Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
File: AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json)
Hash identifier: Y1/JZuyafMOtKY380sLyapoicDeEAxAovtg4yUPVNkU=
Subject key identifier: EE:A4:3B:7C:DA:04:0C:0E:4C:80:9F:4B:DE:68:CB:B4:07:F5:94:79
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial: 01A1DD94B772111E13356A104AE0EE26BC92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
Manifest number: 039D
Signing time: Sun 15 Nov 2026 05:01:13 +0000
Manifest this update: Sun 15 Nov 2026 05:01:13 +0000
Manifest next update: Mon 16 Nov 2026 05:01:13 +0000
Files and hashes: 1: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: YZCiorLER3j5e/oT8wyBjnHmRjNvvtkcU9z8Q65xVzE=)
2: Sdyoi-DJheUx969WiGu9zZYw2R4.roa (hash: zNk/KkOF+ii1aUgCLSl3f+9W1j7Kt8UQ+x8h5WRuSFQ=)
3: WryhvKq5rLqO2JKQAO-3gq870CU.asa (hash: izgudbGBDY+4sfaQj2TUwzF5JwwjVq3NCndX7NK1FnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:b7:72:11:1e:13:35:6a:10:4a:e0:ee:26:bc:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
Validity
Not Before: Nov 15 05:01:13 2026 GMT
Not After : Nov 16 05:01:13 2026 GMT
Subject: CN=eea43b7cda040c0e4c809f4bde68cbb407f59479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:97:ec:c9:c6:8c:e8:a6:af:8d:2f:b6:68:
d6:6f:c9:54:61:4e:67:a1:b4:db:17:8b:87:7d:f3:
95:91:4a:75:d6:a3:6f:59:c7:f3:1e:d8:cf:39:22:
72:f1:6b:51:36:b1:33:23:93:bc:bd:46:fd:c3:97:
85:2a:af:03:7a:43:72:c8:bb:e4:a6:f1:f4:b4:d7:
f3:2c:8d:73:e5:85:3c:bc:36:a2:eb:91:e6:70:a8:
38:65:1b:5d:7e:1a:d3:ee:72:f4:f1:1c:a8:40:f5:
00:15:f9:01:7d:91:05:c3:c4:f5:dc:f5:07:9b:2f:
dc:10:ed:db:40:36:5a:ed:92:18:37:1c:3e:d7:fd:
75:7d:c8:b2:35:fa:f2:13:64:b1:30:85:e5:c8:04:
20:07:2d:4c:1f:72:a3:70:56:47:2d:5b:73:17:32:
db:b8:29:09:f3:9f:35:96:f5:4c:45:68:f4:aa:22:
3d:c3:7d:32:39:ff:72:0b:d4:38:69:65:04:e2:4b:
fb:f4:aa:fb:0c:20:ed:06:16:78:8e:db:15:b1:86:
6c:a0:32:55:17:e7:30:4b:bb:75:e5:d6:17:75:44:
3c:3d:75:3d:dc:80:0d:7d:65:dc:e3:88:33:78:fb:
7f:e5:2d:b5:f3:22:7a:ea:fb:bd:06:a6:34:0b:a6:
c6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A4:3B:7C:DA:04:0C:0E:4C:80:9F:4B:DE:68:CB:B4:07:F5:94:79
X509v3 Authority Key Identifier:
keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0b:6c:33:39:0f:91:22:9c:6f:bc:49:c0:18:26:0f:00:07:
6b:90:85:01:3a:6d:33:30:74:6f:4d:b0:e1:ce:01:3a:bb:1d:
c8:d3:ea:be:3b:28:85:ae:30:97:d7:58:df:e1:04:4c:61:b9:
ae:96:e0:74:76:f9:a3:05:e3:4d:65:b0:16:34:b9:09:2f:69:
4c:60:7e:5b:53:ed:85:59:e0:5a:eb:5b:a1:04:fc:99:82:bd:
c6:ab:84:2c:73:29:ca:9d:de:cb:ba:4e:6d:b4:3a:14:34:dd:
e2:09:74:9b:01:75:e1:ff:a4:54:6f:f9:dd:03:fb:b0:06:6a:
79:a3:f1:87:41:84:ad:ff:14:a1:2e:0c:53:73:87:b5:31:4f:
91:6e:04:7a:25:fd:01:35:9d:75:55:88:a2:76:04:bc:3d:39:
a1:5b:f9:65:aa:11:db:87:5a:c6:fa:23:2b:7c:83:e0:fc:55:
9e:0d:c4:80:7f:6f:fa:72:b6:34:71:0f:eb:ae:c6:00:de:81:
a1:65:69:6e:d0:29:f3:3f:3a:ca:a9:22:78:94:d1:40:52:ce:
d3:a1:c6:b5:ac:33:49:1a:4f:a8:f7:57:a3:31:94:ab:5c:d9:
38:fd:68:b1:75:20:f6:91:2d:1d:5b:af:c4:c8:c8:be:1c:a1:
f0:e8:eb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:31:47 2026 by rpki-client