Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
File: AJLnRYJTGqr-6IuccujCnkVNBlk.mft (raw, json)
Hash identifier: 0p2CdpY4Pvwi4lGF6zfU9zUmZryAaThKF7uIBtH6GRQ=
Subject key identifier: 91:C2:B2:5D:47:4A:EF:81:30:DD:9A:99:66:55:E1:BA:19:47:64:D1
Authority key identifier: 00:92:E7:45:82:53:1A:AA:FE:E8:8B:9C:72:E8:C2:9E:45:4D:06:59
Certificate issuer: /CN=0092e74582531aaafee88b9c72e8c29e454d0659
Certificate serial: 01A0D15BB0594876BE14E0E8B97263F2656B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
Manifest number: 0150
Signing time: Thu 24 Sep 2026 03:00:42 +0000
Manifest this update: Thu 24 Sep 2026 03:00:42 +0000
Manifest next update: Fri 25 Sep 2026 03:00:42 +0000
Files and hashes: 1: 6ontWII5WMer-NC2JkFZC94eMPo.roa (hash: ikc5sMI2WQkSDX/3GmIBdgUqzy3XSw6lVBzfeyAHG84=)
2: AJLnRYJTGqr-6IuccujCnkVNBlk.crl (hash: oThpxmKP4n21lY/1mCAMRv6z+1o/8tVIJNj5MSBPiI4=)
3: KdjeaKOVQI8nkLscbrcljjEWQvo.roa (hash: hmKWt5BMw7FcRXxgWPqVLHCN6voSzvaQG+o7oZwdPWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:b0:59:48:76:be:14:e0:e8:b9:72:63:f2:65:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0092e74582531aaafee88b9c72e8c29e454d0659
Validity
Not Before: Sep 24 03:00:42 2026 GMT
Not After : Sep 25 03:00:42 2026 GMT
Subject: CN=91c2b25d474aef8130dd9a996655e1ba194764d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:b9:f5:aa:be:ea:6a:0f:b4:d4:76:67:01:
fd:d9:f0:25:3a:63:ed:ba:31:d8:c5:09:8a:d2:41:
2d:1f:c3:7c:18:57:13:a1:94:61:ac:40:7b:e7:a4:
ad:03:ac:d0:d6:2a:ad:03:61:68:6c:1a:7f:8c:08:
5e:cb:9f:0d:7f:50:8b:4c:ea:e7:90:38:f2:f3:47:
37:ca:e6:f1:50:de:e2:f6:a4:91:a2:38:5b:78:ac:
81:93:a8:71:ef:28:ea:61:c8:e4:90:ec:c0:67:4d:
5e:7c:20:31:d7:d2:37:72:b4:e1:17:4c:7b:ff:73:
73:d9:23:5e:61:84:1c:62:d4:79:23:8d:98:56:63:
03:bc:1c:37:38:23:8f:e4:7e:c2:3f:e3:51:a2:fb:
35:f5:2d:cb:bb:29:7b:56:19:81:97:c6:1b:0a:81:
6d:f1:8a:6a:0f:f9:87:e5:0a:a3:94:7e:e2:30:88:
30:8c:dc:e3:73:5f:8d:06:20:df:98:ae:5c:fa:58:
5f:63:44:8f:ea:5a:a0:e5:10:c1:71:f1:88:e1:06:
b9:1b:be:d8:17:d7:27:59:02:08:2b:5b:d1:11:ed:
dd:f4:a5:71:b6:ef:ea:0f:1d:0b:41:81:3a:2e:fe:
21:cb:b0:a1:6a:d3:8b:b8:bf:56:a7:b4:f9:53:e8:
30:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C2:B2:5D:47:4A:EF:81:30:DD:9A:99:66:55:E1:BA:19:47:64:D1
X509v3 Authority Key Identifier:
keyid:00:92:E7:45:82:53:1A:AA:FE:E8:8B:9C:72:E8:C2:9E:45:4D:06:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3a:16:aa:13:6c:2d:48:ad:8b:8a:4f:23:87:45:b4:8c:f7:
