Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
File: AJpjcoKz0KD8pKVU9pNvffQugWU.mft (raw, json)
Hash identifier: Dwy8N1tvxg3+euCZSR4ao2ToWVtgJWtULYrzaB+e54A=
Subject key identifier: 07:55:96:AF:38:2C:64:AD:74:DC:33:9B:1A:59:CF:C6:34:2B:84:2F
Authority key identifier: 00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
Certificate issuer: /CN=009a637282b3d0a0fca4a554f6936f7df42e8165
Certificate serial: 019D284DB5CAAD90F1A7F974FE8022094D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
Manifest number: 0E61
Signing time: Thu 26 Mar 2026 04:01:14 +0000
Manifest this update: Thu 26 Mar 2026 04:01:14 +0000
Manifest next update: Fri 27 Mar 2026 04:01:14 +0000
Files and hashes: 1: AJpjcoKz0KD8pKVU9pNvffQugWU.crl (hash: vtmCMFgBH/eqQRyC5GYZDzHvFpFl6hr9rOpx5MkA1Gk=)
2: WaQsZZU2YLYjWKTqh0alZowLSLE.roa (hash: kGjQ24mRi/0YdjnsuS2YWs5ad2+Sfg+BCeumhERZLX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:b5:ca:ad:90:f1:a7:f9:74:fe:80:22:09:4d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009a637282b3d0a0fca4a554f6936f7df42e8165
Validity
Not Before: Mar 26 04:01:14 2026 GMT
Not After : Mar 27 04:01:14 2026 GMT
Subject: CN=075596af382c64ad74dc339b1a59cfc6342b842f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:1f:9d:73:7e:01:5e:e4:57:ed:3c:e5:f9:
1b:a4:60:f5:f9:12:22:69:9e:e3:d8:b9:e1:39:dc:
14:98:82:ad:cc:a3:37:e9:c3:f0:19:95:0c:1e:df:
e8:9c:73:52:f9:eb:2f:bc:55:a5:40:36:7d:2e:77:
d8:52:fe:cf:b3:77:ef:94:e7:57:25:1e:8c:37:65:
86:63:33:0d:47:c8:8b:d4:58:9d:1c:da:1c:ab:cf:
75:22:48:9b:24:14:1e:4e:7d:3a:e8:d4:65:0c:16:
b5:db:fc:dd:df:4a:1c:f8:d4:2c:ee:03:b1:57:3a:
68:33:f2:ca:78:77:db:02:fe:51:98:6e:b4:bb:6b:
55:9f:8d:15:cc:0f:b4:91:53:85:cd:ec:a5:9a:94:
9e:8a:2c:32:f6:a9:7e:05:6a:8c:a7:15:5f:af:35:
ff:c6:30:ae:71:69:af:21:17:da:6e:06:e2:f6:e7:
d4:1a:a1:69:03:74:9c:8c:56:54:f9:56:dc:08:e4:
87:ea:e7:d0:7e:7b:8d:85:62:8b:ca:97:99:42:ed:
21:0a:fc:86:ea:a4:1b:d5:de:21:4c:50:32:31:b3:
20:a2:3b:69:d3:ab:91:65:64:0e:ba:2e:24:d6:97:
ff:7e:30:c5:68:c2:c4:34:d5:0a:c0:18:9b:09:c8:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:55:96:AF:38:2C:64:AD:74:DC:33:9B:1A:59:CF:C6:34:2B:84:2F
X509v3 Authority Key Identifier:
keyid:00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:05:90:59:7e:9f:9f:d6:3f:17:1c:55:f1:91:4a:f8:d7:ce:
26:41:21:2b:3b:a8:ae:84:2e:13:c3:2f:ae:c3:3c:5e:e1:29:
