Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
File: AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft (raw, json)
Hash identifier: CWkFD8L5+xjxEAKZjAvh+QNk/T53kNz5G0erTiBMDk0=
Subject key identifier: BF:7F:E3:9A:D2:D7:B3:64:A0:8F:FA:5E:16:EE:52:FA:82:69:26:52
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial: 01A094D8DA79DD11F9866E5E3F09DF3452EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
Manifest number: 1A52
Signing time: Sat 12 Sep 2026 09:00:34 +0000
Manifest this update: Sat 12 Sep 2026 09:00:34 +0000
Manifest next update: Sun 13 Sep 2026 09:00:34 +0000
Files and hashes: 1: AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl (hash: 6a07Sq2bOuWyx1O8Pk5U0LA3LwEBFAwOxMFLpVZ7MfU=)
2: NbLi_mxC3E76Yv1xWLA3LvUWMPk.roa (hash: 41ZTj79rHdcbi2jDyyFI5602VPH0KxIVb+GgQmVExmY=)
3: n00gLZ8RizHXHcJP8n5U2lkHl_0.roa (hash: 7x9iUpgLpEtIBExQu4BUBe9xIOIqTpL6nc56pdzzQrE=)
4: xgVgpw4XtUpimdfPBGzbbCtU1Z8.roa (hash: n/FpmazjblwI/DOGbFxfAt6xbYD4J5uzhPRONKeYoOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:d8:da:79:dd:11:f9:86:6e:5e:3f:09:df:34:52:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Validity
Not Before: Sep 12 09:00:34 2026 GMT
Not After : Sep 13 09:00:34 2026 GMT
Subject: CN=bf7fe39ad2d7b364a08ffa5e16ee52fa82692652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d2:29:f0:1b:5a:4e:c6:f6:ff:a0:c8:48:dd:
02:5e:24:ff:02:88:43:08:97:01:86:0f:89:48:18:
8b:37:ea:f1:cc:ec:89:ef:5e:41:d2:a6:c7:1e:c7:
c3:53:73:de:63:4f:98:11:16:4c:37:e9:2d:2f:0b:
9c:53:b5:53:0a:18:7b:9b:db:cc:e7:d7:33:fb:84:
5f:8c:cd:10:26:7a:c5:40:4b:09:c6:f0:a6:36:f0:
34:a3:31:a8:75:91:6c:98:65:ce:b9:92:e3:20:a5:
d3:47:40:54:69:11:8b:2d:20:eb:a2:06:f8:5c:71:
21:82:e3:f0:da:e2:52:ae:8f:91:fb:21:6c:1b:00:
8e:ce:ed:34:02:ae:c5:59:e8:66:12:89:86:f8:e2:
74:04:f0:12:07:f3:97:01:48:8f:5c:21:02:c0:71:
64:a3:f3:f8:1b:16:f7:99:b8:be:d8:d6:c9:3d:4a:
f7:aa:ac:bc:7e:9b:d9:80:bd:67:2a:5b:2e:c3:69:
50:fd:1d:2a:9c:17:ee:fd:d5:db:8d:fb:6e:94:11:
53:b5:c3:f4:a7:30:f4:3f:95:9b:2c:4d:6b:b8:dd:
9d:7d:74:e5:58:c5:4c:49:14:ca:6c:17:17:4c:83:
4a:c2:b3:e2:00:c1:41:5d:ff:ef:d1:1d:65:02:76:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7F:E3:9A:D2:D7:B3:64:A0:8F:FA:5E:16:EE:52:FA:82:69:26:52
X509v3 Authority Key Identifier:
keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cd:93:3e:3d:aa:35:ec:d9:2f:fa:6c:14:a8:f9:45:81:24:
ca:3d:b3:bb:66:0b:b8:d2:b6:ec:33:b4:b1:b6:17:0c:28:11:
13:42:a9:e1:a4:40:10:57:b7:8a:aa:54:70:c6:e0:e5:be:1b:
5d:8d:01:05:d6:f8:a9:cf:d8:b4:e3:da:ed:5a:86:5f:40:95:
29:ec:ec:0f:5d:8a:0c:d8:f6:d3:e4:5e:e1:03:f7:cf:57:4e:
fb:a2:01:fe:1a:8d:64:1c:ff:b9:a8:79:ea:69:77:0d:fd:fd:
74:b8:03:7e:e4:b3:19:11:c1:39:ac:80:4c:9b:b6:f0:9f:20:
eb:58:41:f8:2f:15:fd:e2:36:cc:2d:a6:db:21:8c:3e:7c:3d:
c4:c8:d8:f6:8f:a2:5c:9e:d0:18:29:df:14:1b:fe:e2:59:72:
72:04:a0:e0:74:ba:d5:23:3d:a0:1b:a6:3b:81:42:18:42:91:
b6:2c:7b:10:7f:9a:74:92:9c:b9:c3:63:d1:0d:c3:bd:27:46:
26:27:f6:27:ef:42:4d:4b:ea:41:37:74:3c:f3:51:56:29:fd:
35:f7:83:bb:4e:98:cf:a9:0b:7d:5e:7a:17:4b:d0:3b:55:2b:
39:17:f0:02:5d:69:d9:fd:3f:1f:e9:9a:28:b6:a7:61:63:1e:
05:1f:6c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 13:38:51 2026 by rpki-client