87:fc:d4:5f:32:a8:28:49:ba:61:8e:ea:1d:2d:0f:
fe:7e:27:45:52:40:39:3f:7a:f5:c7:32:9d:35:7d:4d:ac:60:
f3:d3:b8:a7:2c:f9:8d:0d:c5:5f:99:6e:a1:cf:c9:e3:be:c9:
be:ae:e9:4a:a3:96:10:b5:c0:ea:e5:69:8b:34:51:bc:8d:54:
eb:df:5c:65:10:d1:fb:df:16:93:dc:09:de:5b:87:46:d1:aa:
bc:00:8e:ae:30:82:bf:18:80:77:d9:b8:a3:b3:39:91:32:5d:
58:77:37:26:7e:d5:15:87:fe:fc:47:a0:91:8c:d6:f6:35:1b:
cb:f2:18:36:9f:62:48:d3:40:6f:90:e6:f2:4d:ee:c0:55:7e:
93:95:0b:68:d8:3a:e7:f9:ea:ad:9b:ce:78:93:70:15:83:8d:
49:c1:7b:44:c0:23:e6:90:d1:78:b3:23:02:76:c8:26:9b:76:
84:2b:7c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:42 2026 by rpki-client