Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
File: aajmjRKuKTryNpBDzVmgINrCQGI.mft (raw, json)
Hash identifier: HpWoEyoB+DbdiYeDHgY+VelAW9nuW9Gznhvhad3k75s=
Subject key identifier: FB:42:0B:D4:7A:5D:FF:94:98:E5:DD:6C:38:42:96:4D:5E:3A:F2:BD
Authority key identifier: 69:A8:E6:8D:12:AE:29:3A:F2:36:90:43:CD:59:A0:20:DA:C2:40:62
Certificate issuer: /CN=69a8e68d12ae293af2369043cd59a020dac24062
Certificate serial: 019FA373451790DFA4098A7FC3734D5A6256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
Manifest number: 0EC2
Signing time: Mon 27 Jul 2026 12:01:08 +0000
Manifest this update: Mon 27 Jul 2026 12:01:08 +0000
Manifest next update: Tue 28 Jul 2026 12:01:08 +0000
Files and hashes: 1: aajmjRKuKTryNpBDzVmgINrCQGI.crl (hash: 0qheryYT+1fzFnNoG3axfAGaF+rkM/CE7rWyxcbVPdk=)
2: yXkD904wFbX88UGQ5CKmV5wKmSY.roa (hash: lYxnL52wtUr2micMeYUTFrTapb4xBck2cprtfMipDjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:73:45:17:90:df:a4:09:8a:7f:c3:73:4d:5a:62:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a8e68d12ae293af2369043cd59a020dac24062
Validity
Not Before: Jul 27 12:01:08 2026 GMT
Not After : Jul 28 12:01:08 2026 GMT
Subject: CN=fb420bd47a5dff9498e5dd6c3842964d5e3af2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:38:bc:21:66:f4:5c:43:d9:08:05:f0:ec:
9c:c6:fb:e8:ea:8a:6e:09:ef:2a:11:3b:96:ee:e3:
41:2c:59:c4:c1:6b:df:cf:26:6b:e3:bf:3b:90:f8:
0e:cf:fa:92:2c:c0:ed:70:2d:ca:f9:36:c4:ce:09:
ee:24:7c:af:cf:40:e7:48:70:70:15:dc:84:65:fe:
fe:4b:39:b6:06:04:fe:6f:09:0b:18:2c:be:0d:f4:
86:dc:f8:d2:83:f2:cb:ea:f7:34:41:3c:c0:38:2e:
ce:65:53:c6:88:88:65:36:a2:75:ed:10:d4:aa:8c:
2f:0a:18:86:ba:5b:1b:c3:37:a1:51:97:97:fc:78:
d0:1e:c2:e0:43:a4:c5:cc:a7:fd:16:1a:3a:9e:3a:
05:b3:92:64:fa:9d:b9:e7:82:33:5a:47:45:a4:6f:
93:70:d4:21:97:8d:a9:5e:37:05:ca:de:69:bb:03:
26:95:29:47:15:fd:fc:0a:67:7a:04:bd:65:eb:25:
83:c4:af:8c:ec:a8:0c:f9:93:1f:fb:2c:cd:0b:5a:
75:7b:7a:26:43:e5:c2:fa:9b:17:e0:fa:51:3a:3e:
37:2d:6b:2a:fc:da:f1:4e:b8:70:85:f3:0c:8b:9b:
aa:b0:5d:89:b9:6d:bc:9e:da:f8:0a:2f:2a:4a:b8:
ac:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:42:0B:D4:7A:5D:FF:94:98:E5:DD:6C:38:42:96:4D:5E:3A:F2:BD
X509v3 Authority Key Identifier:
keyid:69:A8:E6:8D:12:AE:29:3A:F2:36:90:43:CD:59:A0:20:DA:C2:40:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:99:23:75:22:ca:df:de:ba:24:5a:2e:41:39:65:79:e7:0d:
32:a7:5d:41:6f:3c:bc:e4:4d:c9:d4:84:49:cf:e8:d0:6d:0a:
ea:03:fd:36:1f:cb:37:2e:1d:f2:51:6a:00:eb:62:f9:b5:c0:
7d:ec:5c:12:61:67:81:c6:f0:8b:a7:cc:6f:49:07:20:70:5a:
a3:1e:b7:7f:4c:5b:c2:b2:30:73:3e:d7:9d:fc:a9:97:88:6c:
65:dd:34:6d:0d:9d:6e:d8:e3:22:e4:32:8c:3e:24:b5:4c:da:
ab:6e:b1:60:c1:df:66:ed:ea:77:40:14:c3:ea:1d:67:39:2d:
69:aa:0f:06:a4:3f:61:1e:54:aa:36:eb:ae:49:4b:b2:78:30:
e9:a3:cc:3c:d6:53:ae:bf:55:86:08:47:11:99:00:f0:7b:ce:
1b:83:98:82:ec:a5:c6:c8:3f:ff:e1:ae:a2:01:97:f0:eb:94:
36:d4:95:9d:f0:6b:9b:97:0d:3e:16:91:7c:71:15:0b:a2:aa:
96:d0:39:a1:48:84:e3:6a:af:c6:dc:04:bc:56:53:44:15:45:
f7:65:cb:ee:e7:05:24:40:de:a2:04:53:f0:9e:af:c9:fb:ff:
eb:5d:74:4f:07:b5:ac:33:f2:02:fa:e1:da:dc:d9:92:e9:03:
1a:9b:34:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:16:43 2026 by rpki-client