Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
File: AJJn8-O54eu5eZaQgLDfqyTDYBo.mft (raw, json)
Hash identifier: a5zI4rhQ8beEIO2SdvcgN3p04F7zontvKGtVhbfaxjs=
Subject key identifier: A9:95:DF:36:D5:49:3E:BB:FA:DF:0A:9B:41:6D:A5:77:10:12:94:1F
Authority key identifier: 00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
Certificate issuer: /CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Certificate serial: 019E1EA2B8F86778D91CABAA6E572BAAFBFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
Manifest number: 04D9
Signing time: Wed 13 May 2026 00:00:41 +0000
Manifest this update: Wed 13 May 2026 00:00:41 +0000
Manifest next update: Thu 14 May 2026 00:00:41 +0000
Files and hashes: 1: AJJn8-O54eu5eZaQgLDfqyTDYBo.crl (hash: q1jvdhwpTgWFHxVFkqIoOo6oip+VJCqB5O2AK7j/sOA=)
2: d9OmlBe2GpKLvl3u0mUGOFIDWgo.roa (hash: Ba/7rGgRRFa7/HkHrFHCRps9ypeyWifGgSmqxh5y+b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:b8:f8:67:78:d9:1c:ab:aa:6e:57:2b:aa:fb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Validity
Not Before: May 13 00:00:41 2026 GMT
Not After : May 14 00:00:41 2026 GMT
Subject: CN=a995df36d5493ebbfadf0a9b416da5771012941f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:33:b6:8f:80:11:97:5f:f2:d8:59:c0:7f:8b:
75:e5:f3:c4:37:fa:13:5f:b7:c1:b9:a8:aa:47:32:
61:a5:7b:59:a8:db:4f:76:56:fc:c6:cf:8b:05:6f:
22:fc:ab:dc:57:f5:28:08:f6:db:ee:c3:74:b1:4e:
8f:9a:6e:21:7b:51:d6:af:2c:94:25:c9:af:99:5b:
cd:47:01:c8:48:29:49:a4:6c:d2:2f:f2:12:19:b5:
ba:ae:10:ce:b7:41:1b:e7:c1:dd:77:0b:5d:e9:8b:
fc:1f:04:bd:60:c7:e5:43:67:5a:2e:31:7a:61:64:
45:fd:c6:85:9a:23:d9:a8:c2:e8:3e:85:55:f4:43:
d7:1f:c6:5f:93:fe:23:1a:fa:c0:b7:1e:78:01:ae:
67:8b:0f:cb:6d:d5:4e:35:29:c2:0d:9f:c9:4a:e5:
01:ba:12:90:27:a1:bf:4a:af:e6:13:f4:b2:3f:a4:
3a:0c:b2:bc:9a:27:27:4e:82:4b:8b:7d:b0:8e:bd:
74:21:a3:78:53:eb:0c:c3:37:06:16:e5:99:92:52:
0c:89:c5:6f:1c:b6:e4:54:31:36:1b:40:e8:ff:04:
1d:31:77:24:cc:0a:d9:c3:1c:66:9c:92:0f:e5:71:
ca:f3:a3:cc:d8:78:d8:87:7a:e0:ea:b2:23:61:21:
ae:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:95:DF:36:D5:49:3E:BB:FA:DF:0A:9B:41:6D:A5:77:10:12:94:1F
X509v3 Authority Key Identifier:
keyid:00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:58:ba:c7:7c:35:f8:16:57:2d:87:ce:27:55:a5:51:d2:0b:
51:b1:7f:35:2c:7e:35:f2:ba:80:e2:87:58:67:3a:8d:13:ec:
1c:63:b6:48:c8:73:fa:35:99:99:f4:e3:25:eb:49:4e:70:09:
8c:4a:cf:d4:42:a7:a9:ef:95:95:78:d8:f2:31:98:35:66:02:
dd:a4:96:6d:61:ef:d5:56:10:2d:c6:7a:35:0f:89:9f:7b:ff:
b4:fb:64:1c:9f:96:c2:c6:25:97:6c:b2:19:ff:d5:16:ee:49:
c9:7e:59:43:f0:c9:92:ae:8b:33:1b:21:5d:ff:08:8f:80:b3:
4e:e2:73:ee:20:b6:ec:c7:86:d7:e7:2a:20:55:6e:c6:34:be:
32:57:db:92:bc:a9:fc:fd:23:0f:78:df:e7:7f:53:02:33:c8:
ea:05:c4:d8:01:e2:d8:2a:75:dd:a7:ad:8b:a9:36:ac:78:92:
c9:61:f1:21:3a:7f:0e:2b:f4:8e:e7:38:0f:35:b4:1e:cd:33:
f8:ab:fb:3e:bf:11:b3:ac:9d:41:1c:ae:4a:2c:25:18:30:ab:
4d:63:9a:31:16:44:58:43:34:e8:4e:97:7e:fe:4b:17:b1:c8:
ce:35:f1:fd:6e:af:2e:66:7f:67:2f:46:43:98:6a:fc:54:90:
f0:11:cc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:35:30 2026 by rpki-client