Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier: NV/cM64cRlKDkALSlWUzFvQC1TMQkjr3jywV5v3y4VY=
Subject key identifier: 18:7F:56:18:D5:DD:7B:23:D0:EE:11:78:69:D4:F9:97:28:3A:81:D5
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial: 019D2772BFADE65F72ED2058769E4BAAB545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number: 12A3
Signing time: Thu 26 Mar 2026 00:02:04 +0000
Manifest this update: Thu 26 Mar 2026 00:02:04 +0000
Manifest next update: Fri 27 Mar 2026 00:02:04 +0000
Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: 4/GATbe795x4IuB4pF7CHNA6kJCYO615k4B0A/8e0u0=)
2: Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa (hash: YCd6cvHJBCdabpC8lbHyTL8mL5CdagCiCJRtT8E/huA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:bf:ad:e6:5f:72:ed:20:58:76:9e:4b:aa:b5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
Validity
Not Before: Mar 26 00:02:04 2026 GMT
Not After : Mar 27 00:02:04 2026 GMT
Subject: CN=187f5618d5dd7b23d0ee117869d4f997283a81d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:fa:8c:8a:99:b3:8e:5b:10:36:0c:4c:98:
0f:59:31:cf:bf:65:47:db:c4:4b:6b:0a:af:f3:0e:
b3:a1:65:88:16:30:96:26:c7:b7:ed:6a:65:40:9f:
b2:ca:c3:d8:8f:d1:f3:f3:00:d9:3c:3b:e0:f8:de:
31:52:d3:48:b3:85:25:6d:b9:37:b4:50:39:ae:41:
e9:5b:98:70:86:65:79:88:2d:1b:f2:a7:0a:52:44:
ee:35:b3:6a:57:c4:f6:dc:d0:87:44:00:d8:20:93:
ed:19:e8:75:1e:2e:35:52:81:e4:57:4c:af:f9:5b:
47:ed:84:8e:a6:45:89:a8:68:47:09:96:9d:05:ee:
f0:e3:4a:3a:5e:c9:44:6f:33:a7:f0:33:ba:67:61:
67:37:ad:e8:11:52:37:23:05:e6:3c:c7:dd:f4:80:
26:9f:38:1d:1b:22:71:eb:dd:a9:d6:65:5b:cb:8c:
ab:fa:89:b5:63:bd:e8:95:f3:3a:a5:9c:46:3a:34:
55:fc:26:0c:42:5c:dc:7b:10:7e:6d:f7:81:4a:d6:
dd:89:d1:9a:bb:9c:74:1f:43:7b:22:40:0a:f6:1b:
a2:61:5d:f2:01:d5:8e:27:6f:4a:c2:64:99:bf:80:
ab:4a:db:71:63:20:2e:e2:86:78:20:d5:47:53:4f:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7F:56:18:D5:DD:7B:23:D0:EE:11:78:69:D4:F9:97:28:3A:81:D5
X509v3 Authority Key Identifier:
keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3e:2f:e5:b2:c7:a0:8a:0f:d8:32:8a:11:8d:4d:dd:a7:78:
c9:10:7d:10:dd:92:46:eb:99:c0:d2:2c:cc:b3:5f:fd:42:7a:
c1:d2:d8:22:82:35:75:fd:5d:66:aa:81:c2:10:24:f6:f9:fa:
c9:e0:54:08:4a:da:ba:59:5b:f0:b2:9b:b1:0e:4d:dc:cf:36:
2b:75:3e:68:b9:f7:11:ed:ea:49:25:89:f2:52:3c:3a:b7:9f:
18:09:4b:64:17:29:26:68:f7:32:1c:63:0f:a6:14:b1:6e:56:
cb:04:49:f0:3c:5c:da:00:b9:bf:8b:33:08:cd:5b:d5:13:06:
40:47:8d:3d:2f:22:d5:17:6a:27:b0:80:5d:70:c0:05:86:33:
4f:32:08:54:5f:94:c9:8a:f3:2f:98:76:1e:22:c5:43:a0:dc:
57:51:e8:22:c9:71:58:8f:1f:19:03:78:38:b5:2d:14:6f:d9:
7a:53:b3:3c:ce:5a:e8:07:b7:b9:57:aa:ff:03:b8:d5:f1:bb:
02:f5:6e:d0:b7:d9:c1:8f:98:ef:3d:63:17:b2:83:5e:9d:f1:
6c:2b:c1:16:69:34:7b:46:5f:51:3c:31:d9:8d:9e:9c:e0:f8:
58:ff:5a:83:eb:d7:ce:4d:34:e6:fc:2a:9e:58:f3:9d:90:00:
9d:86:5b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:03 2026 by rpki-client