Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
File: AJLnRYJTGqr-6IuccujCnkVNBlk.mft (raw, json)
Hash identifier: uvu0D41MlNSUtYHo6oSNkq7hof9t1oCXpp/zbVQyUY0=
Subject key identifier: EB:AA:3B:D2:40:2A:B3:29:00:32:27:8E:E8:EE:D8:98:49:2F:D1:BA
Authority key identifier: 00:92:E7:45:82:53:1A:AA:FE:E8:8B:9C:72:E8:C2:9E:45:4D:06:59
Certificate issuer: /CN=0092e74582531aaafee88b9c72e8c29e454d0659
Certificate serial: 019FA9E3495A2B2161794D014476A4C30DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
Manifest number: B7
Signing time: Tue 28 Jul 2026 18:01:12 +0000
Manifest this update: Tue 28 Jul 2026 18:01:12 +0000
Manifest next update: Wed 29 Jul 2026 18:01:12 +0000
Files and hashes: 1: 6ontWII5WMer-NC2JkFZC94eMPo.roa (hash: ikc5sMI2WQkSDX/3GmIBdgUqzy3XSw6lVBzfeyAHG84=)
2: AJLnRYJTGqr-6IuccujCnkVNBlk.crl (hash: 26iUhIREtaxse2YCIS7kYrvHoxdWmy1smIrhIOLvSA4=)
3: KdjeaKOVQI8nkLscbrcljjEWQvo.roa (hash: hmKWt5BMw7FcRXxgWPqVLHCN6voSzvaQG+o7oZwdPWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:49:5a:2b:21:61:79:4d:01:44:76:a4:c3:0d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0092e74582531aaafee88b9c72e8c29e454d0659
Validity
Not Before: Jul 28 18:01:12 2026 GMT
Not After : Jul 29 18:01:12 2026 GMT
Subject: CN=ebaa3bd2402ab3290032278ee8eed898492fd1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:72:2e:1f:a4:51:5d:8e:ab:95:61:b4:a7:d0:
b8:58:f3:04:a1:4e:04:fb:60:41:0c:49:8d:d0:5b:
45:94:8c:fb:8e:01:63:b5:c8:a4:31:66:d1:e8:da:
7a:21:04:ad:55:dd:93:5d:7c:08:80:78:4f:3f:3a:
2c:f8:d9:4d:39:5f:b5:da:79:67:02:21:52:9d:be:
e5:a0:6d:f2:b9:a5:d4:5f:04:4c:47:b2:54:09:bd:
db:f4:e5:6e:97:fd:43:ee:65:1d:ca:b2:24:f1:42:
a5:70:c4:50:b1:3f:4b:5f:bd:9e:17:21:dc:d0:1e:
6a:05:75:df:1d:a1:56:79:bc:03:60:e3:ee:3f:9d:
8e:b8:84:2a:a4:ea:25:68:1b:39:05:98:83:99:0b:
43:1d:84:99:e8:21:db:73:2c:7f:4f:2f:06:09:6f:
a1:ff:2a:84:19:3f:76:fa:78:e4:a4:34:41:db:15:
5e:7e:09:04:f2:aa:a2:01:5f:67:67:cd:46:bb:6e:
32:07:33:83:df:5c:94:93:72:da:33:d8:f7:3c:97:
53:03:15:95:5d:db:52:19:1d:55:d8:17:f8:86:b1:
32:43:15:47:9e:82:3b:55:fc:ac:a9:7d:dd:8a:45:
48:3b:1e:6a:c4:05:24:f0:21:85:3a:0e:ae:5d:10:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AA:3B:D2:40:2A:B3:29:00:32:27:8E:E8:EE:D8:98:49:2F:D1:BA
X509v3 Authority Key Identifier:
keyid:00:92:E7:45:82:53:1A:AA:FE:E8:8B:9C:72:E8:C2:9E:45:4D:06:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:36:d6:0a:d3:42:a9:5d:54:43:b7:b8:e6:ad:63:31:68:cc:
73:a9:47:f6:c2:76:c3:1e:70:30:36:d4:e5:8f:3a:1b:48:e9:
1a:7e:d3:a4:74:50:20:5e:e1:6f:d9:73:c8:b7:62:d4:31:d9:
4d:47:a7:66:7b:d9:03:4d:67:16:f2:dd:de:11:f1:e7:eb:fd:
c2:a3:7d:a6:74:3c:de:4b:2a:a6:77:05:ff:20:aa:4d:91:bf:
ee:02:b3:c6:6b:10:c3:b1:3a:9b:0e:47:1d:0b:e4:56:6b:82:
8a:74:7e:77:08:0f:15:a5:79:93:ea:97:fc:ff:d3:40:e8:8d:
a5:e8:e2:d1:8e:fa:5c:c9:bc:9a:92:17:36:1e:67:76:a3:ad:
c8:2b:51:67:26:c8:2e:f7:7e:99:67:83:51:2c:4f:d9:ae:18:
37:bf:ab:3d:a2:c9:e4:8c:e4:0e:c2:e0:28:be:b3:ca:6a:7e:
86:89:da:75:c2:f6:99:a7:0f:ee:80:39:9f:d2:76:62:08:d9:
96:72:91:9d:70:87:06:ed:14:ee:bd:6f:73:be:c7:d2:8f:1e:
69:e6:d9:81:64:3e:f9:a9:e0:5c:4f:a1:fd:fe:0d:56:b0:ab:
c3:fa:f9:72:9e:0f:87:b3:b2:94:56:29:4d:e3:bd:70:5c:e9:
53:ce:00:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:32:54 2026 by rpki-client