Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
File: AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json)
Hash identifier: uPr1SdmEnbY2dcGaRySMT2H1pOvpXOzvXNMae7YxMwo=
Subject key identifier: EE:18:7A:76:30:6F:55:C1:00:53:85:EC:F8:C6:F6:E3:77:A2:31:5F
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial: 01A0D382DDA1D06221A8FA521EB611186E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
Manifest number: 0310
Signing time: Thu 24 Sep 2026 13:02:43 +0000
Manifest this update: Thu 24 Sep 2026 13:02:43 +0000
Manifest next update: Fri 25 Sep 2026 13:02:43 +0000
Files and hashes: 1: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: FqnMtvYKUC38yERvkMy28cptVKW+XkIYmMpiOrA6bWs=)
2: EorLfiIdTLqramNOmKdv9GCOB38.asa (hash: DJtU7WzPtfml3v/eu+a/l4hvtaitE70F0oGlmKAGZGY=)
3: Sdyoi-DJheUx969WiGu9zZYw2R4.roa (hash: zNk/KkOF+ii1aUgCLSl3f+9W1j7Kt8UQ+x8h5WRuSFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:82:dd:a1:d0:62:21:a8:fa:52:1e:b6:11:18:6e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
Validity
Not Before: Sep 24 13:02:43 2026 GMT
Not After : Sep 25 13:02:43 2026 GMT
Subject: CN=ee187a76306f55c1005385ecf8c6f6e377a2315f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:a2:7c:3b:0b:ce:71:5f:2e:f6:fc:51:42:
67:a0:b7:31:9b:1e:fe:ac:5b:f7:b1:27:b9:7c:8d:
f6:50:78:c0:0f:83:46:56:bc:f3:79:36:0b:48:d6:
be:0e:b6:a0:a0:34:e7:a8:57:cd:62:c9:e3:98:48:
0e:bc:55:02:f3:d0:0e:37:fc:a9:d2:6e:39:f9:de:
b9:d2:9d:03:1a:3f:74:63:19:65:9d:df:e3:ce:b7:
5b:6a:16:35:de:d9:9d:86:e1:09:5f:f6:76:d6:d7:
bc:87:74:63:9b:c5:47:ce:ed:53:1a:3c:ed:db:f2:
bd:dd:c3:09:32:88:65:d5:54:a9:27:fa:d3:ef:07:
0c:85:9c:c9:f8:ba:ee:f8:de:e6:18:86:25:c5:bd:
a7:5b:fd:aa:d7:6e:d6:1c:cc:31:18:77:49:8b:58:
9e:4f:73:dc:de:0f:ef:7d:77:8b:c7:51:da:99:a7:
59:56:97:d8:85:f9:f9:8c:22:b0:14:29:09:53:7a:
9e:73:c0:65:34:80:25:c0:59:68:0d:8e:6a:b7:fb:
27:f1:81:b5:12:e2:be:4f:8f:79:c4:36:27:f8:d4:
6f:d6:66:34:ab:c2:69:15:b5:78:4b:0e:9f:8a:be:
9c:53:bd:8c:ba:f8:fa:18:cc:a2:e3:61:54:5c:4c:
7b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:18:7A:76:30:6F:55:C1:00:53:85:EC:F8:C6:F6:E3:77:A2:31:5F
X509v3 Authority Key Identifier:
keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fb:ad:55:bc:e6:33:2a:ed:00:45:ea:e1:53:f9:31:30:51:
5e:26:04:c5:20:32:9b:6e:e4:3f:01:ea:78:70:0d:a5:a3:92:
ab:20:32:f4:d3:dd:34:12:86:6c:7d:44:a8:fa:04:0a:61:d8:
e9:06:80:c8:3a:de:60:69:3d:28:ee:37:5d:74:a9:e5:50:53:
48:da:fd:10:e9:3b:e7:db:3d:5f:2a:1e:41:d3:4d:03:9f:a0:
14:19:88:61:38:bb:90:a6:47:d1:cc:be:37:9a:1c:cc:59:0e:
18:35:7d:bd:4e:48:36:aa:15:18:39:bc:d8:54:14:48:29:5d:
a0:fc:d8:f0:aa:1c:8b:ee:98:98:b6:84:7e:56:17:9c:81:21:
3d:9c:ab:fa:3c:f4:64:fc:0d:04:25:fe:82:c5:2f:df:66:75:
20:af:db:3f:0b:d3:aa:35:5c:d2:8e:ee:dc:51:75:d1:6a:f9:
57:2a:ae:7e:1c:d2:72:de:d0:bc:05:5b:5d:42:78:eb:60:35:
da:90:d1:d4:94:94:df:b9:3d:96:9c:4c:32:02:0c:a4:7f:4d:
9f:ca:13:02:f9:dc:29:f5:f3:f2:e3:43:3f:83:fa:cb:bc:e6:
f1:d8:43:79:7e:0c:6c:d7:65:b4:4d:66:7e:dd:98:1e:7f:70:
e4:a8:97:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:37:24 2026 by rpki-client