Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
File: AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json)
Hash identifier: k/Ou0eZa18eQ1JYHQvKJLEOfhr1e479xF2BEhK+kxug=
Subject key identifier: 65:4A:C9:29:ED:3A:93:E8:E2:26:06:4B:CD:17:D8:75:DD:9A:B9:E5
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial: 019E1E3615A280300C4F7414E788B1AAED90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
Manifest number: 019D
Signing time: Tue 12 May 2026 22:02:01 +0000
Manifest this update: Tue 12 May 2026 22:02:01 +0000
Manifest next update: Wed 13 May 2026 22:02:01 +0000
Files and hashes: 1: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: J/B6nhTYZ1gSkxxaqqabOsnahTSHm2EBb88sD99XH8Y=)
2: DzQ8irc-4RBk4ZzUbrd1aGGR-sY.asa (hash: CPLLMLkvayhGpNIRTtZEtIvUVWnwTscyQoRbkvd4JCc=)
3: Sdyoi-DJheUx969WiGu9zZYw2R4.roa (hash: zNk/KkOF+ii1aUgCLSl3f+9W1j7Kt8UQ+x8h5WRuSFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:36:15:a2:80:30:0c:4f:74:14:e7:88:b1:aa:ed:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
Validity
Not Before: May 12 22:02:01 2026 GMT
Not After : May 13 22:02:01 2026 GMT
Subject: CN=654ac929ed3a93e8e226064bcd17d875dd9ab9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:36:72:4a:2a:c0:2f:49:86:fa:27:21:e3:79:
a2:0b:bc:94:71:ea:b8:38:c9:41:7f:a3:4d:16:86:
8e:c3:16:bc:7d:14:59:d7:d0:7c:80:09:c5:f9:2d:
50:89:87:21:fd:c8:b9:3f:f3:61:64:6e:83:d8:2b:
31:0a:23:4a:82:11:89:cb:05:21:b9:33:42:f7:df:
5f:4e:3d:5e:83:3a:6e:e5:56:73:1e:20:da:4a:6a:
1c:cd:fe:ac:67:29:d1:ad:05:2a:2c:36:ba:ff:7d:
0c:1c:35:5c:c5:dc:ed:b0:a5:e2:a2:35:ee:a4:bf:
33:dc:50:34:7b:a2:4c:05:b2:48:c6:46:76:a9:1a:
8f:eb:16:f7:14:60:0d:20:45:2b:c8:8a:f2:6c:69:
21:2b:0d:f1:d3:45:b0:43:a9:6e:59:a7:15:22:55:
57:4a:9b:ea:86:11:f6:b5:5c:ee:e2:5e:21:df:3c:
99:73:e9:68:7a:76:bf:ab:1a:de:45:1f:d3:18:7e:
14:0c:83:7a:60:a7:2a:e0:71:88:ea:6b:47:e4:a1:
a8:cc:d0:c4:be:ae:e7:38:bd:b0:8a:8d:a4:7a:f6:
52:06:44:cf:b2:2d:04:55:e4:47:42:65:a4:94:a1:
e0:76:3a:5f:2c:72:a2:ca:99:4f:a0:38:88:f1:2b:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4A:C9:29:ED:3A:93:E8:E2:26:06:4B:CD:17:D8:75:DD:9A:B9:E5
X509v3 Authority Key Identifier:
keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d3:05:5c:d6:c8:64:48:a4:bb:1d:e4:1d:84:94:f9:37:81:
ee:d1:19:6e:19:ec:4c:12:38:5d:66:5c:3f:4b:95:97:93:3b:
56:0d:c9:60:c2:77:8d:8a:18:9c:f1:7b:ba:7f:31:d9:00:28:
62:e5:4e:aa:62:4e:39:d6:21:a3:78:be:85:ba:e5:63:c1:e3:
ac:aa:de:de:db:24:63:8f:2d:2a:a4:c3:6a:4e:b9:32:23:93:
a0:7a:53:39:2c:ee:93:7e:64:9d:27:9c:cd:07:e5:da:af:82:
1e:f9:d5:b8:ef:a6:d2:3e:ef:6e:95:a4:19:13:bb:a8:fe:c3:
f6:17:e2:d2:7b:5b:ef:b8:59:35:1c:e8:ed:9c:75:92:81:d6:
09:30:2c:22:d5:e7:51:0f:f5:cf:2c:46:16:2d:b4:fa:de:6e:
16:8a:e0:86:9c:93:8a:bd:88:80:75:b3:75:0d:75:ab:f7:55:
34:f1:bf:ac:aa:36:3d:2f:fd:f6:b5:e0:6f:07:64:d7:6e:63:
75:4d:64:a8:12:1d:7f:9c:da:56:d8:59:92:dc:a3:53:fc:82:
e9:5c:92:1e:66:8d:db:45:32:f5:45:54:37:59:40:c9:d1:c5:
ce:ea:1d:de:cf:33:a0:b4:c3:f4:22:69:0f:84:0d:55:9d:41:
e9:3a:c7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:28 2026 by rpki-client