40:f9:9d:af:bc:e9:9d:df:ec:3a:3c:32:1b:8b:42:f8:a0:de:
62:c7:b6:1d:c5:f0:30:a2:79:a1:27:2c:d3:c8:b0:9e:45:1b:
5b:12:ca:a1:64:f1:4d:7b:cc:36:ae:e4:0f:49:da:12:11:cc:
00:87:73:cd:df:85:a4:c8:5c:02:f1:d4:55:7e:43:de:da:c2:
1b:01:15:7b:61:04:0f:65:9b:dc:f3:7e:ff:f1:2d:95:59:83:
8a:54:e3:92:1c:85:eb:2b:2d:76:2f:5a:6d:31:96:c8:e4:58:
05:f4:ac:c2:98:f3:2d:0b:7f:2e:75:b6:8d:7f:87:e9:e2:fb:
09:38:5c:ed:72:0c:e6:f3:5f:a8:fc:30:51:c4:79:67:7d:e1:
54:5b:e7:a3:db:b9:f6:ab:02:a6:e9:81:6e:86:53:ca:56:96:
44:78:c2:65:d1:82:58:c3:25:33:8b:04:f4:d6:55:48:c1:f8:
09:c1:82:ec:99:0a:40:0b:bf:7a:23:29:9e:c4:f5:6f:46:a0:
31:77:c9:4d:98:22:ab:79:2b:5c:8d:aa:8a:8e:ff:67:a8:a1:
1b:4f:7d:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTbXKrZDxp/l0/oAiCU05MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOWE2MzcyODJiM2QwYTBmY2E0YTU1NGY2OTM2ZjdkZjQy
ZTgxNjUwHhcNMjYwMzI2MDQwMTE0WhcNMjYwMzI3MDQwMTE0WjAzMTEwLwYDVQQD
EygwNzU1OTZhZjM4MmM2NGFkNzRkYzMzOWIxYTU5Y2ZjNjM0MmI4NDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmMfnXN+AV7kV+085fkbpGD1+RIi
aZ7j2LnhOdwUmIKtzKM36cPwGZUMHt/onHNS+esvvFWlQDZ9LnfYUv7Ps3fvlOdX
JR6MN2WGYzMNR8iL1FidHNocq891IkibJBQeTn066NRlDBa12/zd30oc+NQs7gOx
VzpoM/LKeHfbAv5RmG60u2tVn40VzA+0kVOFzeylmpSeiiwy9ql+BWqMpxVfrzX/
xjCucWmvIRfabgbi9ufUGqFpA3ScjFZU+VbcCOSH6ufQfnuNhWKLypeZQu0hCvyG
6qQb1d4hTFAyMbMgojtp06uRZWQOui4k1pf/fjDFaMLENNUKwBibCcjDHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdVlq84LGStdNwzmxpZz8Y0K4QvMB8GA1UdIwQY
MBaAFACaY3KCs9Cg/KSlVPaTb330LoFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpwamNvS3owS0Q4cEtWVTlwTnZmZlF1Z1dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kZGMzNDQtNjRjNi00NmM4LWEyNWMt
ZDRlZGMwZWIzZTBhLzEvQUpwamNvS3owS0Q4cEtWVTlwTnZmZlF1Z1dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kZGMzNDQtNjRjNi00NmM4LWEyNWMtZDRlZGMwZWIzZTBh
LzEvQUpwamNvS3owS0Q4cEtWVTlwTnZmZlF1Z1dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAWQWX6f
n9Y/FxxV8ZFK+NfOJkEhKzuoroQuE8MvrsM8XuEpQPmdr7zpnd/sOjwyG4tC+KDe
Yse2HcXwMKJ5oScs08iwnkUbWxLKoWTxTXvMNq7kD0naEhHMAIdzzd+FpMhcAvHU
VX5D3trCGwEVe2EED2Wb3PN+//EtlVmDilTjkhyF6ystdi9abTGWyORYBfSswpjz
LQt/LnW2jX+H6eL7CThc7XIM5vNfqPwwUcR5Z33hVFvno9u59qsCpumBboZTylaW
RHjCZdGCWMMlM4sE9NZVSMH4CcGC7JkKQAu/eiMpnsT1b0agMXfJTZgiq3krXI2q
io7/Z6ihG0990w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:36 2026 by rpki-client