4a:4b:63:6d:dd:b7:98:68:b9:18:24:7b:a2:1b:d5:24:98:81:
32:01:69:89:88:11:db:cc:d3:27:9f:54:08:3c:3a:ef:e2:67:
17:32:81:aa:a9:4f:4e:3a:74:0b:01:78:2d:17:b4:80:6a:da:
d4:19:05:94:cb:a5:7a:d0:73:68:54:b1:5e:65:0a:fa:d8:83:
79:3c:cb:fb:07:cd:58:1b:9b:f4:56:0b:ca:14:16:40:b3:47:
94:64:48:7a:3b:44:72:26:7d:ac:21:00:52:63:dd:04:bf:f4:
e7:27:c9:0f:eb:9e:4e:ab:20:78:46:0d:d7:86:cc:81:ef:9f:
49:74:72:45:a3:93:e2:9b:7a:bf:71:a2:eb:69:d4:e1:91:54:
83:6c:f3:5e:d7:e7:5b:22:69:16:33:22:7a:aa:d7:34:26:f6:
6f:5a:0f:1b:13:20:93:2c:b7:92:ae:29:23:24:6e:59:7a:ad:
2e:bb:b2:ab:b1:2a:fc:c9:4e:18:b8:a6:d7:58:87:be:d4:2e:
d9:f2:b7:fe:40:ab:2d:4c:2c:09:81:fd:03:b2:87:5e:4d:d3:
29:ed:0a:c7:2e:f1:27:8a:8e:2d:87:29:1c:3f:c0:d5:db:44:
4a:b6:5c:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRW7BZSHa+FODouXJj8mVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTJlNzQ1ODI1MzFhYWFmZWU4OGI5YzcyZThjMjllNDU0
ZDA2NTkwHhcNMjYwOTI0MDMwMDQyWhcNMjYwOTI1MDMwMDQyWjAzMTEwLwYDVQQD
Eyg5MWMyYjI1ZDQ3NGFlZjgxMzBkZDlhOTk2NjU1ZTFiYTE5NDc2NGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw+59aq+6moPtNR2ZwH92fAlOmPt
ujHYxQmK0kEtH8N8GFcToZRhrEB756StA6zQ1iqtA2FobBp/jAhey58Nf1CLTOrn
kDjy80c3yubxUN7i9qSRojhbeKyBk6hx7yjqYcjkkOzAZ01efCAx19I3crThF0x7
/3Nz2SNeYYQcYtR5I42YVmMDvBw3OCOP5H7CP+NRovs19S3Luyl7VhmBl8YbCoFt
8YpqD/mH5QqjlH7iMIgwjNzjc1+NBiDfmK5c+lhfY0SP6lqg5RDBcfGI4Qa5G77Y
F9cnWQIIK1vREe3d9KVxtu/qDx0LQYE6Lv4hy7ChatOLuL9Wp7T5U+gw5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHCsl1HSu+BMN2amWZV4boZR2TRMB8GA1UdIwQY
MBaAFACS50WCUxqq/uiLnHLowp5FTQZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpMblJZSlRHcXItNkl1Y2N1akNua1ZOQmxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83NTkxNDMtZDliZC00NmU0LTg4NjUt
OGUxZGE1MTQyYzcyLzEvQUpMblJZSlRHcXItNkl1Y2N1akNua1ZOQmxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83NTkxNDMtZDliZC00NmU0LTg4NjUtOGUxZGE1MTQyYzcy
LzEvQUpMblJZSlRHcXItNkl1Y2N1akNua1ZOQmxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDoWqhNs
LUiti4pPI4dFtIz3Sktjbd23mGi5GCR7ohvVJJiBMgFpiYgR28zTJ59UCDw67+Jn
FzKBqqlPTjp0CwF4LRe0gGra1BkFlMuletBzaFSxXmUK+tiDeTzL+wfNWBub9FYL
yhQWQLNHlGRIejtEciZ9rCEAUmPdBL/05yfJD+ueTqsgeEYN14bMge+fSXRyRaOT
4pt6v3Gi62nU4ZFUg2zzXtfnWyJpFjMieqrXNCb2b1oPGxMgkyy3kq4pIyRuWXqt
Lruyq7Eq/MlOGLim11iHvtQu2fK3/kCrLUwsCYH9A7KHXk3TKe0Kxy7xJ4qOLYcp
HD/A1dtESrZc0g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:18:17 2026 by rpki-client