Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
File: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft (raw, json)
Hash identifier: SIxeduFvMh39dDUuu0211jqSLDJDglB7IpgNfrTTPvo=
Subject key identifier: 15:F2:B8:2C:8E:A7:CE:A9:54:C4:A5:38:E1:1B:EA:DF:7A:F1:09:D8
Authority key identifier: 68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
Certificate issuer: /CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Certificate serial: 019D37F6EA22379FED8ACB8F7E79BBAE67DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:21 +0000
Manifest this update: Sun 29 Mar 2026 05:00:21 +0000
Manifest next update: Mon 30 Mar 2026 05:00:21 +0000
Files and hashes: 1: aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl (hash: 5R6QpDfgkcmPJL+X9LeHRVrygol7akOVW+c0iuzV1nQ=)
2: v-TmHwjxUWpO-4ZUjxFr5yXA82g.roa (hash: liANJtLZlExcLcM+/+8RAHwNizw5D6GQaPEdxWVRWPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:ea:22:37:9f:ed:8a:cb:8f:7e:79:bb:ae:67:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6893188ebfce20e5bc53f3acf57f407d9e57ac17
Validity
Not Before: Mar 29 05:00:21 2026 GMT
Not After : Mar 30 05:00:21 2026 GMT
Subject: CN=15f2b82c8ea7cea954c4a538e11beadf7af109d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:be:4a:a7:05:96:f0:10:19:27:67:72:a4:
5c:3e:59:cf:87:a4:e3:47:95:65:5e:bd:43:9d:81:
a0:52:48:d2:64:cc:79:4f:41:7d:2f:59:3e:53:6f:
5c:03:ad:06:21:2d:aa:b6:44:2c:69:93:4a:d2:de:
7e:15:bc:a6:3d:e7:54:ae:45:b5:90:90:4c:26:11:
9d:b9:68:b2:a3:d8:49:12:38:16:65:cd:b7:38:cf:
9b:2b:05:55:40:82:8d:92:d0:12:bd:2a:44:ea:f4:
28:78:a5:a1:38:7c:5a:b7:fd:ed:cf:07:a9:7c:61:
ef:4d:5c:27:b8:09:e8:df:f1:9b:d4:81:6e:76:c3:
6b:f7:d4:20:19:e0:52:7c:34:ad:ae:e9:d2:b5:fe:
cb:4b:bf:8c:0d:a2:f1:d2:4f:30:f2:56:74:a9:19:
a9:01:9d:ec:da:6f:d9:f8:a3:50:7d:70:d3:36:8b:
28:d5:93:f5:4e:29:77:44:2a:34:8b:31:bb:f6:7b:
99:02:5b:4e:ef:5c:96:a8:1c:42:65:d9:c0:28:5c:
39:8b:3a:d3:9c:18:98:17:0b:0a:09:47:21:2c:bd:
44:f5:59:8b:bd:a0:86:49:bd:56:cb:23:88:f2:ae:
92:6e:b9:e9:68:6f:ff:fb:ee:fb:a5:9b:3e:24:22:
09:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F2:B8:2C:8E:A7:CE:A9:54:C4:A5:38:E1:1B:EA:DF:7A:F1:09:D8
X509v3 Authority Key Identifier:
keyid:68:93:18:8E:BF:CE:20:E5:BC:53:F3:AC:F5:7F:40:7D:9E:57:AC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c32ed5-7a1b-4f26-ad3f-2d2b4f70c3a3/1/aJMYjr_OIOW8U_Os9X9AfZ5XrBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:49:b7:af:e1:26:c2:5a:9b:0e:9b:3b:22:22:5c:bf:81:ee:
