Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
File: AJJn8-O54eu5eZaQgLDfqyTDYBo.mft (raw, json)
Hash identifier: cLcpWk7gu2EaXqmIUaprhY5FdACXg2fHUjoSiPj4a9M=
Subject key identifier: 37:3C:50:35:14:86:B2:7E:CD:3F:D8:16:06:6B:FF:EB:72:3D:F0:77
Authority key identifier: 00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
Certificate issuer: /CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Certificate serial: 019F8F7EA6259F73BC6D89BED5B1E0A7F56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
Manifest number: 0598
Signing time: Thu 23 Jul 2026 15:01:09 +0000
Manifest this update: Thu 23 Jul 2026 15:01:09 +0000
Manifest next update: Fri 24 Jul 2026 15:01:09 +0000
Files and hashes: 1: AJJn8-O54eu5eZaQgLDfqyTDYBo.crl (hash: bze+nbi7K98vZzQUpeUiFm58jWZ1yhqz9tfH4UpwonY=)
2: d9OmlBe2GpKLvl3u0mUGOFIDWgo.roa (hash: Ba/7rGgRRFa7/HkHrFHCRps9ypeyWifGgSmqxh5y+b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:a6:25:9f:73:bc:6d:89:be:d5:b1:e0:a7:f5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Validity
Not Before: Jul 23 15:01:09 2026 GMT
Not After : Jul 24 15:01:09 2026 GMT
Subject: CN=373c50351486b27ecd3fd816066bffeb723df077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:8b:ca:a3:74:61:67:d2:b0:4a:98:7f:95:
e2:1a:1e:8d:57:cd:ab:d5:e7:09:34:2b:21:3d:63:
2e:c2:8b:b0:ea:06:0d:81:92:bf:28:c9:30:dc:dd:
f3:df:39:05:5e:61:c6:da:81:3d:00:32:6b:fd:38:
36:e2:78:03:d8:0b:45:c0:1a:c8:b1:92:ff:27:c1:
fa:8a:24:13:60:e0:85:67:e3:b3:f4:04:34:d9:a7:
1a:b6:8e:e6:45:32:9a:42:2c:d1:6c:32:a3:d7:59:
f4:a0:80:9c:9b:a6:68:bb:68:d8:e3:55:fc:69:0d:
0e:38:19:51:bc:dc:d2:67:23:10:22:6d:c2:70:90:
9d:e3:0e:f4:fa:79:f4:89:97:9c:8a:30:30:b4:b8:
a4:d8:9f:e9:f1:1b:e6:26:86:fb:59:ae:be:ec:68:
8f:33:ba:63:c9:3c:5b:f9:b6:c4:24:f5:70:46:0e:
97:27:0b:6d:1b:82:5c:a3:db:d4:50:02:a0:b1:e1:
16:69:29:5b:fd:36:ab:02:7f:1e:7a:59:d9:74:94:
f8:00:cf:e7:a3:ac:99:4d:64:de:a1:30:99:b7:3c:
1f:e5:ed:ef:a9:21:3b:82:14:ee:aa:f8:b7:d0:1c:
1a:df:27:34:91:2e:bb:60:02:97:78:4f:7d:15:44:
09:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3C:50:35:14:86:B2:7E:CD:3F:D8:16:06:6B:FF:EB:72:3D:F0:77
X509v3 Authority Key Identifier:
keyid:00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:db:4f:50:b8:c0:e0:d7:88:3b:f7:8d:73:a6:2a:46:30:92:
53:0a:6a:a9:59:a8:e6:74:50:6d:41:3f:b5:15:e8:52:c5:f6:
51:36:23:37:03:09:9b:4a:14:ec:53:af:af:b1:c0:c2:17:d6:
52:55:60:07:a9:9d:fb:52:54:78:6c:b4:fc:67:19:fa:8a:a3:
66:c9:59:fa:4b:13:bd:8c:e6:5c:b4:a1:1c:40:14:1d:d5:1b:
d0:70:77:0e:94:80:ba:16:6a:01:5c:8b:97:e1:34:51:54:90:
1d:6f:d7:81:8a:ac:ba:82:c0:5d:58:41:46:e1:44:89:12:38:
29:4b:ce:91:d1:e9:b3:f3:1d:05:ad:00:aa:fc:ec:64:ac:c2:
45:25:a1:27:5e:fe:fb:b5:32:98:64:83:b4:93:2b:48:85:14:
39:8e:ca:d1:11:c8:55:fd:7b:7a:a4:14:9e:ab:f0:07:10:59:
af:54:9e:56:18:b8:b1:0d:83:9e:77:1e:48:ad:e8:a1:93:81:
82:2a:a4:5b:42:43:b1:eb:a1:32:df:69:55:36:5b:5a:db:4e:
23:43:67:9c:c5:51:0b:a6:4d:fe:09:03:f0:2f:3a:e3:a3:a6:
db:ef:1d:c5:4a:47:b6:d1:4b:c5:4a:92:1a:fa:50:22:b0:ca:
a5:b4:89:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:44:40 2026 by rpki-client