Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
File: AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json)
Hash identifier: NcE1Dq3XLd7dq3enx9LxIErd4wppOKsjSuHFQvXq6I8=
Subject key identifier: 83:37:8A:22:F9:A2:07:B0:E3:15:16:EE:BB:FE:BD:4B:1E:CC:42:36
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial: 019D25BA7FE1F2A841DB7E1BD4E4E2CB6DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
Manifest number: 011B
Signing time: Wed 25 Mar 2026 16:01:12 +0000
Manifest this update: Wed 25 Mar 2026 16:01:12 +0000
Manifest next update: Thu 26 Mar 2026 16:01:12 +0000
Files and hashes: 1: 5Fb55k26fRyS8mOWbJCdz2BKjkk.asa (hash: Y7eCwWYpq3p8nW4jhVM54zY0TbWIl2xIddYqDKv3JGc=)
2: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: 6MgaaGTORuxqdC3mpwFrUBzl1CWi815V2DSQUxI1rCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:7f:e1:f2:a8:41:db:7e:1b:d4:e4:e2:cb:6d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
Validity
Not Before: Mar 25 16:01:12 2026 GMT
Not After : Mar 26 16:01:12 2026 GMT
Subject: CN=83378a22f9a207b0e31516eebbfebd4b1ecc4236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:ab:30:eb:04:0e:d6:d4:90:36:1a:d2:da:
f4:41:e1:bf:18:2f:77:98:00:bf:4d:03:f5:88:2e:
e5:04:ab:43:de:b8:c5:7e:ec:95:ab:aa:6f:81:de:
55:08:f8:fe:d9:d9:01:54:16:fa:1b:7a:10:2b:3f:
c6:00:81:7c:f6:79:e8:9f:60:7c:d4:67:c3:2f:8b:
dd:9d:e6:05:fb:58:72:82:d7:44:aa:b1:10:42:4a:
d2:51:05:09:cf:eb:87:28:f9:8b:fa:b8:1b:f1:cc:
bc:29:68:de:48:11:0c:dd:f6:be:ee:b5:f6:d1:0e:
bd:4b:c5:99:78:e7:89:19:ec:6b:73:89:63:9d:df:
2b:40:b9:5c:02:fd:85:4e:a6:ac:85:58:ed:d8:54:
03:cf:a7:65:99:a7:c4:cb:9e:08:36:bf:71:82:78:
b7:01:37:db:fc:5c:73:b1:ef:05:4c:9b:70:b3:62:
3e:e7:97:61:cf:ae:49:32:73:b8:16:7b:32:0b:89:
4b:39:09:1d:08:fb:27:0c:8d:4f:fe:af:d4:c6:c0:
ed:96:4c:d4:c6:bd:35:4b:04:e6:c3:32:4d:07:13:
8e:a7:63:0c:6b:d1:95:81:1b:89:6d:d2:ff:64:5f:
e0:39:82:fd:a6:8f:4e:b3:5a:0b:2e:d2:6d:fc:72:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:37:8A:22:F9:A2:07:B0:E3:15:16:EE:BB:FE:BD:4B:1E:CC:42:36
X509v3 Authority Key Identifier:
keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3d:8c:5d:cc:fc:03:f1:94:b6:6c:7d:5a:3a:2f:25:f9:05:
40:0f:17:a5:ff:37:8d:57:db:ed:fe:ed:b8:12:d3:1c:db:cc:
6c:93:f2:01:fc:a0:05:9c:12:0a:db:07:f4:c2:c9:5c:45:67:
31:76:b4:16:ba:ba:74:f1:99:1a:10:d3:f1:fb:58:95:69:ca:
86:9e:a5:b6:a2:a4:c4:d6:56:c7:86:37:23:f5:68:a1:8b:39:
07:9d:c8:e0:e8:fa:c6:5a:45:e9:55:d4:03:db:ba:e6:b9:bf:
a9:59:a9:ae:cd:6b:e1:66:f2:83:75:fa:22:fc:a7:51:aa:86:
bb:5b:3a:91:5d:c3:f6:51:4e:47:b2:43:35:c9:2d:71:22:e7:
03:ca:b5:dd:66:79:d8:29:f0:85:b7:2c:d8:5e:e9:d3:11:a7:
e1:21:b3:d8:b5:e3:f5:2a:d1:32:42:bc:c7:ca:d9:9d:3a:15:
85:ba:c3:b6:f5:e4:1a:2b:10:e0:f1:8f:ca:a9:6c:af:f4:af:
d2:46:30:9c:70:9d:d2:df:a3:c8:1f:1d:f1:b4:6f:26:a0:64:
57:c4:64:ce:fd:db:a4:5d:52:c0:14:87:32:ca:b1:9a:0a:65:
6a:ed:fe:6e:2e:6e:e6:c1:49:64:00:fb:26:2b:15:80:12:f7:
91:f0:e3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:18:58 2026 by rpki-client