Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
File: AjmkC--TBDjVPNB_B_-RU-L7m-g.mft (raw, json)
Hash identifier: 0YNb2SkHQzUzegR+uyjgQgkjmt4USftBMLXZVPGE5Ms=
Subject key identifier: 48:E8:11:94:06:D6:1D:D1:A2:2D:2A:2C:6B:B4:B5:87:65:09:FF:AC
Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
Certificate issuer: /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Certificate serial: 01A0D2A64A20FD147E249AAB9F09DCB587FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 09:01:48 +0000
Manifest this update: Thu 24 Sep 2026 09:01:48 +0000
Manifest next update: Fri 25 Sep 2026 09:01:48 +0000
Files and hashes: 1: AjmkC--TBDjVPNB_B_-RU-L7m-g.crl (hash: fkXahZoTNF9Yh1UR2YNhTz34Z+etmXNJvo2PPl7MF3Q=)
2: ffQqOYtzV0vtgYfe4tRpGeFzilA.roa (hash: VIsXjcMNaGxYTFvRgl1kJIXozlkVcFZu20HsFS54hDw=)
3: oQoGly6H1aU6gPqZyv63fmxfuls.roa (hash: HFBXjpuNtU3gtEXtIbxcM+R57+FtVsV/NiORC3XZhIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:4a:20:fd:14:7e:24:9a:ab:9f:09:dc:b5:87:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Validity
Not Before: Sep 24 09:01:48 2026 GMT
Not After : Sep 25 09:01:48 2026 GMT
Subject: CN=48e8119406d61dd1a22d2a2c6bb4b5876509ffac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:df:a9:20:df:7e:1c:40:a1:1e:be:8d:6a:9b:
f2:c6:25:ba:86:ce:58:b3:64:be:3d:e7:67:02:9c:
bc:97:a6:cd:31:65:6e:2e:96:dc:5d:8b:09:2f:1a:
95:21:ed:34:22:72:68:63:20:24:12:73:4e:60:70:
9a:fe:b7:93:66:fb:8e:6d:07:05:4b:5e:0c:96:a3:
d7:b5:3c:2b:46:4b:79:92:3b:bc:44:d5:d1:eb:4b:
72:34:ec:03:c3:3a:6d:5e:f6:4b:1e:95:55:4d:36:
d6:bc:8e:c9:17:11:50:f2:ab:2a:86:a0:2d:fd:42:
7f:98:ed:c3:16:37:e1:bb:58:b0:de:5b:df:22:3a:
01:f2:5b:37:49:6e:3e:85:5d:79:b3:f9:b4:a4:5d:
09:e0:f6:91:89:12:88:6d:67:ea:7e:f1:05:06:55:
88:8c:0f:38:b7:4a:54:1c:20:e5:e5:a8:c9:96:ce:
e7:ee:02:21:19:dd:ef:6a:45:d5:e9:17:41:b8:09:
85:7c:1d:98:40:6f:ae:9d:7b:5b:4b:21:cd:80:b6:
9b:99:0f:d9:30:13:6d:8e:82:74:6e:2e:f5:e7:06:
db:9b:10:58:f9:67:a9:55:ea:f7:d3:03:2e:fd:46:
07:0c:c1:aa:e7:59:23:1d:2c:85:9e:7a:78:f1:a7:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E8:11:94:06:D6:1D:D1:A2:2D:2A:2C:6B:B4:B5:87:65:09:FF:AC
X509v3 Authority Key Identifier:
keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:33:62:8f:3f:e2:40:f6:bc:e8:c2:c2:51:e9:f1:ff:c3:dd:
5f:8d:d8:e8:b2:ae:ea:47:62:a6:a6:43:84:f0:f5:73:f1:d0:
