Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
File: AJpjcoKz0KD8pKVU9pNvffQugWU.mft (raw, json)
Hash identifier: mLBj6yx8G6YCA3mnif7e30TJyiSfcA8S3df2ftoF/Io=
Subject key identifier: 1E:BC:02:66:57:04:64:A6:26:A2:1E:84:E3:F4:24:41:18:A6:DB:3F
Authority key identifier: 00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
Certificate issuer: /CN=009a637282b3d0a0fca4a554f6936f7df42e8165
Certificate serial: 019E1D905FFF78DB86D9BA76B5A4DA17ADB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
Manifest number: 0EE0
Signing time: Tue 12 May 2026 19:01:01 +0000
Manifest this update: Tue 12 May 2026 19:01:01 +0000
Manifest next update: Wed 13 May 2026 19:01:01 +0000
Files and hashes: 1: AJpjcoKz0KD8pKVU9pNvffQugWU.crl (hash: H1Iet99xAaA3o4gwck66Ve/iV/EQ6GomPExGFSn7NE0=)
2: WaQsZZU2YLYjWKTqh0alZowLSLE.roa (hash: kGjQ24mRi/0YdjnsuS2YWs5ad2+Sfg+BCeumhERZLX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:5f:ff:78:db:86:d9:ba:76:b5:a4:da:17:ad:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009a637282b3d0a0fca4a554f6936f7df42e8165
Validity
Not Before: May 12 19:01:01 2026 GMT
Not After : May 13 19:01:01 2026 GMT
Subject: CN=1ebc0266570464a626a21e84e3f4244118a6db3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:61:ea:f5:09:96:e8:b6:7d:be:ec:9a:f5:a2:
3f:20:66:1b:12:e9:e6:31:4f:7e:f0:78:61:44:0e:
76:bb:70:51:58:a1:de:e6:16:6c:f4:64:bd:62:dc:
cc:4e:5b:16:75:9b:02:dd:e6:91:e8:4d:72:0f:7d:
aa:74:89:da:e5:ff:fe:c3:2e:68:fe:c8:5d:71:a5:
9e:0c:f0:12:bd:ec:31:2b:05:aa:fb:05:81:55:a8:
7f:6b:56:ac:e8:1d:d6:44:90:de:ec:af:5e:98:3e:
7c:a2:93:0e:88:5a:2e:b0:a1:44:55:0c:d4:df:1d:
9e:fd:17:57:71:70:57:dc:72:b1:31:0b:c3:34:e0:
37:22:64:5e:3b:dd:44:94:85:5c:d6:bb:63:cc:48:
57:e4:2f:44:02:ed:dc:26:82:cc:34:31:fe:98:0b:
a2:27:46:22:cb:0e:b8:ed:c0:e1:61:e2:30:df:44:
27:21:24:35:4a:09:09:4b:81:65:73:0a:3b:db:ae:
9a:1c:c6:b5:75:85:ef:68:ff:19:87:1e:ee:74:65:
5a:05:be:f3:09:7f:ca:40:06:3e:15:a1:e7:03:63:
57:bd:84:a8:9b:9d:ef:70:13:8a:9a:61:4a:da:62:
9f:2a:4d:09:31:5c:c6:35:b6:33:bd:4c:e1:0f:60:
3a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BC:02:66:57:04:64:A6:26:A2:1E:84:E3:F4:24:41:18:A6:DB:3F
X509v3 Authority Key Identifier:
keyid:00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4c:01:36:52:98:74:2f:b3:42:86:1f:f5:50:94:c5:7b:38:
95:a5:2e:e2:69:81:9b:18:78:79:83:41:f4:22:2a:78:cc:53:
