Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier: HA4IXx3z1KKStCeWW8xmckwr1ezvBsiTuThMcf8/JPM=
Subject key identifier: 7A:10:B6:75:7F:4D:37:55:2D:9A:48:EE:9D:8C:D2:2F:47:80:3B:2C
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 019E1FB5968C264E09955C2F8619F4F3635A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number: 1136
Signing time: Wed 13 May 2026 05:00:54 +0000
Manifest this update: Wed 13 May 2026 05:00:54 +0000
Manifest next update: Thu 14 May 2026 05:00:54 +0000
Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: j0yM2SbWxaVKHXnjPr+/vNUn5apd4AGVBqzed2EkccE=)
2: IseXGFrOHh1SrFUGwBGdimL1xPE.roa (hash: QRfGT54r8WrtHwlE62/eFdNxhXQLn2BRJl4Hpjv4kZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:96:8c:26:4e:09:95:5c:2f:86:19:f4:f3:63:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: May 13 05:00:54 2026 GMT
Not After : May 14 05:00:54 2026 GMT
Subject: CN=7a10b6757f4d37552d9a48ee9d8cd22f47803b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:68:85:51:fb:87:95:26:38:f6:4e:82:7a:a8:
66:ca:c4:79:48:f0:c9:25:5f:e4:fa:98:ef:f6:1d:
c3:15:77:d2:ed:f5:6e:34:36:a9:7c:b7:cc:ae:e4:
2a:9d:bb:2f:74:b7:1d:fe:a6:ec:3a:4f:05:e3:74:
68:df:29:0d:a5:df:56:6e:27:ab:c2:62:43:59:3f:
ea:f4:d9:0f:b5:4e:02:df:4e:40:10:77:84:d1:07:
11:26:ac:4d:4f:d0:e4:13:0f:c1:18:75:b9:3c:12:
52:a3:68:35:b7:68:80:23:ce:d6:f3:47:05:ac:53:
c0:de:db:b7:09:0a:91:2e:33:f8:23:3c:57:17:f0:
ee:02:5e:48:dd:24:91:9c:3f:d5:96:e3:1b:9f:50:
f4:01:85:29:0a:93:43:fe:63:00:7c:e4:05:e6:07:
58:3a:ea:43:57:ad:10:2e:19:83:8f:84:ed:8a:49:
a5:3e:15:5b:dc:fe:1b:08:43:13:c0:79:24:bc:42:
e9:b0:b9:4e:7c:5c:9d:3a:0a:11:c7:fd:32:e9:9a:
45:44:10:a4:e6:7a:d7:b2:69:7b:cd:6c:ac:83:7a:
89:7e:14:bb:e3:5f:f7:6b:db:9d:c3:a0:d5:01:31:
ce:77:e4:a4:4a:19:75:1e:fa:59:22:4a:84:e1:61:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:10:B6:75:7F:4D:37:55:2D:9A:48:EE:9D:8C:D2:2F:47:80:3B:2C
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:12:05:4c:fc:47:9b:f4:27:48:11:ad:af:7f:32:14:01:a6:
75:a0:92:30:01:c2:03:86:18:18:a5:aa:e5:81:5a:89:76:b9:
32:56:e1:0c:76:cf:8d:d3:d1:65:64:76:a4:4d:85:7b:38:06:
9c:6f:57:75:3e:e8:f0:14:f4:d7:f9:8f:4f:c5:4e:c7:07:73:
ac:c5:8c:d3:36:bf:fb:4e:d7:e6:e4:d4:1c:62:39:92:fd:e9:
e6:97:a8:86:db:ec:0c:f4:ed:e1:df:4c:70:9d:1f:87:a6:a7:
21:ca:83:7b:86:60:a3:cd:cf:9e:ac:69:8d:23:bb:44:78:fc:
c1:50:02:91:3d:cd:7a:17:b5:0c:54:58:bd:c6:2c:64:6b:11:
39:3c:5f:a5:0a:4b:cd:33:ab:6d:e4:56:8e:7f:4d:4a:f0:f1:
7c:8c:b1:b1:ba:96:e3:c8:58:f8:52:a3:83:f6:e8:1e:e3:04:
a4:b7:f0:6a:58:10:67:25:ba:ca:4a:cb:1b:80:1c:70:c9:df:
01:b3:02:94:27:38:85:e9:e5:42:6a:61:9b:00:bf:05:9f:8a:
90:7c:f8:ee:31:92:78:6d:74:e2:1f:d4:37:d0:17:e2:5d:3d:
49:e0:63:cb:8e:ff:0b:6a:01:6a:48:e7:c5:8d:75:50:c1:29:
36:99:8e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:05:20 2026 by rpki-client