58:3e:f6:94:10:d6:35:09:15:4b:90:7a:e7:78:ac:ca:66:3a:
be:62:e7:4d:ea:c8:8f:f5:7e:cd:33:86:cc:d0:53:b2:34:5e:
1c:fb:cb:9e:cf:f6:f5:49:99:8c:11:38:d3:9f:47:9a:f8:ea:
94:ea:d9:41:ee:51:95:be:bc:8e:84:9f:c8:39:09:6a:27:08:
a6:98:a9:9a:fb:ce:ab:a9:7a:54:ec:ff:7c:8c:36:3c:cf:ce:
1a:18:1a:99:2e:e7:ac:c1:59:8d:ab:80:b6:38:89:33:ce:ba:
a5:d8:3c:da:01:84:f3:32:db:c4:63:7b:71:23:3c:b1:e6:7c:
c2:1c:9d:92:db:df:7a:0e:75:39:e8:dd:ff:1c:2f:a7:5b:b7:
5a:de:61:1e:bc:fa:e1:b2:73:42:b8:cb:3d:f8:88:0b:a4:04:
24:58:38:3c:5e:92:81:6f:95:0c:6a:6d:db:6c:95:d6:e9:05:
2e:89:1a:54:41:2e:90:07:70:62:46:7b:77:14:e2:b1:36:b1:
23:dd:40:db:c5:5c:b3:80:72:5e:fa:37:aa:9e:3c:27:41:46:
69:b2:c1:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSpkog/RR+JJqrnwnctYf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzlhNDBiZWY5MzA0MzhkNTNjZDA3ZjA3ZmY5MTUzZTJm
YjliZTgwHhcNMjYwOTI0MDkwMTQ4WhcNMjYwOTI1MDkwMTQ4WjAzMTEwLwYDVQQD
Eyg0OGU4MTE5NDA2ZDYxZGQxYTIyZDJhMmM2YmI0YjU4NzY1MDlmZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9+pIN9+HEChHr6NapvyxiW6hs5Y
s2S+PednApy8l6bNMWVuLpbcXYsJLxqVIe00InJoYyAkEnNOYHCa/reTZvuObQcF
S14MlqPXtTwrRkt5kju8RNXR60tyNOwDwzptXvZLHpVVTTbWvI7JFxFQ8qsqhqAt
/UJ/mO3DFjfhu1iw3lvfIjoB8ls3SW4+hV15s/m0pF0J4PaRiRKIbWfqfvEFBlWI
jA84t0pUHCDl5ajJls7n7gIhGd3vakXV6RdBuAmFfB2YQG+unXtbSyHNgLabmQ/Z
MBNtjoJ0bi715wbbmxBY+WepVer30wMu/UYHDMGq51kjHSyFnnp48aekMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjoEZQG1h3Roi0qLGu0tYdlCf+sMB8GA1UdIwQY
MBaAFAI5pAvvkwQ41TzQfwf/kVPi+5voMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpta0MtLVRCRGpWUE5CX0JfLVJVLUw3bS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZmNlY2QtMWI2Yy00YWU5LTlkMzYt
NmQzODEyYWE1ZWI1LzEvQWpta0MtLVRCRGpWUE5CX0JfLVJVLUw3bS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yZmNlY2QtMWI2Yy00YWU5LTlkMzYtNmQzODEyYWE1ZWI1
LzEvQWpta0MtLVRCRGpWUE5CX0JfLVJVLUw3bS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzNijz/i
QPa86MLCUenx/8PdX43Y6LKu6kdipqZDhPD1c/HQWD72lBDWNQkVS5B653isymY6
vmLnTerIj/V+zTOGzNBTsjReHPvLns/29UmZjBE4059HmvjqlOrZQe5Rlb68joSf
yDkJaicIppipmvvOq6l6VOz/fIw2PM/OGhgamS7nrMFZjauAtjiJM866pdg82gGE
8zLbxGN7cSM8seZ8whydktvfeg51Oejd/xwvp1u3Wt5hHrz64bJzQrjLPfiIC6QE
JFg4PF6SgW+VDGpt22yV1ukFLokaVEEukAdwYkZ7dxTisTaxI91A28Vcs4ByXvo3
qp48J0FGabLBgw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:28:17 2026 by rpki-client