Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
File: AjmkC--TBDjVPNB_B_-RU-L7m-g.mft (raw, json)
Hash identifier: tuoQ8wl9nLy++nWyZ5Kc1GfnbSOUHJzj/CzeVEdkhkk=
Subject key identifier: 03:85:3D:53:07:CF:31:89:3C:1A:49:12:B0:CB:D7:A1:0F:1F:F8:32
Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
Certificate issuer: /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Certificate serial: 019D2816CD59C6FA4DF5FDFB34FF178BD113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 03:01:16 +0000
Manifest this update: Thu 26 Mar 2026 03:01:16 +0000
Manifest next update: Fri 27 Mar 2026 03:01:16 +0000
Files and hashes: 1: AjmkC--TBDjVPNB_B_-RU-L7m-g.crl (hash: n0NDWzjziM5WUTbBEs16V9uLzurEm4Fg/26vknZjNho=)
2: ffQqOYtzV0vtgYfe4tRpGeFzilA.roa (hash: VIsXjcMNaGxYTFvRgl1kJIXozlkVcFZu20HsFS54hDw=)
3: oQoGly6H1aU6gPqZyv63fmxfuls.roa (hash: HFBXjpuNtU3gtEXtIbxcM+R57+FtVsV/NiORC3XZhIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:cd:59:c6:fa:4d:f5:fd:fb:34:ff:17:8b:d1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Validity
Not Before: Mar 26 03:01:16 2026 GMT
Not After : Mar 27 03:01:16 2026 GMT
Subject: CN=03853d5307cf31893c1a4912b0cbd7a10f1ff832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:55:75:33:42:4d:0b:73:33:50:67:0d:3e:
15:18:d6:23:66:76:29:15:bf:ed:bc:83:f6:dd:73:
87:7c:41:13:bb:d5:6b:12:bb:41:29:bd:3c:80:81:
1c:e5:9e:2f:6e:9f:8b:14:7c:4e:46:7a:b2:a6:85:
5c:ca:46:61:ce:93:79:80:ec:3a:eb:82:30:7a:5a:
4c:85:65:b8:9f:24:18:6a:4b:5f:8c:1c:d9:23:5c:
51:90:cb:0b:e7:01:76:19:7a:39:7e:87:5c:c4:d3:
3d:f8:cc:2a:50:5f:0b:39:a5:de:c4:d9:3f:ac:36:
7e:59:b3:d5:ee:9b:03:a0:fc:06:03:e4:55:54:24:
68:50:a4:c9:f8:fc:75:98:fa:7e:9e:50:70:b7:b0:
cb:48:0c:4b:f2:8a:c3:d5:49:8d:07:d9:e6:08:6a:
33:3f:08:33:f9:e8:36:d7:75:29:b6:b3:18:c1:83:
25:d6:76:f1:13:e1:e7:b8:6e:1b:c0:25:f5:ef:b7:
93:01:a4:29:10:17:dd:22:e4:c5:74:ea:ec:72:9f:
28:4e:0f:cc:e6:a5:1f:6a:d7:80:f0:e5:bb:f5:72:
45:1d:4b:52:d6:a1:a1:e0:1c:b3:1c:f5:13:65:e6:
77:6c:c3:29:a3:f2:cd:7b:25:3c:09:f4:70:1f:98:
ea:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:85:3D:53:07:CF:31:89:3C:1A:49:12:B0:CB:D7:A1:0F:1F:F8:32
X509v3 Authority Key Identifier:
keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c5:83:33:4a:36:43:55:19:1a:15:28:bd:ea:06:5f:f6:f1:
6f:93:a6:0e:7f:b7:0c:4f:cb:56:bc:8f:6b:3d:b5:ea:17:42:
fb:e7:1a:9a:14:a0:00:59:21:35:bb:29:61:e2:51:f0:c3:44:
5e:62:ba:e1:7d:c4:05:2e:9b:f7:9b:72:67:e5:f9:0c:e3:c6:
6a:5d:6d:10:c0:a6:10:12:a9:35:13:a6:88:f3:b5:ee:f4:b4:
9c:cb:e2:5d:99:b5:32:a4:a9:44:34:ff:f4:b9:53:f3:66:6f:
9a:05:7b:08:18:25:a3:89:57:4a:7b:00:d4:84:36:b3:ef:6c:
cd:30:30:8c:91:14:72:1e:2f:dd:97:b9:f4:a8:3a:ad:6a:36:
1f:4d:22:11:5a:54:e8:e4:75:2c:20:3d:21:84:ad:84:d7:c4:
3a:5c:38:e8:61:42:39:50:6f:73:10:91:55:fe:0b:53:c7:c9:
c7:af:bf:b5:4f:28:d3:70:38:e3:de:d6:9f:8c:43:e1:5d:09:
80:3a:5d:a0:56:b1:c4:b1:b3:1d:4c:d8:28:e6:40:11:3b:4f:
0b:71:92:cf:e5:a5:38:68:83:04:c8:d2:b9:45:5a:7a:00:79:
8e:aa:b5:3b:57:0a:6d:09:ea:16:15:ce:ad:6d:c2:ce:c2:e0:
27:a0:19:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:51 2026 by rpki-client