Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier: DM1yC7WMf0i4Z5D7s6Bwjfz7ibej5kfISHNG4uf/gG4=
Subject key identifier: 76:6F:D3:1E:77:33:AE:BA:46:28:8E:E6:44:56:05:EB:14:82:19:54
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial: 019D38D3A54DF4583BFD9E5FF5F229962CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number: 12AC
Signing time: Sun 29 Mar 2026 09:01:27 +0000
Manifest this update: Sun 29 Mar 2026 09:01:27 +0000
Manifest next update: Mon 30 Mar 2026 09:01:27 +0000
Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: 0VOVOorVEmBuBRB5IlCrf2bbJaVwAhl+F0jgYZNvAsI=)
2: Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa (hash: YCd6cvHJBCdabpC8lbHyTL8mL5CdagCiCJRtT8E/huA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a5:4d:f4:58:3b:fd:9e:5f:f5:f2:29:96:2c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
Validity
Not Before: Mar 29 09:01:27 2026 GMT
Not After : Mar 30 09:01:27 2026 GMT
Subject: CN=766fd31e7733aeba46288ee6445605eb14821954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:a4:e3:80:9b:7a:f4:78:2f:77:39:2f:18:
f0:89:bd:1d:e7:52:d2:e6:3f:57:3e:c5:97:3e:d2:
35:6f:28:e1:6e:54:b9:e1:30:38:22:7c:b2:3d:4f:
87:58:d2:b8:b9:78:03:77:38:1e:5b:10:3a:ba:fc:
c5:dd:e0:58:29:d4:96:ca:2a:0b:17:7e:29:f5:d6:
d0:40:d9:d4:5a:09:42:23:fa:94:22:1d:2b:6f:01:
b9:6c:16:1f:00:99:dd:c9:f0:0c:8c:43:79:ba:cc:
17:36:bc:7f:ba:e0:4a:c7:ba:46:30:7c:84:46:92:
a8:69:71:36:8f:80:a7:b6:c9:10:66:a4:99:ba:30:
87:e4:d6:42:b9:9a:fc:38:fa:c6:d2:7e:6b:6a:ee:
6a:d4:4b:ff:4b:4c:fa:26:61:5a:8f:0b:cc:80:31:
00:ca:63:72:4d:21:ba:c8:89:7e:41:69:8e:21:30:
c8:ab:cb:3f:6f:81:4f:d3:a1:aa:b9:58:77:9c:44:
87:72:0c:4a:d5:b2:d1:5b:9c:7c:65:fb:a7:4f:f9:
46:4f:37:a1:a8:52:b2:6e:ec:f1:4c:f0:70:e1:0e:
ab:94:f0:50:f6:38:b6:7e:a5:8e:55:e3:8f:d4:49:
55:2d:bf:ab:ce:9a:2c:bd:0b:a0:6b:8b:2a:ff:35:
b8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6F:D3:1E:77:33:AE:BA:46:28:8E:E6:44:56:05:EB:14:82:19:54
X509v3 Authority Key Identifier:
keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f9:ca:04:a3:17:0a:cd:8f:17:7e:4a:48:67:63:b5:0a:a8:
c1:37:f2:8c:77:31:1d:1f:76:9e:5a:85:e0:a0:f1:e1:48:8e:
f9:16:a7:a0:33:30:88:b5:b8:76:ba:7e:eb:81:56:0e:3e:34:
a4:11:ea:ce:e3:1b:af:e2:e7:93:78:70:8c:4f:87:31:07:8b:
92:16:2a:c8:d3:a3:d6:b3:05:99:34:96:7e:80:c5:5f:17:2f:
0e:bb:d1:ff:c1:1e:da:0e:34:0b:28:fc:0f:6e:46:79:95:b2:
ad:a4:49:af:b1:e2:e1:5f:8d:b0:c8:31:e1:63:f8:22:5c:4e:
5d:8a:8f:1b:8e:6c:4a:97:8f:9f:74:e9:05:bb:1f:1f:1a:81:
04:8b:cc:c0:9a:c2:a8:f0:49:fe:e5:1f:72:06:45:ef:db:4f:
eb:5d:dc:5a:fb:42:d3:ad:25:77:c5:af:e9:20:83:da:bf:54:
22:c8:f2:c7:57:dc:c4:a3:fc:14:4a:6e:21:30:30:64:85:f8:
50:29:5e:34:d2:aa:a7:11:41:20:50:7e:76:5c:bc:a8:73:47:
17:1b:66:c7:34:78:ab:43:b3:19:3e:57:11:d2:01:f3:df:f8:
33:f0:57:d9:5c:be:24:b7:93:e6:ca:bd:0a:f4:fc:b1:11:26:
63:19:30:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:32 2026 by rpki-client