Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
File: AJJn8-O54eu5eZaQgLDfqyTDYBo.mft (raw, json)
Hash identifier: fr49ROLC/gVDL4ffGKVobhh98goHtUCgO6h4z8aQCfI=
Subject key identifier: 04:BF:A7:CA:FE:63:58:3E:27:BC:DC:EA:BA:81:5D:D5:98:93:E5:43
Authority key identifier: 00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
Certificate issuer: /CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Certificate serial: 01A0D94C64F42E06DCC4EA4340B08109A706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
Manifest number: 0643
Signing time: Fri 25 Sep 2026 16:00:57 +0000
Manifest this update: Fri 25 Sep 2026 16:00:57 +0000
Manifest next update: Sat 26 Sep 2026 16:00:57 +0000
Files and hashes: 1: AJJn8-O54eu5eZaQgLDfqyTDYBo.crl (hash: AExL7yDLYm998wU41rwHPTbeiANBGlKE4+/jE0RTqEU=)
2: _WRsTWt5ilvC18u9jW4tmRy2hJw.roa (hash: FSHpNqv1WPRCkPAW3tk75kwS45o2WxoPkRBJKuK3fZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:64:f4:2e:06:dc:c4:ea:43:40:b0:81:09:a7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Validity
Not Before: Sep 25 16:00:57 2026 GMT
Not After : Sep 26 16:00:57 2026 GMT
Subject: CN=04bfa7cafe63583e27bcdceaba815dd59893e543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:40:bf:9e:3e:7f:99:10:d9:da:35:64:2c:
74:9d:2c:b0:ea:ba:9b:14:1f:af:2c:a7:c3:c4:6c:
6b:f4:08:11:e8:dd:9b:21:78:e4:03:6a:2e:8a:03:
1d:5c:82:5f:dc:2f:3e:b1:1c:80:0e:0f:d8:c1:d0:
92:64:2e:6e:e8:4a:a2:ec:f8:8e:03:a1:24:a0:65:
e8:f4:e6:e7:7c:41:cb:f7:33:89:1e:82:5c:6b:7b:
6d:d8:01:90:d8:d0:18:13:40:d9:28:10:13:e8:59:
10:c8:19:6b:4b:66:1a:6d:0d:6a:21:b0:8f:cf:80:
e2:21:8c:c7:93:92:52:83:bd:f0:e1:f6:b6:87:0c:
2d:96:70:0f:d5:57:f9:49:b9:b2:b2:e0:b3:5e:80:
d1:a3:b3:99:f5:98:39:19:03:54:56:be:2b:59:34:
89:36:d7:83:12:e9:c6:36:c7:a2:96:ca:4f:2e:67:
ef:7c:2a:7d:a8:1f:58:0e:29:21:68:a8:71:c9:16:
9a:8f:46:02:00:df:30:3e:fd:7f:72:1f:18:18:87:
13:8a:52:e3:a7:21:3e:1f:ad:3d:ef:96:c0:79:04:
37:5f:d2:96:92:24:c5:ea:f5:0f:08:1c:87:b8:35:
99:42:9a:dd:bd:5b:67:b3:06:0f:48:38:75:75:6c:
d8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BF:A7:CA:FE:63:58:3E:27:BC:DC:EA:BA:81:5D:D5:98:93:E5:43
X509v3 Authority Key Identifier:
keyid:00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3b:4b:36:5f:b4:c0:fd:a3:b3:7c:ec:07:50:0a:c5:47:65:
b1:1a:dd:02:23:cf:9f:78:86:56:68:c1:f5:0f:1f:f2:a0:e8:
ec:41:24:c5:1f:80:a0:b7:d9:72:e2:0b:f8:56:9a:ff:59:c4:
f1:d5:10:dd:81:ce:5f:26:4d:3f:04:b9:a2:1e:fb:fc:cc:b3:
52:d9:69:42:db:b3:a5:b2:75:14:f7:1d:d8:52:5c:79:5f:4a:
03:25:e7:01:30:64:1a:be:2f:e5:15:85:90:b8:9a:3d:65:88:
e9:c4:5c:b7:b5:7b:8e:38:7f:a3:84:e6:80:78:6c:c4:4e:06:
de:ff:b4:c1:5b:8a:c4:eb:d6:4f:5d:10:6e:4c:65:2f:47:da:
48:a6:9a:57:8d:93:55:e7:c3:f5:ef:bb:19:4b:ca:57:f6:c0:
91:41:c9:b8:6b:d9:7a:b6:5f:e8:cc:d4:e6:26:3c:48:28:31:
27:f4:2a:50:29:1c:73:11:86:20:d9:a9:b0:b2:89:da:b9:a8:
ce:ef:3b:3c:90:6a:cf:f1:34:58:e8:3a:a0:f7:e7:c2:25:cf:
79:da:f1:13:9b:c7:9b:7e:d4:47:01:26:45:43:bf:51:a7:99:
d4:f4:b2:99:37:3b:f0:9b:67:05:ae:fb:94:6f:cc:3c:4c:da:
59:23:66:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:45:34 2026 by rpki-client