Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
File: AJJn8-O54eu5eZaQgLDfqyTDYBo.mft (raw, json)
Hash identifier: vFoqvjs0962Z7GLBWu1DhFckwcA7HXiH9pHxx4GjHI4=
Subject key identifier: 23:33:11:55:CB:F5:5E:27:CB:C5:DC:EB:86:39:C2:23:2C:81:BE:D2
Authority key identifier: 00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
Certificate issuer: /CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Certificate serial: 019FAC761AC8FCC4818502C2B61D94CD3B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
Manifest number: 05A7
Signing time: Wed 29 Jul 2026 06:00:48 +0000
Manifest this update: Wed 29 Jul 2026 06:00:48 +0000
Manifest next update: Thu 30 Jul 2026 06:00:48 +0000
Files and hashes: 1: AJJn8-O54eu5eZaQgLDfqyTDYBo.crl (hash: O1JYlhHd6gOyvtFC1vPsKQBuk1AY7Rf19616usLoAIs=)
2: d9OmlBe2GpKLvl3u0mUGOFIDWgo.roa (hash: Ba/7rGgRRFa7/HkHrFHCRps9ypeyWifGgSmqxh5y+b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:1a:c8:fc:c4:81:85:02:c2:b6:1d:94:cd:3b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Validity
Not Before: Jul 29 06:00:48 2026 GMT
Not After : Jul 30 06:00:48 2026 GMT
Subject: CN=23331155cbf55e27cbc5dceb8639c2232c81bed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:4d:a7:e2:65:8b:8c:e3:f7:96:d2:7c:b2:
2b:12:f4:a7:95:f9:b3:2c:fb:92:bb:a1:6a:31:52:
44:9b:10:d4:40:32:8f:c6:3e:02:d3:d3:ff:a2:5c:
3f:0a:00:6d:3b:0e:99:b8:79:75:2a:b9:a8:3e:82:
14:fb:89:b9:aa:84:90:61:ea:04:81:1a:eb:9a:52:
63:04:e4:a6:b7:73:72:b6:52:fb:7f:63:db:ec:f6:
aa:15:07:ad:33:16:a1:a2:2f:fe:41:4d:da:60:bf:
93:90:b8:b0:f3:9e:bf:e2:7d:6f:19:64:c6:a9:ec:
f1:ae:cf:ee:ca:9f:69:e3:aa:22:1e:d2:c4:0c:21:
4b:3a:9b:1c:80:8e:f3:c5:09:ec:fd:5c:5f:41:91:
6e:e4:5a:3f:e6:3b:35:22:0b:98:aa:2c:d6:0f:2b:
20:e9:10:5c:f7:b1:e6:44:99:89:da:6d:23:9e:43:
e5:7f:7c:34:2b:a2:d1:f5:99:14:c4:8b:3d:f2:81:
ef:eb:f8:52:d2:d2:d4:7c:66:b1:c8:5d:27:6f:31:
07:58:87:4b:39:25:d0:28:aa:40:80:90:0e:75:b2:
6b:ed:6d:67:2b:af:f8:9f:4e:1f:8c:9a:20:25:11:
38:03:40:43:f7:f5:c6:b2:f0:88:a7:aa:4e:ca:b0:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:33:11:55:CB:F5:5E:27:CB:C5:DC:EB:86:39:C2:23:2C:81:BE:D2
X509v3 Authority Key Identifier:
keyid:00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d8:c0:e0:8e:fe:13:2d:e4:e9:1d:5a:af:88:3b:b5:8e:89:
13:5f:ed:6e:26:6f:63:3a:62:ad:78:0b:1f:25:d8:ec:22:f0:
fb:a6:53:15:ca:dd:56:33:54:56:07:cd:6d:47:d0:08:e0:53:
a6:8a:12:94:3e:dd:0f:66:14:c2:20:b9:72:04:5e:2a:d5:76:
a1:55:1a:7c:cb:ce:a2:68:3a:38:d5:1a:f9:01:10:2a:4b:76:
c8:f8:6c:25:d5:3f:a7:b0:37:91:5f:6a:7a:b7:15:c0:c6:de:
8f:93:a5:98:f6:2d:57:52:0a:70:14:32:f3:cf:79:b2:9e:6f:
dc:5e:9a:01:4b:ea:08:08:71:4c:6d:c1:02:56:1e:d7:e4:25:
d5:b8:f6:41:74:4a:52:82:87:1b:53:79:b7:2f:4b:6c:9b:2b:
d9:b8:10:18:4a:b5:7d:64:cc:e2:db:83:75:50:2c:72:e8:9f:
d7:d3:f5:dd:13:b9:17:aa:5a:db:cc:05:6c:23:4d:d6:99:e2:
3e:9d:e9:90:a0:d3:49:63:53:94:f4:31:11:77:67:d3:e5:da:
67:0b:e4:e3:39:0b:76:42:49:7a:db:8e:e4:10:bc:2a:bc:b6:
19:c2:24:db:09:85:37:ce:35:3d:32:b8:bb:90:82:36:32:3e:
43:69:4b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:18 2026 by rpki-client