Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier: /YWKwuPAAePqjvNSUKPBvNehIAHVmJt0zI1UXm22Wvw=
Subject key identifier: 4A:B1:3E:F8:ED:0E:11:48:B3:FA:9F:B2:03:62:C0:6A:45:14:13:01
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 019F90913C06293EE9E5E0B5D2BFDF33602C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number: 11F5
Signing time: Thu 23 Jul 2026 20:01:04 +0000
Manifest this update: Thu 23 Jul 2026 20:01:04 +0000
Manifest next update: Fri 24 Jul 2026 20:01:04 +0000
Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: gkt8TCiChXFJTuvoMirG53awazo8oGnpMoZjhGJ6eiw=)
2: IseXGFrOHh1SrFUGwBGdimL1xPE.roa (hash: QRfGT54r8WrtHwlE62/eFdNxhXQLn2BRJl4Hpjv4kZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:3c:06:29:3e:e9:e5:e0:b5:d2:bf:df:33:60:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: Jul 23 20:01:04 2026 GMT
Not After : Jul 24 20:01:04 2026 GMT
Subject: CN=4ab13ef8ed0e1148b3fa9fb20362c06a45141301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:50:41:22:b3:1e:0a:58:55:b2:81:cd:3f:6a:
96:1a:9a:95:b9:50:b5:f4:57:99:51:70:5d:14:6b:
92:1f:3b:04:e9:cd:f2:9f:f2:f9:49:d2:a9:14:05:
12:a9:3a:84:d3:f8:04:53:5e:fc:f2:68:8f:7e:85:
a1:c8:45:38:bb:3e:ed:15:b6:2a:61:85:63:1e:b6:
8b:c4:1b:d7:f0:11:01:a3:d8:50:15:62:62:f4:a4:
60:29:8f:a6:ab:e1:01:ba:4a:35:96:bf:d4:06:ac:
bd:fb:47:8f:c9:96:7f:df:b7:ad:b4:1a:9d:cf:93:
12:82:9d:bf:de:ca:1b:59:91:29:86:ff:08:cf:35:
7d:fe:d2:3e:5f:50:1f:07:00:53:5f:28:cb:81:13:
fb:70:69:f2:4b:3f:09:03:a2:ba:49:7a:18:86:25:
b4:93:07:58:4f:a3:58:e9:27:4c:6d:14:5a:9c:1a:
26:0f:a4:b5:cb:4f:94:93:e6:c7:03:0c:67:ac:da:
5c:59:57:7f:3f:b4:6b:30:88:34:fa:12:e5:2b:4e:
ae:a4:3d:d9:98:5a:86:a6:f6:37:4a:a8:ca:ae:11:
1f:fa:b8:b7:c0:19:1d:f1:02:dc:72:b6:6c:b1:bb:
f3:82:c2:f3:b6:e3:05:77:d6:c6:61:db:99:92:71:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:3E:F8:ED:0E:11:48:B3:FA:9F:B2:03:62:C0:6A:45:14:13:01
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ec:66:ff:da:b2:c6:e0:96:38:72:8c:d2:d6:46:fd:95:80:
d4:38:28:f4:77:1f:16:d9:26:ad:3c:02:65:17:66:ee:a0:6a:
4a:fb:c2:a9:26:40:6e:82:f7:7b:7e:11:90:50:a7:81:54:cd:
90:82:5f:fd:1c:e6:b5:aa:2c:e7:17:53:b5:80:1e:ee:aa:35:
bf:7e:8c:f0:e1:44:d2:2e:0b:72:1a:b5:3f:69:85:fb:09:85:
d9:52:c2:ed:ac:4e:e7:b0:50:f0:a7:5f:01:5c:af:78:a0:08:
aa:b7:08:ed:32:d7:41:49:1a:7a:b7:65:3c:f9:50:f0:d4:2f:
0e:f9:8b:d4:82:a0:5c:9b:57:9b:9f:a6:0a:e8:69:d3:cb:c2:
23:bc:69:b3:c9:8a:8c:e0:36:c7:f4:68:07:28:b4:02:45:b6:
10:d5:53:d8:71:6e:59:ec:03:7f:8e:ac:e3:bc:3b:30:05:1c:
f8:45:89:17:08:97:4f:ce:c3:43:c5:e1:a3:57:8d:b5:a4:fc:
02:3b:77:c4:b2:db:d6:ad:4c:87:df:3f:07:46:f1:bd:66:61:
61:f7:c7:d8:3f:91:10:60:77:1a:f5:9e:f5:ba:f9:e1:ae:b2:
7f:fe:f9:53:82:08:85:31:4f:4c:30:6a:87:eb:0a:e8:8b:64:
c0:90:e9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:23:06 2026 by rpki-client