5c:0a:d0:e4:92:18:23:39:83:ec:19:c4:e3:2b:48:c3:9b:d8:
fc:25:56:9d:a4:4a:1d:da:de:b7:3d:ad:bb:da:ee:07:91:00:
f2:1b:f9:5d:90:2f:1f:7d:1e:59:38:87:e0:a7:8c:e2:fc:b2:
f0:1c:0e:3a:bf:45:d1:a6:eb:57:0b:b4:79:ad:ee:55:21:e1:
3e:2b:30:9b:aa:48:e0:f0:be:4b:1b:83:f8:bb:a8:1d:ea:0a:
fa:91:ce:54:ac:a5:79:19:b7:b4:44:ef:4b:c0:2b:cf:06:4e:
9b:76:54:08:bf:b8:5c:e7:f2:dc:ee:4f:19:e7:5b:e4:c5:be:
a5:59:d7:c0:01:97:a4:0f:fd:a7:6d:ec:60:23:75:9b:98:24:
df:52:10:b9:1a:25:d7:90:1d:36:08:11:87:f9:22:f6:52:00:
8c:30:cd:f4:58:d1:4c:83:b2:c4:b3:29:42:d4:6f:58:10:95:
9a:2e:90:96:96:ff:e1:d8:8f:c6:5d:58:73:b9:ae:8c:ce:16:
1b:da:2f:b5:0f:a7:e9:7b:5f:59:0d:d0:c7:f6:96:d2:f0:a5:
27:ba:b1:af:1f:19:84:e0:f5:6b:3d:bd:f8:89:60:e5:13:66:
12:e5:9f:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039uoiN5/tisuPfnm7rmffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTMxODhlYmZjZTIwZTViYzUzZjNhY2Y1N2Y0MDdkOWU1
N2FjMTcwHhcNMjYwMzI5MDUwMDIxWhcNMjYwMzMwMDUwMDIxWjAzMTEwLwYDVQQD
EygxNWYyYjgyYzhlYTdjZWE5NTRjNGE1MzhlMTFiZWFkZjdhZjEwOWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1m+SqcFlvAQGSdncqRcPlnPh6Tj
R5VlXr1DnYGgUkjSZMx5T0F9L1k+U29cA60GIS2qtkQsaZNK0t5+FbymPedUrkW1
kJBMJhGduWiyo9hJEjgWZc23OM+bKwVVQIKNktASvSpE6vQoeKWhOHxat/3tzwep
fGHvTVwnuAno3/Gb1IFudsNr99QgGeBSfDStrunStf7LS7+MDaLx0k8w8lZ0qRmp
AZ3s2m/Z+KNQfXDTNoso1ZP1Til3RCo0izG79nuZAltO71yWqBxCZdnAKFw5izrT
nBiYFwsKCUchLL1E9VmLvaCGSb1WyyOI8q6SbrnpaG//++77pZs+JCIJWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBXyuCyOp86pVMSlOOEb6t968QnYMB8GA1UdIwQY
MBaAFGiTGI6/ziDlvFPzrPV/QH2eV6wXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpNWWpyX09JT1c4VV9PczlYOUFmWjVYckJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMzJlZDUtN2ExYi00ZjI2LWFkM2Yt
MmQyYjRmNzBjM2EzLzEvYUpNWWpyX09JT1c4VV9PczlYOUFmWjVYckJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jMzJlZDUtN2ExYi00ZjI2LWFkM2YtMmQyYjRmNzBjM2Ez
LzEvYUpNWWpyX09JT1c4VV9PczlYOUFmWjVYckJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkm3r+Em
wlqbDps7IiJcv4HuXArQ5JIYIzmD7BnE4ytIw5vY/CVWnaRKHdretz2tu9ruB5EA
8hv5XZAvH30eWTiH4KeM4vyy8BwOOr9F0abrVwu0ea3uVSHhPiswm6pI4PC+SxuD
+LuoHeoK+pHOVKyleRm3tETvS8ArzwZOm3ZUCL+4XOfy3O5PGedb5MW+pVnXwAGX
pA/9p23sYCN1m5gk31IQuRol15AdNggRh/ki9lIAjDDN9FjRTIOyxLMpQtRvWBCV
mi6Qlpb/4diPxl1Yc7mujM4WG9ovtQ+n6XtfWQ3Qx/aW0vClJ7qxrx8ZhOD1az29
+Ilg5RNmEuWflw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:22 2026 by rpki-client