Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
File: AJJn8-O54eu5eZaQgLDfqyTDYBo.mft (raw, json)
Hash identifier: b67LZT8CXVUUWgj2HU/9C/ZvuBBAOL+gQ98Hyd5cydM=
Subject key identifier: E5:B3:23:1C:AD:8B:E4:28:E2:AC:60:BA:1D:5E:68:64:61:8A:91:32
Authority key identifier: 00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
Certificate issuer: /CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Certificate serial: 019D27728A3D771F89F686BF1DCA04977637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
Manifest number: 0459
Signing time: Thu 26 Mar 2026 00:01:51 +0000
Manifest this update: Thu 26 Mar 2026 00:01:51 +0000
Manifest next update: Fri 27 Mar 2026 00:01:51 +0000
Files and hashes: 1: AJJn8-O54eu5eZaQgLDfqyTDYBo.crl (hash: RCPYgpXn62QzxDnqbjR6RDRzRGd0xJdwsLs435z/4+c=)
2: d9OmlBe2GpKLvl3u0mUGOFIDWgo.roa (hash: Ba/7rGgRRFa7/HkHrFHCRps9ypeyWifGgSmqxh5y+b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:8a:3d:77:1f:89:f6:86:bf:1d:ca:04:97:76:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Validity
Not Before: Mar 26 00:01:51 2026 GMT
Not After : Mar 27 00:01:51 2026 GMT
Subject: CN=e5b3231cad8be428e2ac60ba1d5e6864618a9132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:33:00:70:43:ef:97:76:f0:56:fc:8a:df:da:
b3:f0:98:f9:9c:59:40:16:2b:86:bd:c9:af:06:39:
3a:11:39:9f:b1:5c:df:8d:e9:2e:1f:7f:a1:18:66:
3c:c1:50:bd:c2:09:b1:df:6f:86:e9:95:65:87:f9:
4f:0f:6c:e6:85:8d:1d:3e:ce:7d:9d:5a:be:b3:aa:
e0:b5:b5:d5:af:8f:9f:d8:53:d6:a2:94:26:73:1d:
34:4a:17:c5:20:c0:ad:c8:69:6c:26:36:cb:90:04:
c6:ce:a4:b8:89:32:d1:5d:c1:db:a5:74:34:03:12:
aa:50:e0:4e:43:f0:78:85:32:3d:59:1b:e9:3f:26:
b4:f9:b6:b4:32:9b:52:a5:67:22:99:76:89:f0:9e:
a1:9b:22:2a:b4:ba:30:a8:9b:cc:c5:eb:5b:5a:50:
12:c2:2f:8b:8d:89:73:2d:c5:ab:67:21:9d:43:6f:
12:ab:e1:67:4a:07:d3:ab:cc:80:4f:cb:05:fb:ee:
19:28:65:02:e1:88:4e:48:d6:77:70:c8:48:25:48:
5e:81:28:e7:3a:61:dd:9d:c9:b0:e3:c4:1a:ca:42:
ee:e2:42:3b:96:2c:da:ca:96:e5:4f:24:fe:68:da:
cc:eb:65:6d:2b:0c:78:8c:af:05:83:b2:09:85:42:
17:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B3:23:1C:AD:8B:E4:28:E2:AC:60:BA:1D:5E:68:64:61:8A:91:32
X509v3 Authority Key Identifier:
keyid:00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:0a:bd:a3:f9:ca:5a:76:6e:fd:73:b9:db:ce:fc:f3:8d:af:
40:5a:df:64:9b:6b:2c:b5:db:ef:e8:2d:89:3f:98:28:d9:c9:
b9:e1:63:3f:7c:eb:60:5d:f7:90:b4:48:c4:6c:f4:4a:a5:dc:
4a:c1:c8:19:8a:1e:da:6f:4d:f8:9c:3e:da:67:35:08:8a:8f:
bb:47:e6:39:fe:a9:8f:9c:14:2d:ce:58:3b:f2:2e:5a:be:33:
2e:be:4e:86:cd:19:2d:6b:be:72:c0:52:c8:1f:19:24:ef:d4:
08:d6:ec:17:9f:bf:01:79:c4:22:e7:80:6a:8f:52:af:5e:e2:
10:06:a7:66:a7:1b:da:ca:bd:22:d2:2a:ab:2e:c9:15:bb:e5:
ee:d1:e0:96:14:28:22:37:72:d7:c6:03:6f:1d:eb:b2:0e:bf:
ae:47:cd:7f:c2:b7:af:d1:db:5b:76:2f:8b:5c:75:14:fb:c6:
0a:48:d0:1d:ab:c1:22:83:6d:8d:8a:be:e3:f9:a3:a1:53:ce:
3f:66:3f:39:e8:e7:a8:94:ce:08:c4:a3:85:8a:94:38:5c:17:
eb:15:2a:16:70:47:5a:b9:da:63:a1:56:b7:4e:c2:a7:6f:47:
ae:53:81:0f:a5:3c:06:3b:e0:2a:cf:3f:99:66:dc:06:87:f3:
8a:1e:2d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:31 2026 by rpki-client