Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier: iMrRgu5ThEU5JamO5yIVE1e2ADUM1CX6Kb3fqHqqA1M=
Subject key identifier: EA:99:01:82:C0:CE:3A:AF:EA:BC:C5:5B:2F:37:C1:9D:51:47:82:60
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 019D341ACE4EF327D3725969D9EED8BCE2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number: 10BC
Signing time: Sat 28 Mar 2026 11:01:05 +0000
Manifest this update: Sat 28 Mar 2026 11:01:05 +0000
Manifest next update: Sun 29 Mar 2026 11:01:05 +0000
Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: nLtEUfnTa+S/3EfUjVqxV2VYzDGA91DrwLJDwQELFPE=)
2: IseXGFrOHh1SrFUGwBGdimL1xPE.roa (hash: QRfGT54r8WrtHwlE62/eFdNxhXQLn2BRJl4Hpjv4kZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:ce:4e:f3:27:d3:72:59:69:d9:ee:d8:bc:e2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: Mar 28 11:01:05 2026 GMT
Not After : Mar 29 11:01:05 2026 GMT
Subject: CN=ea990182c0ce3aafeabcc55b2f37c19d51478260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:60:c4:90:4a:a9:ae:7c:80:f2:26:99:70:b5:
89:42:37:25:e3:4b:48:b5:16:f2:2b:f0:a9:c6:a6:
6d:bd:0a:28:dc:23:9f:5a:79:74:7b:30:4c:92:1f:
f9:3f:e7:cc:e2:fe:84:a3:0f:34:fb:0f:32:37:f8:
58:e0:46:1b:da:01:fc:40:83:60:7b:eb:a6:c3:0b:
7e:a8:95:bb:0b:e7:03:81:05:87:10:91:cc:a3:e8:
7c:e5:63:7f:cc:8e:fa:91:40:e9:7b:d0:60:5f:12:
ab:3e:b8:29:f0:0a:e5:39:51:8b:c1:e5:dc:dd:46:
fc:d9:49:f4:da:10:02:c2:38:95:71:bb:ac:7b:75:
95:57:fa:39:ca:90:a4:8a:a2:b6:dc:4d:17:24:29:
8f:64:58:4a:ce:75:91:2e:b6:6b:1b:b0:00:1c:e1:
ba:ef:c4:80:6a:20:96:b3:84:05:e1:9d:9d:93:32:
ad:01:32:6c:5a:f0:ef:1d:39:42:64:08:37:58:4b:
dd:29:86:a0:da:af:fa:53:f5:05:ba:c3:bf:60:e9:
a0:4c:82:1d:d9:06:71:c5:93:04:5b:f1:cc:7d:a0:
b0:6e:37:c1:c2:84:f5:ff:62:d1:58:92:d3:c5:f2:
c7:b9:a9:94:d9:13:4a:37:43:3f:e5:97:ea:88:73:
87:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:99:01:82:C0:CE:3A:AF:EA:BC:C5:5B:2F:37:C1:9D:51:47:82:60
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:89:b0:fb:36:a9:5f:0c:86:20:ec:90:ba:9e:84:8f:18:61:
72:5c:54:88:4c:51:d8:c6:df:d1:19:19:93:b6:53:ab:a1:cb:
34:29:ad:0a:ec:52:c2:0c:56:52:da:37:dc:3d:32:3d:ca:e1:
2b:30:aa:4d:2e:36:0f:72:5d:ff:22:94:99:db:ec:5b:e7:67:
80:e1:e6:82:6c:80:f0:92:81:2f:ca:5a:78:9c:6d:a1:a6:78:
bd:89:af:19:a6:7e:16:27:08:c6:d5:a8:fd:ef:12:5c:14:d3:
47:c9:70:93:0c:f3:21:3e:69:aa:e3:81:c0:55:38:62:23:83:
77:bb:51:81:8a:91:b0:29:6d:10:02:4f:c7:a2:1d:39:98:e7:
1a:de:19:af:cb:6c:2d:60:ca:2a:a0:03:0e:12:9d:0b:bc:56:
58:84:6a:61:c3:eb:f3:68:54:e9:96:72:9a:a9:8d:05:df:dc:
da:28:99:96:87:15:01:05:4e:34:a7:05:c0:34:ea:a7:e9:d8:
88:a3:a1:59:04:3b:4e:f5:e1:96:31:35:f4:96:04:99:82:86:
43:fa:a0:a1:e9:65:e5:62:ec:54:ff:5f:fa:d4:2a:cb:84:fa:
48:1b:9f:0f:1d:69:89:c3:4e:28:d3:ae:04:ea:00:a1:03:0d:
84:c7:81:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:30 2026 by rpki-client