Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
File: AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft (raw, json)
Hash identifier: FJREiJnyXEVB7tIYGymqqjLZ7BK5AZIaSkv+TeQd5GI=
Subject key identifier: 74:5C:11:7C:66:AC:66:36:B8:48:00:7B:B8:B6:10:84:22:86:5F:46
Authority key identifier: 00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E
Certificate issuer: /CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
Certificate serial: 01A0CDB685A2AD480F6F8BC144C9FBF6B940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
Manifest number: 1A66
Signing time: Wed 23 Sep 2026 10:01:26 +0000
Manifest this update: Wed 23 Sep 2026 10:01:26 +0000
Manifest next update: Thu 24 Sep 2026 10:01:26 +0000
Files and hashes: 1: AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl (hash: 5XFW5FOU0EBfEFoGjvu7GO3y9H1VAZO/gILkHtEftrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:85:a2:ad:48:0f:6f:8b:c1:44:c9:fb:f6:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
Validity
Not Before: Sep 23 10:01:26 2026 GMT
Not After : Sep 24 10:01:26 2026 GMT
Subject: CN=745c117c66ac6636b848007bb8b6108422865f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:73:54:ce:9c:db:b9:7c:14:0c:c1:d2:36:6b:
a7:11:c5:5b:ec:3e:81:65:25:5a:cc:ea:8b:d3:46:
ee:4c:3b:2b:26:1b:c4:75:a6:f3:d2:9a:58:b8:90:
62:82:a9:c6:4e:b9:9e:41:45:04:23:38:22:4e:1c:
c4:30:ba:7f:82:ad:e5:c0:1b:27:54:8a:c8:55:5d:
28:12:72:99:a3:48:9b:b5:0d:76:5c:75:8c:fe:a1:
bc:9b:5b:85:4d:a8:27:f0:88:99:a7:29:5a:89:74:
3b:31:6d:00:d0:0c:3e:0a:58:13:30:1e:07:cc:44:
7f:82:49:7f:c1:d9:10:3c:ba:f3:e7:14:fe:2d:5b:
ec:76:24:40:5c:f4:dc:5d:c7:76:f1:9f:db:e3:b3:
44:85:b9:89:68:df:0d:c9:59:1d:25:a5:56:b4:ce:
84:20:c3:2b:a2:c6:93:0a:50:d5:f1:9f:db:86:ae:
76:ce:2a:87:74:c2:07:52:a5:96:e5:ad:50:95:77:
57:c9:49:88:c8:fc:1f:90:f6:4f:73:2a:60:29:0f:
97:a5:da:0f:ab:57:26:00:25:91:02:2d:3c:95:01:
79:73:6f:eb:5e:bb:b9:1a:67:fa:23:57:8b:92:38:
6c:2a:22:be:d4:6c:6f:c2:1f:5e:a3:be:e6:84:72:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5C:11:7C:66:AC:66:36:B8:48:00:7B:B8:B6:10:84:22:86:5F:46
X509v3 Authority Key Identifier:
keyid:00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d1:a8:7b:54:7f:de:4b:fd:04:51:c1:2d:08:3c:28:8d:32:
72:ca:69:f2:f9:49:36:48:a3:46:95:53:6e:ec:3b:39:9e:16:
89:6c:41:66:c4:e2:b4:f7:86:d7:9b:4c:01:f6:8b:93:11:b4:
da:8e:16:12:cb:9f:ca:67:74:82:ae:f9:02:ec:62:ae:32:19:
e6:f0:a9:a6:0c:54:6c:34:66:1e:dd:ee:3c:f5:8d:5b:3e:42:
7b:78:58:47:91:13:31:84:e4:73:ec:04:61:dd:f9:6f:d3:d2:
c8:aa:3c:cf:6d:db:9f:4a:fb:c8:24:e3:ba:9f:45:d6:bd:d9:
93:8b:83:ec:a9:34:69:e1:41:75:34:2e:16:d5:ec:14:14:60:
ee:1a:d7:bf:4f:f7:6c:fe:e0:c9:2f:8f:e4:c9:9b:2a:d0:20:
4c:7c:3d:a2:d9:a7:58:e5:44:28:a8:16:79:97:f8:f8:21:9e:
92:43:72:0b:2f:ec:be:b9:68:a2:cd:ee:32:30:c8:95:86:b6:
f7:f5:ab:d9:be:4a:9d:64:37:ff:a7:20:de:64:0b:a1:3c:95:
5d:eb:9f:f7:be:07:ad:d5:4b:d4:9a:8e:fb:82:56:e5:47:d2:
a0:e3:b8:5b:62:ee:c4:9f:70:34:dc:1b:20:52:6f:45:8e:43:
f6:fa:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:02:35 2026 by rpki-client