Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
File: AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json)
Hash identifier: dhem3L3kR2AFMKY3ICLmB38dUTmcsNhQUV06TQgq0wU=
Subject key identifier: 51:60:29:09:33:88:4A:ED:7B:93:E9:71:66:45:30:6B:CA:B2:46:1C
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial: 019F8FEC4A9DD097F2DAE939F921BD7C6307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
Manifest number: 025F
Signing time: Thu 23 Jul 2026 17:00:55 +0000
Manifest this update: Thu 23 Jul 2026 17:00:55 +0000
Manifest next update: Fri 24 Jul 2026 17:00:55 +0000
Files and hashes: 1: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: eJ+dfN7dErhhT0T1G3Bw1KQJEGszbKl+uxpq2UYwnQo=)
2: Sdyoi-DJheUx969WiGu9zZYw2R4.roa (hash: zNk/KkOF+ii1aUgCLSl3f+9W1j7Kt8UQ+x8h5WRuSFQ=)
3: pt-fhKQ2sRRBx8lpcYMYt8s_8d4.asa (hash: 61S3nZzWWm+wG81cqTpRHAavuHF+5x+9jg8cy1Dq+A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:4a:9d:d0:97:f2:da:e9:39:f9:21:bd:7c:63:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
Validity
Not Before: Jul 23 17:00:55 2026 GMT
Not After : Jul 24 17:00:55 2026 GMT
Subject: CN=5160290933884aed7b93e9716645306bcab2461c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:47:f1:01:fa:48:4b:ac:f8:0d:01:f9:37:
6a:2f:b2:d7:20:a8:e1:fd:77:b9:aa:81:de:e9:5c:
cb:9d:ef:28:47:43:f0:40:bf:cc:72:b0:9a:14:fe:
7b:46:af:6d:a7:27:8f:58:da:df:cb:15:37:87:01:
f2:51:13:b8:ac:48:fd:cb:8e:66:67:24:5e:6f:2f:
ce:e9:28:10:6a:57:5e:3f:4f:5c:42:87:6f:fe:79:
db:2e:6a:03:02:8b:46:39:0d:e5:fa:37:e0:0b:e8:
90:93:7b:92:87:1d:6b:96:7a:d0:63:ca:47:54:95:
d2:83:fa:7e:7f:65:b4:47:03:4e:43:63:4a:b6:8f:
3c:e7:2f:93:ae:ce:d9:2a:0d:e2:75:10:c4:0b:ff:
e3:8b:72:ea:59:00:3e:a4:18:97:8d:9e:fd:1b:35:
71:b9:0f:10:2c:cc:ee:c3:d9:4b:58:ff:4c:65:6a:
70:c2:a0:b8:c3:69:df:f0:38:99:56:af:8d:8c:c6:
eb:76:6e:80:3e:cc:3f:77:c3:25:37:ad:9b:0f:6f:
ec:34:11:ba:92:c8:3a:11:9f:c1:4c:ae:ac:3a:37:
59:16:3d:c9:32:9d:6c:06:b9:da:1a:33:45:3e:a1:
90:be:95:c9:08:cc:dc:9a:f6:79:70:1e:eb:f3:81:
33:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:60:29:09:33:88:4A:ED:7B:93:E9:71:66:45:30:6B:CA:B2:46:1C
X509v3 Authority Key Identifier:
keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:79:d4:0f:c1:f3:9f:28:ac:d4:64:63:65:63:52:ea:1f:cf:
55:e9:e8:fb:5d:cd:57:bf:ce:de:99:67:97:8b:8b:e1:8e:76:
e8:30:6c:d4:14:49:83:da:b8:92:e1:d2:c1:fa:ba:df:43:ea:
fc:a2:d2:6b:04:9a:c3:df:7b:44:cc:a7:21:ce:35:20:1b:f1:
30:0f:91:5d:dc:33:57:05:9b:5c:e6:d0:90:35:b0:c1:04:98:
a9:ce:c0:97:1a:50:d4:b9:6e:ee:9a:c1:84:aa:e8:cb:5d:97:
0d:98:c0:1b:d5:a2:9d:68:aa:9d:af:42:e9:ad:8e:c2:80:25:
59:2a:1c:4b:65:99:fd:8e:35:19:30:da:2c:af:82:81:2e:05:
dd:d5:a0:c6:61:45:69:7f:bd:b0:f5:7a:15:5a:0a:7b:f7:95:
e5:73:fd:b4:3a:07:de:04:ba:47:fc:f3:e7:b7:0e:0e:b7:ef:
42:5c:c7:87:48:6f:ce:ef:0b:06:5b:ad:b6:e5:e6:b2:9c:9a:
25:a3:33:87:c9:16:78:52:74:cb:59:6f:50:78:88:2c:41:fc:
1a:4c:30:59:4e:7d:e1:5f:82:00:05:be:0f:fb:da:ec:56:7f:
8e:fa:b0:22:81:2b:57:7a:55:be:d3:c4:df:07:6e:3a:eb:9d:
7f:88:85:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7Eqd0Jfy2uk5+SG9fGMHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTRjMGY3MzY4YzA0NzY0M2U5MWM1N2Q2Y2ZkYTlmOTk4
OTczNjIwHhcNMjYwNzIzMTcwMDU1WhcNMjYwNzI0MTcwMDU1WjAzMTEwLwYDVQQD
Eyg1MTYwMjkwOTMzODg0YWVkN2I5M2U5NzE2NjQ1MzA2YmNhYjI0NjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt01H8QH6SEus+A0B+TdqL7LXIKjh
/Xe5qoHe6VzLne8oR0PwQL/McrCaFP57Rq9tpyePWNrfyxU3hwHyURO4rEj9y45m
ZyReby/O6SgQaldeP09cQodv/nnbLmoDAotGOQ3l+jfgC+iQk3uShx1rlnrQY8pH
VJXSg/p+f2W0RwNOQ2NKto885y+Trs7ZKg3idRDEC//ji3LqWQA+pBiXjZ79GzVx
uQ8QLMzuw9lLWP9MZWpwwqC4w2nf8DiZVq+NjMbrdm6APsw/d8MlN62bD2/sNBG6
ksg6EZ/BTK6sOjdZFj3JMp1sBrnaGjNFPqGQvpXJCMzcmvZ5cB7r84EzMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFgKQkziErte5PpcWZFMGvKskYcMB8GA1UdIwQY
MBaAFACUwPc2jAR2Q+kcV9bP2p+ZiXNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82M2VmYmItZmUwMi00NjhhLTk2MGQt
M2MyNzQyZjI4YTNjLzEvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82M2VmYmItZmUwMi00NjhhLTk2MGQtM2MyNzQyZjI4YTNj
LzEvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHnUD8Hz
nyis1GRjZWNS6h/PVeno+13NV7/O3plnl4uL4Y526DBs1BRJg9q4kuHSwfq630Pq
/KLSawSaw997RMynIc41IBvxMA+RXdwzVwWbXObQkDWwwQSYqc7AlxpQ1Llu7prB
hKroy12XDZjAG9WinWiqna9C6a2OwoAlWSocS2WZ/Y41GTDaLK+CgS4F3dWgxmFF
aX+9sPV6FVoKe/eV5XP9tDoH3gS6R/zz57cODrfvQlzHh0hvzu8LBluttuXmspya
JaMzh8kWeFJ0y1lvUHiILEH8GkwwWU594V+CAAW+D/va7FZ/jvqwIoErV3pVvtPE
3wduOuudf4iFjQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:28 2026 by rpki-client