Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
File: aajmjRKuKTryNpBDzVmgINrCQGI.mft (raw, json)
Hash identifier: R0J3J1sjGWM7rc+sWNPt9S+24lHbaHWJj/ZX+M7OOaA=
Subject key identifier: 4A:10:46:BA:A8:57:11:2D:53:AB:AE:C3:59:65:CB:0F:68:7F:FF:0C
Authority key identifier: 69:A8:E6:8D:12:AE:29:3A:F2:36:90:43:CD:59:A0:20:DA:C2:40:62
Certificate issuer: /CN=69a8e68d12ae293af2369043cd59a020dac24062
Certificate serial: 01A08D1FE2B577789AC50A7853DEF457717A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
Manifest number: 0F3B
Signing time: Thu 10 Sep 2026 21:01:12 +0000
Manifest this update: Thu 10 Sep 2026 21:01:12 +0000
Manifest next update: Fri 11 Sep 2026 21:01:12 +0000
Files and hashes: 1: aajmjRKuKTryNpBDzVmgINrCQGI.crl (hash: lPYsFNRhgtTTeXtDHgWGV9epz5z5CIPNlK3P465ZTgE=)
2: yXkD904wFbX88UGQ5CKmV5wKmSY.roa (hash: lYxnL52wtUr2micMeYUTFrTapb4xBck2cprtfMipDjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:e2:b5:77:78:9a:c5:0a:78:53:de:f4:57:71:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a8e68d12ae293af2369043cd59a020dac24062
Validity
Not Before: Sep 10 21:01:12 2026 GMT
Not After : Sep 11 21:01:12 2026 GMT
Subject: CN=4a1046baa857112d53abaec35965cb0f687fff0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:30:02:84:1b:ee:81:69:40:2b:83:53:d5:01:
91:22:22:9f:8f:0c:d4:d2:9c:29:83:a0:22:f5:82:
10:5f:bd:1c:dd:b6:dd:e6:14:cb:5e:36:d8:08:35:
32:ad:e5:cc:d4:30:a3:9e:fc:a5:3c:d0:77:15:84:
99:05:af:3c:a0:c0:8a:ad:d2:6d:1e:5f:c2:1e:fb:
40:76:d5:e4:73:4e:aa:7f:d4:ff:b6:98:bd:b2:93:
68:ef:d9:6b:7f:f4:5e:52:48:aa:f0:c2:8f:28:4e:
4f:ef:bb:ae:ff:80:98:38:a1:b6:7e:2a:da:58:36:
40:ba:18:c7:a2:2e:b3:72:90:5a:cd:84:8d:ad:12:
93:30:89:fe:84:42:54:c5:40:6a:0a:c7:8e:ab:0d:
06:63:d4:52:ec:9c:43:c6:9c:a7:6e:b8:33:98:94:
28:77:5a:4e:02:88:ef:b4:5d:38:b5:00:b1:a7:99:
4a:7e:73:c3:86:d7:f2:49:d4:45:5a:2e:bd:9d:16:
1b:33:0d:c8:d8:b8:50:d1:20:ae:2d:ac:97:d8:4d:
af:55:8c:45:fb:db:c8:5e:0e:58:a2:9e:ee:a2:bb:
b8:7b:7a:9a:d6:0e:40:a6:c8:6b:a1:6f:8c:97:f9:
24:89:da:21:7f:03:33:44:c2:66:d2:c2:d4:60:8a:
9a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:10:46:BA:A8:57:11:2D:53:AB:AE:C3:59:65:CB:0F:68:7F:FF:0C
X509v3 Authority Key Identifier:
keyid:69:A8:E6:8D:12:AE:29:3A:F2:36:90:43:CD:59:A0:20:DA:C2:40:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:51:be:72:91:b5:19:c9:ac:2c:bc:67:67:a8:0e:16:77:c9:
c0:0f:d7:14:8e:48:93:a7:c6:88:cb:46:dd:32:9d:4d:ce:9c:
dd:d4:78:55:66:47:2e:86:f8:9b:5e:66:90:6a:18:38:c3:8b:
c0:5d:d5:04:57:ba:59:b9:b8:a9:3e:00:35:e8:d2:44:6b:93:
2d:55:cc:cf:71:cc:58:95:a1:8b:07:37:b3:b1:af:7f:3f:d7:
90:88:5e:0d:a0:d7:19:58:48:dd:a5:d2:d6:00:74:db:fb:c8:
c3:c7:64:f6:ad:ae:75:73:63:d1:e7:f0:72:92:e1:9c:ff:92:
5e:e7:85:17:5b:79:2c:db:de:17:db:d4:d3:c1:9d:6d:bc:ef:
6c:6b:b7:67:62:43:c4:b9:18:11:30:66:73:70:cc:b7:70:c7:
36:90:0d:cd:bd:71:15:28:c7:4b:b7:cc:4b:45:c1:0f:d5:53:
1b:2d:f5:56:7b:67:cf:4c:b8:c6:6d:2f:f1:85:18:2c:46:57:
11:77:62:16:c8:64:06:90:07:30:43:90:b8:65:ba:48:2f:d1:
b5:48:10:45:5a:21:22:25:16:a4:41:d4:b9:b4:8b:72:63:81:
59:80:e2:41:e5:28:d4:fd:e6:08:b6:de:ca:d2:99:7a:47:32:
f4:49:aa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:53:48 2026 by rpki-client