Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
File: aajmjRKuKTryNpBDzVmgINrCQGI.mft (raw, json)
Hash identifier: Nh8e3Q1snYJ1pKi1v+Q/88hnEKHmNq9syjcw5/gXBXU=
Subject key identifier: 35:43:72:A8:62:C1:C7:84:C3:08:44:EB:FD:C5:8A:27:A8:4F:29:F9
Authority key identifier: 69:A8:E6:8D:12:AE:29:3A:F2:36:90:43:CD:59:A0:20:DA:C2:40:62
Certificate issuer: /CN=69a8e68d12ae293af2369043cd59a020dac24062
Certificate serial: 01A17C975A0A44D53AD2973EC809A044D77E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
Manifest number: 0FB7
Signing time: Tue 27 Oct 2026 09:00:56 +0000
Manifest this update: Tue 27 Oct 2026 09:00:56 +0000
Manifest next update: Wed 28 Oct 2026 09:00:56 +0000
Files and hashes: 1: aajmjRKuKTryNpBDzVmgINrCQGI.crl (hash: TiYehiMyNb4t+Aamkl+8dWSBpg7oLdN3QyX2a7fQnsk=)
2: yXkD904wFbX88UGQ5CKmV5wKmSY.roa (hash: lYxnL52wtUr2micMeYUTFrTapb4xBck2cprtfMipDjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:5a:0a:44:d5:3a:d2:97:3e:c8:09:a0:44:d7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a8e68d12ae293af2369043cd59a020dac24062
Validity
Not Before: Oct 27 09:00:56 2026 GMT
Not After : Oct 28 09:00:56 2026 GMT
Subject: CN=354372a862c1c784c30844ebfdc58a27a84f29f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:28:ed:b6:c8:ee:79:c5:8b:e5:c5:f2:af:
d8:57:c3:6b:d6:24:64:6c:62:2a:bf:fc:f0:37:32:
fc:1b:d3:d9:f2:c2:e2:3a:29:db:35:6e:bb:63:0e:
fa:5b:ca:ba:cd:80:cc:00:d2:63:e1:f8:c5:a6:cf:
48:c2:5d:85:f5:a7:c7:1e:0f:5a:3e:1a:38:ad:55:
61:93:b1:c6:35:7b:ca:1a:7f:ec:46:47:a9:54:cf:
4b:d8:38:db:3d:67:74:37:e5:4f:fa:76:c2:a2:f5:
f3:9a:18:ba:47:0e:dc:24:10:0f:c3:22:43:cb:56:
f9:a1:4d:8f:89:66:28:83:b6:6f:ab:f7:fb:5b:00:
de:12:98:be:11:e4:86:13:26:a1:d9:c1:f1:da:26:
94:4b:ec:3d:13:89:d2:7b:1a:cd:3f:09:e0:88:a1:
58:bd:19:34:09:d5:65:dd:11:47:3a:d1:9a:2d:1c:
00:54:60:c5:ff:ab:9c:ec:b7:e9:a8:b8:f4:22:f1:
86:59:f8:62:cb:4d:88:38:75:ed:a0:d3:a1:f3:0d:
53:f2:10:7f:52:f0:4e:fb:f9:81:7b:99:23:a6:1c:
3c:d7:09:e7:69:17:d2:64:eb:6b:b7:d9:63:a6:5b:
89:a7:b9:45:00:b4:c0:7e:b0:18:93:bc:9b:b8:61:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:43:72:A8:62:C1:C7:84:C3:08:44:EB:FD:C5:8A:27:A8:4F:29:F9
X509v3 Authority Key Identifier:
keyid:69:A8:E6:8D:12:AE:29:3A:F2:36:90:43:CD:59:A0:20:DA:C2:40:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aajmjRKuKTryNpBDzVmgINrCQGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/242faa-eae3-46a5-b774-38820548755c/1/aajmjRKuKTryNpBDzVmgINrCQGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:58:e0:61:ae:0e:3b:fa:2a:a1:8f:91:7d:c6:5a:21:d6:3f:
5c:3a:bd:17:b4:df:03:20:d0:9a:e9:7f:01:20:aa:69:b2:ce:
00:0d:88:9d:32:39:3d:e5:6d:ee:93:d7:27:24:45:2e:90:21:
7f:d5:e2:bb:a0:4d:59:8e:bb:91:67:67:59:38:8f:e7:e8:00:
33:61:bf:14:7d:54:7e:33:ca:cd:19:8b:60:14:5c:14:9c:c4:
c7:62:42:ea:9a:a2:f1:8f:be:24:21:af:75:e4:fe:8f:4d:04:
c0:8d:69:80:05:e8:a1:6e:0a:17:04:2f:21:59:a3:89:b6:c9:
a0:30:e6:d7:38:bd:ac:b3:9f:e0:69:39:8b:76:c6:b8:d4:75:
3d:f5:95:a3:1d:87:e8:2d:e3:8c:50:fc:54:08:f9:66:20:94:
20:98:42:6f:d6:83:b5:20:5b:b2:f2:af:24:f4:c8:e3:90:da:
42:8f:c9:68:75:35:fd:3f:d4:32:05:0c:29:4a:69:85:82:e4:
13:a8:f9:4e:74:ba:69:27:fd:48:f0:9d:23:ac:3d:d1:94:f2:
ec:88:e9:55:60:3b:6e:c6:f0:e3:d0:54:c8:7d:1a:0f:41:be:
a1:42:c4:15:f6:9e:44:fd:14:a4:5a:20:f5:6c:39:e5:8a:da:
ad:ac:01:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:30:09 2026 by rpki-client