Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File: Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier: 0Th8PkWLIqBD5ipxOgKnWwkXlIg6Q8CsX41WUhnnhYE=
Subject key identifier: E6:09:78:49:95:E0:F4:A3:A3:7B:41:EF:2F:0A:F4:43:FC:38:64:04
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer: /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial: 019F9091291A0D5758387B678E140BA8F057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number: 07D3
Signing time: Thu 23 Jul 2026 20:01:00 +0000
Manifest this update: Thu 23 Jul 2026 20:01:00 +0000
Manifest next update: Fri 24 Jul 2026 20:01:00 +0000
Files and hashes: 1: 8NgcjLPwi4C-rpW04ANs6GcSgJ8.asa (hash: iTtRgVbNtKgQ9MR4BoISBrN3IJ+TIW9LtTTrDeAFx1k=)
2: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: m1ZJkKbrxjJvVkW6coS4w4DKiZCVypZGjgNiPz2HDnU=)
3: IQC6LuJcxVvsBm-_EZRDXpPWxCc.roa (hash: wvfm7aMZTdRYHX9ee2IfOerZQpff8X8TbhsJrJvPsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:29:1a:0d:57:58:38:7b:67:8e:14:0b:a8:f0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Validity
Not Before: Jul 23 20:01:00 2026 GMT
Not After : Jul 24 20:01:00 2026 GMT
Subject: CN=e609784995e0f4a3a37b41ef2f0af443fc386404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:2c:51:2c:46:bf:a7:2d:86:f9:67:35:06:
09:b0:38:eb:55:ab:54:49:bd:4e:b4:b2:be:93:96:
85:5a:ec:78:a5:e4:ee:a0:44:36:3e:5a:d2:56:ac:
a4:8d:43:38:fa:c9:d6:2e:72:f4:06:81:85:cc:eb:
bc:9e:7f:55:69:21:19:12:16:f4:f6:7d:46:18:51:
ad:36:48:5c:3e:ea:e8:76:0a:3b:3c:34:80:8f:2d:
21:aa:c8:a3:24:c3:b8:0f:9c:17:80:f8:c7:4e:a4:
a2:4f:2b:fd:f2:46:9d:f4:08:df:57:3d:31:f3:20:
5d:1b:e2:1c:cb:1b:3e:d0:a7:2a:bf:c7:a0:90:f5:
38:54:45:ec:37:e6:22:85:78:28:25:be:70:3b:4c:
db:23:c5:02:a1:2b:7e:b0:a3:fd:78:87:52:c0:1b:
e9:df:9d:af:9e:d0:5e:e5:a0:7e:b3:41:d6:d7:80:
af:52:09:23:59:01:84:cc:fa:7a:e1:09:5a:8d:43:
f1:2d:86:e3:85:76:06:3c:fd:77:ca:f3:ec:92:5b:
8d:c8:0f:bb:af:83:12:48:66:8f:e6:cf:66:2e:1e:
87:3d:d7:13:09:46:76:38:f5:76:c0:08:70:3c:a5:
57:85:c0:b3:73:3f:a3:64:d3:04:bd:06:de:91:9d:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:09:78:49:95:E0:F4:A3:A3:7B:41:EF:2F:0A:F4:43:FC:38:64:04
X509v3 Authority Key Identifier:
keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7d:23:d7:b5:fc:ec:48:bb:71:9c:93:9c:1b:15:30:a7:78:
6d:7d:68:65:8e:64:17:ae:58:dc:73:92:03:af:b5:dc:ea:da:
06:c9:14:5e:10:81:fd:71:94:34:57:95:ec:bd:94:c9:eb:f6:
7b:20:b7:04:a2:83:d5:ea:59:19:83:a0:4a:11:ee:8b:8d:e7:
d3:dc:0d:26:3f:fe:87:03:cc:28:0e:2c:c4:d5:1e:0f:6a:6e:
c0:2a:c2:48:f2:48:f4:62:22:ce:23:f1:55:da:ef:4f:16:77:
d2:7e:3e:b8:71:bb:7b:a7:ba:9a:7b:5e:5e:f1:23:5a:78:bf:
bb:56:5f:1c:16:f0:6b:03:3e:32:f7:7d:7b:6c:1b:ce:ce:22:
b0:13:7e:7e:6f:f9:99:ff:1c:01:da:97:fb:40:49:76:26:48:
54:4e:c7:da:35:c6:e3:e1:7c:c7:a7:1f:3b:f2:e9:5c:b9:b4:
e2:2e:1b:b8:52:32:dc:e3:a3:82:07:06:c8:2e:fb:e3:b9:fa:
a3:79:51:2d:ab:7e:df:19:e2:72:29:d1:3c:12:95:f7:d3:6a:
c5:31:2d:29:92:ca:dc:45:95:7e:24:06:aa:a0:72:fd:c7:2a:
2b:f9:d0:84:a9:d9:1a:61:6a:e3:5d:e6:75:28:b1:71:7c:ef:
04:7d:47:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:03 2026 by rpki-client