Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
File: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft (raw, json)
Hash identifier: Vm2KrwlBqh0m/5er0RkuK9NShcks5Vo69hA4/cYBhgI=
Subject key identifier: E1:4A:84:D6:2A:CA:0C:9F:72:64:8E:47:89:48:89:87:61:EE:F9:E7
Authority key identifier: 68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
Certificate issuer: /CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Certificate serial: 019D2695BA137DA87340B2211CB48F9FA3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 20:00:39 +0000
Manifest this update: Wed 25 Mar 2026 20:00:39 +0000
Manifest next update: Thu 26 Mar 2026 20:00:39 +0000
Files and hashes: 1: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl (hash: B/MJl0aN/wOctPSpJO/FQFLcNML+66Sq4DkSoknDkME=)
2: v-TmHwjxUWpO-4ZUjxFr5yXA82g.roa (hash: liANJtLZlExcLcM+/+8RAHwNizw5D6GQaPEdxWVRWPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:ba:13:7d:a8:73:40:b2:21:1c:b4:8f:9f:a3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Validity
Not Before: Mar 25 20:00:39 2026 GMT
Not After : Mar 26 20:00:39 2026 GMT
Subject: CN=e14a84d62aca0c9f72648e478948898761eef9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:04:3b:dd:08:b3:28:f4:35:46:c8:15:27:
7a:31:52:bb:17:4c:75:0b:e2:6b:a4:e3:10:2a:ef:
cf:60:64:15:c0:43:4f:a4:83:6a:2b:e1:9a:af:6a:
66:c4:75:e0:07:fb:4d:a1:87:e3:cd:f5:b9:61:b7:
0f:7c:cc:93:1d:ce:57:a9:79:17:52:7a:93:81:a5:
af:fe:82:ea:81:3a:21:6a:70:f2:56:47:61:b0:1b:
39:e0:77:3a:f5:06:66:69:f4:b1:07:26:2d:af:0e:
c9:b9:c4:f0:7b:5f:1c:76:a2:e0:d6:ed:a7:60:db:
e8:5c:26:88:95:6a:ba:ca:4f:e4:0b:64:b9:60:dc:
42:7c:dd:b5:2d:52:bb:ad:93:43:e5:8b:33:e6:38:
bd:73:0b:9f:79:9b:78:94:10:b3:0b:18:99:6a:9a:
77:56:93:98:a9:a0:ec:dd:ac:cc:60:88:5b:e6:5f:
2e:89:d3:cf:9b:da:35:45:87:56:c9:1a:62:41:8f:
78:de:17:cd:d1:02:93:4f:bd:3c:2b:4a:f1:40:e0:
82:8d:6e:d7:39:ec:bc:74:a2:27:64:91:40:6c:ac:
ec:2d:13:f0:3d:b4:1d:e7:43:bb:8e:f1:5c:82:af:
2a:f1:ec:df:c2:85:d9:41:0e:69:49:ed:a7:2a:fc:
1a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4A:84:D6:2A:CA:0C:9F:72:64:8E:47:89:48:89:87:61:EE:F9:E7
X509v3 Authority Key Identifier:
keyid:68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:47:cd:ce:55:36:48:86:6a:a8:22:a4:2b:ee:37:38:83:06:
c6:66:c5:33:56:f0:ed:0d:8f:fa:af:33:75:db:f0:d0:cf:99:
6b:62:bf:8b:90:6d:8a:55:2a:2b:b6:35:4f:57:f1:be:a4:dd:
c3:30:9a:04:6a:fb:4f:49:bc:21:41:2f:5c:96:be:83:47:f4:
20:09:ac:90:ea:1f:8d:d6:6d:95:67:80:f6:bc:2d:f1:08:59:
38:25:16:86:6b:7e:00:47:85:54:11:41:de:fd:dd:27:91:ab:
ad:ac:6e:5f:53:0d:e5:2e:fb:5a:94:59:31:c7:fc:3a:9b:ef:
d4:23:57:39:b3:d1:6c:6e:54:73:46:8a:f1:b8:b1:62:d9:0e:
ad:4b:7d:26:40:04:76:20:e2:52:8e:3d:11:1f:bc:45:e1:16:
9e:ff:b7:0c:31:d9:10:02:9f:8a:f7:47:71:52:b2:6c:d6:aa:
3b:f1:d1:c6:d1:66:c7:40:9f:db:08:f3:91:c1:65:e2:c8:fd:
7b:54:c4:f9:a3:2b:f3:bb:09:f9:6f:6b:14:04:e9:36:94:6e:
d1:9a:3e:fb:da:57:e3:12:24:af:9f:b0:4d:3b:c8:66:5f:8c:
76:6f:fa:d5:8f:34:21:e7:e7:e0:f9:34:c9:01:a8:50:6d:6b:
0b:89:2a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:45 2026 by rpki-client