07:23:4d:c2:85:bf:3a:84:8b:75:b0:04:db:23:e0:7a:66:01:
a5:1c:49:67:8b:d0:de:4a:76:7a:b4:b5:f6:2d:bd:68:20:d4:
03:72:51:ae:32:19:9a:b2:e3:9f:92:21:d8:2b:da:a0:2a:2d:
79:25:fb:1d:bb:f2:41:cd:f4:35:d7:5c:77:a4:9a:6b:68:42:
a5:70:4b:79:80:ab:f6:9e:4a:ca:95:79:65:eb:2c:5f:b7:a1:
6d:1a:63:eb:80:3e:74:85:0d:d0:b1:35:cf:5b:d6:da:ad:3e:
19:5f:71:c1:d2:f8:94:d2:e6:90:12:d3:10:78:65:0c:d4:f8:
68:0a:ef:7e:b9:19:6b:19:b0:7f:65:b3:69:43:4b:ba:b3:91:
c8:a3:de:f4:f8:de:d4:04:46:b6:4d:a7:df:5f:03:87:13:f7:
9d:5f:0d:7b:65:9a:74:52:b9:36:39:ef:9a:45:c9:34:9b:99:
72:10:65:95:25:34:f9:14:e5:4a:9a:0d:62:db:1b:80:c9:44:
ad:15:a6:e3:76:aa:ed:10:e7:ef:64:b3:df:2c:27:cb:cb:5b:
6c:5f:5d:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dkF//eNuG2bp2taTaF620MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOWE2MzcyODJiM2QwYTBmY2E0YTU1NGY2OTM2ZjdkZjQy
ZTgxNjUwHhcNMjYwNTEyMTkwMTAxWhcNMjYwNTEzMTkwMTAxWjAzMTEwLwYDVQQD
EygxZWJjMDI2NjU3MDQ2NGE2MjZhMjFlODRlM2Y0MjQ0MTE4YTZkYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomHq9QmW6LZ9vuya9aI/IGYbEunm
MU9+8HhhRA52u3BRWKHe5hZs9GS9YtzMTlsWdZsC3eaR6E1yD32qdIna5f/+wy5o
/shdcaWeDPASvewxKwWq+wWBVah/a1as6B3WRJDe7K9emD58opMOiFousKFEVQzU
3x2e/RdXcXBX3HKxMQvDNOA3ImReO91ElIVc1rtjzEhX5C9EAu3cJoLMNDH+mAui
J0Yiyw647cDhYeIw30QnISQ1SgkJS4Flcwo7266aHMa1dYXvaP8Zhx7udGVaBb7z
CX/KQAY+FaHnA2NXvYSom53vcBOKmmFK2mKfKk0JMVzGNbYzvUzhD2A6pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB68AmZXBGSmJqIehOP0JEEYpts/MB8GA1UdIwQY
MBaAFACaY3KCs9Cg/KSlVPaTb330LoFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpwamNvS3owS0Q4cEtWVTlwTnZmZlF1Z1dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kZGMzNDQtNjRjNi00NmM4LWEyNWMt
ZDRlZGMwZWIzZTBhLzEvQUpwamNvS3owS0Q4cEtWVTlwTnZmZlF1Z1dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kZGMzNDQtNjRjNi00NmM4LWEyNWMtZDRlZGMwZWIzZTBh
LzEvQUpwamNvS3owS0Q4cEtWVTlwTnZmZlF1Z1dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkwBNlKY
dC+zQoYf9VCUxXs4laUu4mmBmxh4eYNB9CIqeMxTByNNwoW/OoSLdbAE2yPgemYB
pRxJZ4vQ3kp2erS19i29aCDUA3JRrjIZmrLjn5Ih2CvaoCoteSX7HbvyQc30Nddc
d6Saa2hCpXBLeYCr9p5KypV5ZessX7ehbRpj64A+dIUN0LE1z1vW2q0+GV9xwdL4
lNLmkBLTEHhlDNT4aArvfrkZaxmwf2WzaUNLurORyKPe9Pje1ARGtk2n318DhxP3
nV8Ne2WadFK5NjnvmkXJNJuZchBllSU0+RTlSpoNYtsbgMlErRWm43aq7RDn72Sz
3ywny8tbbF9djA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:49:49 2026 by rpki-client