Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier: tPbJ01+lXcaqvd5K7jMDro053jOaVMgRGORgXPpAZxY=
Subject key identifier: 69:0E:26:79:AE:5E:47:C3:78:88:C1:33:E5:82:0C:9C:39:33:C1:CD
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial: 019E30057FB6E04DB8040A51C751ACEB0EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number: 132C
Signing time: Sat 16 May 2026 09:02:07 +0000
Manifest this update: Sat 16 May 2026 09:02:07 +0000
Manifest next update: Sun 17 May 2026 09:02:07 +0000
Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: SCZEC1jLSG5bQVP+XfdgueYNo0H5mOav2clOgFrRQAU=)
2: Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa (hash: YCd6cvHJBCdabpC8lbHyTL8mL5CdagCiCJRtT8E/huA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:7f:b6:e0:4d:b8:04:0a:51:c7:51:ac:eb:0e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
Validity
Not Before: May 16 09:02:07 2026 GMT
Not After : May 17 09:02:07 2026 GMT
Subject: CN=690e2679ae5e47c37888c133e5820c9c3933c1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:25:87:51:1c:f4:2a:ad:28:15:85:68:01:
96:8d:46:95:2a:94:7c:56:75:e8:28:86:13:db:9a:
63:1a:e3:2f:ff:f2:f8:e6:3c:cd:c2:e4:85:11:bf:
38:49:db:73:2e:92:a4:b0:2d:26:5d:df:52:e5:d4:
56:54:9d:18:1c:5e:cf:52:f0:a3:ec:fa:9d:4f:71:
a1:e5:08:d9:7a:2e:cb:1f:f0:22:df:88:01:3e:15:
f2:c6:0e:cb:a4:f5:55:4c:25:d6:97:3e:3e:7a:db:
39:4d:ee:78:ea:9f:54:e1:93:d4:59:90:b0:c8:fc:
e3:86:d6:fc:e9:3b:de:32:79:05:e5:7b:9f:25:4f:
eb:0f:3e:53:05:b3:b2:b1:92:ee:02:df:8b:3b:59:
17:4d:52:00:79:39:4f:36:c0:f0:60:5e:35:50:52:
1d:a4:61:3c:3a:f1:7c:2c:8d:07:e2:03:6f:95:d1:
0d:54:c8:a7:50:fa:68:4d:c8:10:99:9e:c6:7d:06:
e7:e5:68:3f:29:05:2a:b5:98:95:1c:4e:2e:b1:8b:
ad:f4:d5:ad:23:eb:03:c3:a0:69:cb:aa:71:95:ff:
01:b3:de:14:b3:8a:aa:a6:de:42:28:bd:ba:7f:30:
c1:97:cf:50:b3:b9:f2:e8:a3:32:a8:ad:fa:27:ad:
89:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0E:26:79:AE:5E:47:C3:78:88:C1:33:E5:82:0C:9C:39:33:C1:CD
X509v3 Authority Key Identifier:
keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:df:cc:d7:13:45:7d:53:a6:9b:33:75:50:0c:8d:1c:1a:a8:
e8:62:5f:d8:4f:36:fe:f8:10:f0:ee:8b:cf:54:05:72:57:ed:
d5:93:06:ed:34:96:d7:65:24:29:75:e5:d2:3c:2e:a1:7d:96:
ff:bf:dd:6f:45:6c:0d:b6:16:cf:26:19:65:90:cc:b8:77:0f:
cd:f8:cd:ab:60:5e:5a:d2:5f:eb:53:e5:4b:8a:4f:37:b2:e1:
22:77:58:ed:5a:e5:17:e8:b6:a5:62:bc:6b:7d:8a:64:dd:09:
17:b2:ca:3c:45:fc:77:e6:0e:7d:9e:4f:2a:ca:13:81:ee:6d:
5b:9c:c7:ee:0d:78:13:bb:e2:25:a0:36:5e:ad:5d:59:f7:0a:
09:df:b6:de:cf:84:3f:d4:52:a3:21:d9:e7:47:e9:d2:7d:7a:
ac:60:17:8e:38:55:bd:39:47:a4:a4:4a:03:1d:f0:30:f9:19:
d5:4a:a7:84:df:9b:53:1a:b1:f8:01:56:e7:d8:2f:dc:8d:8a:
d4:f1:85:67:10:3d:23:24:a8:6d:19:b6:ba:24:f5:3a:ee:93:
e1:9f:bb:af:ed:ad:da:13:a0:8b:1f:c3:62:f5:36:5d:d2:86:
22:92:f7:b4:73:d9:4a:62:38:a4:19:ba:8e:de:7c:63:30:d4:
ee:56:d0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:23 2026 by rpki-client