Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier: Fs3I3qbHe293xPtGJhCDx89HVnB5+Kc6iiTUg//KPGk=
Subject key identifier: F2:9C:F9:DE:B6:03:39:17:2D:8B:91:17:1F:E2:8B:F2:57:EC:41:FB
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 019E1EA3A8D7E6F7A3816729BCE898765679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 00:01:42 +0000
Manifest this update: Wed 13 May 2026 00:01:42 +0000
Manifest next update: Thu 14 May 2026 00:01:42 +0000
Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: 7hO/DN38eBnEwApOgysJr6iNgCrjicjIVh1wa4+NOB8=)
2: j51-vhqySrtPDmWytRuJdkGEvC8.roa (hash: hWPfWXr9RPCgElnT55rpdjybwa6yeKeJ6tIi6IBtbEE=)
3: lBelNikhE64GysX2fGFFE4vhjCQ.roa (hash: OyoE+SKk2HTXSgPYtWOQOXKI4eO+3EXXvE2q2Oo53nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:a8:d7:e6:f7:a3:81:67:29:bc:e8:98:76:56:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: May 13 00:01:42 2026 GMT
Not After : May 14 00:01:42 2026 GMT
Subject: CN=f29cf9deb60339172d8b91171fe28bf257ec41fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:b0:5a:cd:4d:0a:1f:93:91:a3:a9:fa:a3:
6e:ee:25:54:cf:7f:24:bf:99:d6:51:9a:ae:15:da:
27:ea:4d:6f:6f:3c:98:e5:d4:6f:51:df:b2:08:d0:
ed:4f:9c:7e:c4:72:c7:35:21:73:97:b0:0c:3c:0a:
cc:8c:a0:7c:7b:14:cc:31:05:75:0b:56:d7:36:0c:
22:42:95:76:e9:3a:c3:2a:79:57:eb:d1:dc:18:80:
95:b5:d6:bf:52:cd:f9:08:05:f1:60:e9:07:0b:7b:
23:c7:0b:4b:31:98:ee:d2:c1:d1:ea:48:91:6e:b6:
84:fe:d7:a1:81:63:5b:8f:96:00:28:83:0c:b6:0c:
2a:f2:c9:e5:af:f7:f5:f3:28:4d:bb:71:a1:27:85:
09:a9:68:74:46:1d:ae:a5:72:07:13:1a:54:cb:a5:
17:3a:fa:48:e2:de:3e:95:23:cd:f6:23:56:ab:03:
d2:db:85:f6:74:9e:df:1c:48:7c:7d:2b:f0:58:6e:
51:37:d7:10:f2:3f:65:7e:52:1b:fa:26:a1:c4:25:
65:1d:25:43:0a:0d:e1:4d:13:53:11:c9:c6:ff:e0:
b0:a3:14:bd:b9:38:e3:31:9a:ef:d4:16:fa:83:fe:
19:93:e3:ec:0a:21:9c:a8:90:c1:b7:3d:d5:e3:51:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9C:F9:DE:B6:03:39:17:2D:8B:91:17:1F:E2:8B:F2:57:EC:41:FB
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a0:36:a3:98:32:ab:c9:70:a3:ad:ba:48:7e:52:d2:eb:6e:
e8:d6:f1:ac:ec:fe:a5:ac:65:0e:99:27:b4:ed:05:32:a2:bf:
d1:e4:b7:79:24:e8:c1:55:7e:0a:48:dc:bc:cb:24:b9:6f:db:
2a:f7:82:64:96:9a:89:97:d8:61:e4:7c:6c:88:a8:27:bc:7c:
37:c1:a0:62:00:da:7c:96:8e:61:e9:2c:cf:eb:54:eb:17:26:
9a:0c:75:74:69:34:78:c9:de:47:8f:58:c1:a9:3d:cf:fa:00:
7a:49:9b:35:64:81:e4:8d:0a:8a:66:ba:21:7a:8c:a3:f7:3d:
39:ca:ce:ec:ca:76:0c:20:2f:ba:6e:8e:b3:d4:02:2c:7e:f8:
16:a6:98:d3:18:67:a6:43:26:af:e1:98:ca:65:dc:0d:9a:3e:
68:4c:c7:2d:79:58:fc:d3:31:5e:0d:d2:37:ae:2f:b6:89:0f:
6f:40:ec:84:dd:8e:f8:10:18:8f:ba:e2:f6:50:1b:25:f0:4b:
0d:e5:e6:2c:6d:58:14:4d:82:ac:57:b8:6e:62:c0:5c:67:32:
b8:24:2c:70:23:37:12:5a:42:56:49:b8:a2:27:f2:25:8e:8a:
3c:92:dc:39:89:40:3a:ed:71:32:60:41:6b:ca:14:6f:3b:04:
c9:c7:13:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eo6jX5vejgWcpvOiYdlZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzlhZTExMTg4MDg4NTQ3ZWIzZTUyMzQ4M2NjYTk4NTU2
YzExNWIwHhcNMjYwNTEzMDAwMTQyWhcNMjYwNTE0MDAwMTQyWjAzMTEwLwYDVQQD
EyhmMjljZjlkZWI2MDMzOTE3MmQ4YjkxMTcxZmUyOGJmMjU3ZWM0MWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7SwWs1NCh+TkaOp+qNu7iVUz38k
v5nWUZquFdon6k1vbzyY5dRvUd+yCNDtT5x+xHLHNSFzl7AMPArMjKB8exTMMQV1
C1bXNgwiQpV26TrDKnlX69HcGICVtda/Us35CAXxYOkHC3sjxwtLMZju0sHR6kiR
braE/tehgWNbj5YAKIMMtgwq8snlr/f18yhNu3GhJ4UJqWh0Rh2upXIHExpUy6UX
OvpI4t4+lSPN9iNWqwPS24X2dJ7fHEh8fSvwWG5RN9cQ8j9lflIb+iahxCVlHSVD
Cg3hTRNTEcnG/+CwoxS9uTjjMZrv1Bb6g/4Zk+PsCiGcqJDBtz3V41FYXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPKc+d62AzkXLYuRFx/ii/JX7EH7MB8GA1UdIwQY
MBaAFAI5rhEYgIhUfrPlI0g8yphVbBFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMt
NjcyODBjOGJiYWI4LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMtNjcyODBjOGJiYWI4
LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqA2o5gy
q8lwo626SH5S0utu6NbxrOz+paxlDpkntO0FMqK/0eS3eSTowVV+CkjcvMskuW/b
KveCZJaaiZfYYeR8bIioJ7x8N8GgYgDafJaOYeksz+tU6xcmmgx1dGk0eMneR49Y
wak9z/oAekmbNWSB5I0Kima6IXqMo/c9OcrO7Mp2DCAvum6Os9QCLH74FqaY0xhn
pkMmr+GYymXcDZo+aEzHLXlY/NMxXg3SN64vtokPb0DshN2O+BAYj7ri9lAbJfBL
DeXmLG1YFE2CrFe4bmLAXGcyuCQscCM3ElpCVkm4oifyJY6KPJLcOYlAOu1xMmBB
a8oUbzsEyccThg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:01:40 2026 by rpki-client