Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
File: AjmkC--TBDjVPNB_B_-RU-L7m-g.mft (raw, json)
Hash identifier: nZiUUlWg30tQzU+TCwQha7O/6nUmK13j7OUzriV9pzs=
Subject key identifier: 9F:AF:F2:BB:5A:FB:CD:A0:17:29:CD:2C:86:A5:15:A7:B9:4F:65:61
Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
Certificate issuer: /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Certificate serial: 019E30A9A380679AF3672EC98A19643C9DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
Manifest number: 190F
Signing time: Sat 16 May 2026 12:01:24 +0000
Manifest this update: Sat 16 May 2026 12:01:24 +0000
Manifest next update: Sun 17 May 2026 12:01:24 +0000
Files and hashes: 1: AjmkC--TBDjVPNB_B_-RU-L7m-g.crl (hash: p+eK7uY7uUYhISU35MddknQLfzE1WPnVL8mDNtG6oMo=)
2: ffQqOYtzV0vtgYfe4tRpGeFzilA.roa (hash: VIsXjcMNaGxYTFvRgl1kJIXozlkVcFZu20HsFS54hDw=)
3: oQoGly6H1aU6gPqZyv63fmxfuls.roa (hash: HFBXjpuNtU3gtEXtIbxcM+R57+FtVsV/NiORC3XZhIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:a3:80:67:9a:f3:67:2e:c9:8a:19:64:3c:9d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Validity
Not Before: May 16 12:01:24 2026 GMT
Not After : May 17 12:01:24 2026 GMT
Subject: CN=9faff2bb5afbcda01729cd2c86a515a7b94f6561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:3a:5e:54:7d:cb:97:52:77:1a:5c:10:47:
59:d5:1e:d7:1e:d4:e1:23:23:4f:43:f8:ea:a9:4a:
61:84:99:f9:0d:88:3f:b0:46:4a:35:28:8a:12:c3:
cc:41:37:16:65:f9:91:37:ae:97:9c:8e:4b:20:c1:
16:8b:69:ec:03:d2:bb:05:69:70:c0:7a:4b:fc:69:
cc:ea:1d:09:30:f5:35:e2:fb:82:37:4e:e6:8b:68:
c5:b0:9e:ea:fc:5e:24:7c:72:33:64:86:fa:cb:63:
1c:39:2a:5c:99:79:c9:1b:49:9e:bd:0e:02:50:ef:
72:57:e9:a2:9c:24:66:d6:56:c3:70:33:6b:c5:93:
cf:90:98:a0:0e:13:ab:1f:5c:eb:1a:75:9f:39:23:
57:64:cb:2c:96:a1:3d:0c:1d:48:c9:7a:74:03:ae:
01:90:d3:dd:9f:26:b1:af:64:58:21:7d:34:b3:7b:
35:33:e8:04:1a:50:b4:42:b9:79:5f:dd:9c:92:b5:
7b:1d:e0:17:c5:01:74:d6:1f:61:5f:ea:e1:cb:02:
d0:db:99:a1:c7:a0:cb:56:64:7c:b8:81:02:e3:a9:
4f:9b:ee:fc:e7:ed:f7:d7:68:75:2a:3e:10:cb:0a:
df:e4:9d:a3:6f:d7:5e:dd:77:e3:ec:ee:ec:c6:b6:
5c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AF:F2:BB:5A:FB:CD:A0:17:29:CD:2C:86:A5:15:A7:B9:4F:65:61
X509v3 Authority Key Identifier:
keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9c:4a:09:1d:ff:c6:fe:21:41:d1:02:fe:7d:4a:32:3e:6c:
55:f4:10:99:b7:79:a2:fe:ab:0b:a3:d7:3f:55:60:6f:f5:85:
f7:a0:f2:63:fa:6c:39:de:33:51:c6:4a:37:55:88:0a:7e:bd:
d0:5d:fc:2c:35:5c:5d:98:7f:01:94:ca:3e:0a:5e:07:e4:fa:
9e:7a:a3:35:b1:52:23:e2:35:9e:3b:1f:25:40:e1:66:04:ec:
62:67:a3:70:1b:13:09:13:64:d1:6f:07:74:3e:f3:3b:80:25:
ce:57:eb:14:f3:34:5d:40:16:6b:11:2e:b8:0e:59:45:e5:a1:
51:7a:c2:36:2b:d0:74:59:b6:63:3d:3f:00:7b:49:d5:89:a5:
76:04:31:bc:77:bb:28:8b:38:75:53:9f:fe:31:54:0f:ee:9e:
b4:9e:11:23:18:2f:14:86:97:72:31:91:de:db:42:9a:58:cd:
99:11:f2:7c:33:32:1d:35:2d:74:3f:77:e8:0d:1d:e9:38:61:
5e:bd:88:4a:76:41:d4:45:89:b2:68:a9:6e:2e:0c:d8:f7:46:
02:ae:a1:0d:06:fc:5b:f6:eb:fb:41:b1:2a:d3:d3:76:4c:16:
35:4f:3e:26:6f:7a:35:24:06:e6:e4:42:f6:e9:e7:3f:f2:14:
b3:03:08:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:46 2026 by rpki-client