Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
File: AJLnRYJTGqr-6IuccujCnkVNBlk.mft (raw, json)
Hash identifier: dvi5y9JIV3Yh/4Nay/UUZGWdvYbrezC3LeznVPy4/70=
Subject key identifier: A1:C0:AE:F2:F0:72:DF:FF:17:24:0F:1B:B8:41:C7:C1:35:2C:E3:F4
Authority key identifier: 00:92:E7:45:82:53:1A:AA:FE:E8:8B:9C:72:E8:C2:9E:45:4D:06:59
Certificate issuer: /CN=0092e74582531aaafee88b9c72e8c29e454d0659
Certificate serial: 019EC035E3BA44A66A0D4BC456D6ADE4F31D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
Manifest number: 3E
Signing time: Sat 13 Jun 2026 09:00:17 +0000
Manifest this update: Sat 13 Jun 2026 09:00:17 +0000
Manifest next update: Sun 14 Jun 2026 09:00:17 +0000
Files and hashes: 1: 6ontWII5WMer-NC2JkFZC94eMPo.roa (hash: ikc5sMI2WQkSDX/3GmIBdgUqzy3XSw6lVBzfeyAHG84=)
2: AJLnRYJTGqr-6IuccujCnkVNBlk.crl (hash: d+C0cSY365mAouvGzHuSGIgWpAjVAScfd2OCYq2ykx4=)
3: KdjeaKOVQI8nkLscbrcljjEWQvo.roa (hash: hmKWt5BMw7FcRXxgWPqVLHCN6voSzvaQG+o7oZwdPWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:35:e3:ba:44:a6:6a:0d:4b:c4:56:d6:ad:e4:f3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0092e74582531aaafee88b9c72e8c29e454d0659
Validity
Not Before: Jun 13 09:00:17 2026 GMT
Not After : Jun 14 09:00:17 2026 GMT
Subject: CN=a1c0aef2f072dfff17240f1bb841c7c1352ce3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:22:9f:26:0d:15:a9:58:a8:09:0f:72:d7:2e:
bd:d2:bc:67:e2:03:12:2d:cb:04:1a:a6:6a:90:ac:
ea:48:f7:7d:c3:d0:be:bf:94:b2:9d:f3:79:4f:ec:
01:ec:ec:c2:90:99:7c:5a:93:69:93:40:10:0b:f8:
71:5e:c3:41:d9:10:a8:19:4e:19:e5:5c:2f:72:dd:
9d:84:8e:9f:de:27:4c:36:49:c5:08:34:ab:fb:73:
c8:52:ea:5e:d0:c3:ff:a4:11:5f:c0:c4:cd:7a:3f:
f8:f6:b5:68:bc:3e:33:d7:aa:6c:15:21:74:09:ca:
65:99:9a:a7:9c:94:a3:3d:ba:07:2d:15:f8:c6:11:
63:67:0f:ed:26:f5:20:9b:67:58:fa:66:bf:b4:19:
6e:98:10:9f:75:4d:17:d5:2d:95:10:00:82:45:3c:
81:8e:52:44:32:75:35:d5:07:85:2a:6d:a8:78:19:
32:18:c4:06:f3:5e:0b:6a:16:54:93:00:69:e6:c9:
2f:42:c2:6a:1e:5b:4f:98:75:fc:60:04:92:7b:13:
c8:9f:cc:ec:9d:6b:6b:32:b1:36:83:11:f9:00:1d:
0a:3f:1e:ce:08:2e:77:f6:2a:2a:ac:6f:77:bc:e9:
5a:10:76:86:b9:be:c1:35:5c:46:a9:73:c9:71:f6:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C0:AE:F2:F0:72:DF:FF:17:24:0F:1B:B8:41:C7:C1:35:2C:E3:F4
X509v3 Authority Key Identifier:
keyid:00:92:E7:45:82:53:1A:AA:FE:E8:8B:9C:72:E8:C2:9E:45:4D:06:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:34:58:3a:16:10:38:05:1e:94:b7:1a:5d:cb:2b:86:b8:e8:
da:01:34:30:3c:c3:21:81:71:f8:26:9a:95:bf:ec:a1:4c:b2:
3c:70:de:3a:6e:3d:53:ae:9f:61:55:8e:7b:16:fb:57:c7:3e:
5f:0f:3a:39:56:79:c9:25:0a:f2:41:bb:fa:4e:f3:db:30:d0:
46:ed:a2:4b:18:ec:52:cc:07:16:8f:9a:98:0a:2f:df:99:d4:
8f:58:99:9a:5c:88:26:21:e9:b7:8b:8b:d2:99:62:e0:80:b9:
3b:14:93:46:11:89:2e:de:bc:21:f9:9f:01:2d:e4:73:fd:6e:
0b:2c:2a:06:78:46:f2:58:7a:bf:e4:d5:14:cf:ea:79:96:2a:
8f:d6:3b:2e:53:c6:1b:09:b9:69:4f:6d:b7:96:a4:cf:cc:3f:
41:2f:d0:ca:6e:c2:ea:ff:a6:2a:40:dc:55:70:1c:7a:69:ef:
6e:ab:68:e1:90:bd:fa:a1:4f:cd:4a:72:6c:8e:16:78:52:73:
50:73:6d:c7:0b:27:09:5c:ca:82:5e:3a:28:d5:36:2b:2d:ae:
8a:42:8a:1c:d9:ff:44:0b:e4:35:56:36:4a:8f:f1:ad:2b:b6:
8d:22:2c:60:f4:94:c0:5f:9c:81:e0:37:7f:91:da:df:50:08:
f8:04:6b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:49 2026 by rpki-client