Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File: Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier: DpYUAr2m7V83IXVDXOAI5PZytig20p/CaRQ3fEGrVPA=
Subject key identifier: 93:07:8C:53:A9:8A:CB:44:78:3D:D5:D2:83:1F:06:09:56:4A:2E:2E
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer: /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial: 01A0CB5990938B4A4AEFDA548C9F333405A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number: 0876
Signing time: Tue 22 Sep 2026 23:00:39 +0000
Manifest this update: Tue 22 Sep 2026 23:00:39 +0000
Manifest next update: Wed 23 Sep 2026 23:00:39 +0000
Files and hashes: 1: 8NgcjLPwi4C-rpW04ANs6GcSgJ8.asa (hash: iTtRgVbNtKgQ9MR4BoISBrN3IJ+TIW9LtTTrDeAFx1k=)
2: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: az1gxKhEXN3fXfnFmUSGfSIHf7d9ttJ7745cHRKCZpw=)
3: IQC6LuJcxVvsBm-_EZRDXpPWxCc.roa (hash: wvfm7aMZTdRYHX9ee2IfOerZQpff8X8TbhsJrJvPsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:90:93:8b:4a:4a:ef:da:54:8c:9f:33:34:05:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Validity
Not Before: Sep 22 23:00:39 2026 GMT
Not After : Sep 23 23:00:39 2026 GMT
Subject: CN=93078c53a98acb44783dd5d2831f0609564a2e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:43:c6:4a:59:b5:38:9e:a8:87:79:eb:94:
76:ef:b2:39:df:23:9a:41:74:39:58:cf:cc:bc:d9:
d0:dd:09:57:09:eb:ee:59:7b:5a:69:da:8e:49:8f:
22:8c:39:c7:c8:8a:b5:64:33:d5:f8:d5:3b:5e:23:
c2:b4:95:6c:cc:4b:9d:d7:b9:44:92:b2:87:31:af:
63:06:52:4a:7b:5f:9e:2e:f5:9f:30:d5:4f:e7:89:
c2:91:75:7e:f6:96:f4:df:ea:e1:7a:70:ab:c1:f5:
36:4c:75:95:c2:6c:32:66:fc:f2:9b:39:32:67:23:
a3:f1:0d:b8:91:45:66:e0:18:36:50:a2:45:7a:8a:
95:3b:fc:66:9f:16:2b:c9:f2:9b:e9:4a:b3:3a:57:
e5:46:7b:6e:bb:19:23:b4:93:e3:97:89:12:34:06:
d5:d0:74:a9:99:14:9f:35:14:91:68:82:26:1e:46:
80:55:4c:b4:59:cb:af:5e:8c:f3:63:2e:59:cc:aa:
57:f4:4c:8b:e4:fe:e3:aa:16:22:01:a1:49:50:bb:
11:54:70:4a:bf:af:18:55:10:b5:ba:72:ba:40:12:
cf:90:05:20:38:04:51:a5:93:ca:f8:0b:22:c1:0a:
e2:f9:ce:a3:9c:cc:49:e0:e4:ce:9f:a5:cc:d5:b6:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:07:8C:53:A9:8A:CB:44:78:3D:D5:D2:83:1F:06:09:56:4A:2E:2E
X509v3 Authority Key Identifier:
keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:39:ae:e2:1d:7d:39:b5:ed:b8:96:75:0d:c1:b4:14:e1:9a:
a0:2d:1a:bf:d2:ae:77:b9:eb:56:de:ee:68:b4:46:b7:80:a2:
74:3e:88:81:c1:62:3f:cd:be:e5:fc:8b:fc:c1:21:15:42:7c:
32:ba:43:45:d8:fb:9f:e1:6d:54:5f:29:41:86:8b:3c:c3:85:
60:2d:d5:59:1e:c2:91:cb:fb:14:0c:0f:ef:e9:5d:86:46:ef:
79:80:b3:af:a3:56:15:5b:dc:08:4a:cb:37:7f:fe:c6:48:9b:
c5:68:af:53:8c:02:9b:84:d9:68:46:8b:b8:d7:27:4d:75:d4:
f9:64:cc:57:88:3d:ae:d5:1f:8b:88:56:5d:67:e6:63:c5:89:
46:44:ec:ce:c6:2a:fd:1f:10:04:bc:ca:01:3f:ed:14:7c:33:
24:0e:7b:65:18:e6:a4:19:f5:d4:a5:af:9d:a7:4a:5f:66:a2:
09:21:4a:24:05:6a:7a:6e:b4:51:95:85:ee:a1:97:e6:6e:d1:
be:65:f8:94:1a:7a:1b:6a:ff:e1:c0:26:15:02:46:07:45:fb:
78:9f:b5:ee:70:42:4c:b0:9e:ba:04:42:0c:fb:6d:99:0a:6a:
f5:8e:b4:0c:82:9d:4c:8a:d9:65:74:26:38:d9:0f:22:6c:04:
d1:b2:60:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:43:25 2026 by rpki-client