Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
File: AjmkC--TBDjVPNB_B_-RU-L7m-g.mft (raw, json)
Hash identifier: OzcCgSvmt+EFMLxCw8VMvlBOu5MQbZlBjDTK4LQv890=
Subject key identifier: 1E:47:D1:8D:44:DF:74:14:ED:6B:43:E7:14:19:77:8F:CE:BE:1C:B3
Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
Certificate issuer: /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Certificate serial: 019D39781FEE7C6CB2B76C749B19D49D2EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 12:01:06 +0000
Manifest this update: Sun 29 Mar 2026 12:01:06 +0000
Manifest next update: Mon 30 Mar 2026 12:01:06 +0000
Files and hashes: 1: AjmkC--TBDjVPNB_B_-RU-L7m-g.crl (hash: Vczso3AV8npxv+8IaUAkKvVnKIzADpCnomipXPK16Gw=)
2: ffQqOYtzV0vtgYfe4tRpGeFzilA.roa (hash: VIsXjcMNaGxYTFvRgl1kJIXozlkVcFZu20HsFS54hDw=)
3: oQoGly6H1aU6gPqZyv63fmxfuls.roa (hash: HFBXjpuNtU3gtEXtIbxcM+R57+FtVsV/NiORC3XZhIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:1f:ee:7c:6c:b2:b7:6c:74:9b:19:d4:9d:2e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Validity
Not Before: Mar 29 12:01:06 2026 GMT
Not After : Mar 30 12:01:06 2026 GMT
Subject: CN=1e47d18d44df7414ed6b43e71419778fcebe1cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:0d:06:73:bc:c1:7b:0c:6e:5c:61:d4:6a:
e2:b8:e8:dc:24:04:45:b2:bd:ce:37:65:bd:e5:2f:
dd:4c:51:64:a1:ea:c5:cf:03:65:f9:24:bd:b7:13:
94:d2:a8:9c:12:72:0b:b8:d6:56:d6:12:7e:61:25:
57:fd:c7:91:b1:3f:37:46:7b:46:0b:ac:42:f1:51:
1a:5e:f5:e8:96:0d:eb:d9:79:37:16:1d:29:42:3c:
b0:c1:fc:19:11:24:d3:b4:eb:90:af:0d:27:11:6c:
96:17:69:24:21:b5:19:5f:00:18:3e:00:d3:75:fc:
b4:86:dd:08:1f:85:d6:a6:53:6b:d9:94:56:f6:1d:
ff:2a:a5:8d:07:ea:ca:92:77:b6:9e:57:35:b6:00:
96:7b:92:e1:6f:a7:55:cc:f2:9e:11:bb:93:75:df:
a7:b8:67:7d:d8:b8:fd:0e:15:a4:fb:b9:2a:ba:e9:
1e:74:08:c2:57:1c:8a:19:fd:51:d3:86:a5:53:7b:
5d:3e:48:21:99:2c:21:17:eb:ea:54:c2:a2:00:f0:
95:ee:9c:6e:39:cc:75:68:ed:0e:39:33:cd:e0:54:
48:b4:bb:6f:69:6e:b6:05:a6:db:ec:4a:36:39:f4:
1c:06:e1:bb:3e:0f:38:33:89:3a:31:74:a6:89:c8:
e7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:47:D1:8D:44:DF:74:14:ED:6B:43:E7:14:19:77:8F:CE:BE:1C:B3
X509v3 Authority Key Identifier:
keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2f:05:97:47:d7:b4:95:ad:f1:15:ae:c2:78:98:42:59:ca:
68:9a:41:d8:e2:bd:32:cd:9d:3f:bf:2f:9e:d1:45:cc:9f:b4:
25:02:09:f6:ee:65:07:6b:c0:16:43:bb:5e:78:d3:22:c1:47:
d7:64:e9:08:2f:ea:ee:90:3a:e9:fb:0a:fb:9e:57:3e:1a:cf:
7a:c7:2a:78:48:5b:e1:20:9b:fe:6f:1f:49:d7:f6:b1:0f:dd:
5f:16:fc:96:56:f5:a1:87:e3:20:91:93:a1:22:00:f2:8f:18:
4e:04:d6:b1:30:75:3b:06:cd:77:4e:55:9f:f7:b3:a6:24:a8:
9b:a9:b5:78:30:f7:9b:44:1c:3a:cf:4e:26:74:c9:6d:c1:a6:
44:2c:db:77:c5:b3:5b:bc:c9:a2:a2:10:ba:18:82:f5:42:82:
d6:67:72:8d:38:ab:61:76:0c:c3:e6:78:8b:ee:61:76:43:37:
96:6e:ec:e8:40:04:d3:a5:d6:e0:66:04:02:c9:9a:a8:82:cf:
52:9d:32:dc:b0:51:51:d4:0b:c3:60:90:91:5e:14:85:b6:39:
50:35:e2:5f:37:b5:dc:3c:bf:be:cd:2c:4d:fd:f8:14:52:3a:
9a:32:fe:f5:3f:82:69:94:46:34:3c:13:74:3b:38:87:f5:2e:
92:95:68:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05eB/ufGyyt2x0mxnUnS7GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzlhNDBiZWY5MzA0MzhkNTNjZDA3ZjA3ZmY5MTUzZTJm
YjliZTgwHhcNMjYwMzI5MTIwMTA2WhcNMjYwMzMwMTIwMTA2WjAzMTEwLwYDVQQD
EygxZTQ3ZDE4ZDQ0ZGY3NDE0ZWQ2YjQzZTcxNDE5Nzc4ZmNlYmUxY2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkINBnO8wXsMblxh1GriuOjcJARF
sr3ON2W95S/dTFFkoerFzwNl+SS9txOU0qicEnILuNZW1hJ+YSVX/ceRsT83RntG
C6xC8VEaXvXolg3r2Xk3Fh0pQjywwfwZESTTtOuQrw0nEWyWF2kkIbUZXwAYPgDT
dfy0ht0IH4XWplNr2ZRW9h3/KqWNB+rKkne2nlc1tgCWe5Lhb6dVzPKeEbuTdd+n
uGd92Lj9DhWk+7kquukedAjCVxyKGf1R04alU3tdPkghmSwhF+vqVMKiAPCV7pxu
Ocx1aO0OOTPN4FRItLtvaW62Babb7Eo2OfQcBuG7Pg84M4k6MXSmicjngQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5H0Y1E33QU7WtD5xQZd4/OvhyzMB8GA1UdIwQY
MBaAFAI5pAvvkwQ41TzQfwf/kVPi+5voMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpta0MtLVRCRGpWUE5CX0JfLVJVLUw3bS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZmNlY2QtMWI2Yy00YWU5LTlkMzYt
NmQzODEyYWE1ZWI1LzEvQWpta0MtLVRCRGpWUE5CX0JfLVJVLUw3bS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yZmNlY2QtMWI2Yy00YWU5LTlkMzYtNmQzODEyYWE1ZWI1
LzEvQWpta0MtLVRCRGpWUE5CX0JfLVJVLUw3bS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIy8Fl0fX
tJWt8RWuwniYQlnKaJpB2OK9Ms2dP78vntFFzJ+0JQIJ9u5lB2vAFkO7XnjTIsFH
12TpCC/q7pA66fsK+55XPhrPescqeEhb4SCb/m8fSdf2sQ/dXxb8llb1oYfjIJGT
oSIA8o8YTgTWsTB1OwbNd05Vn/ezpiSom6m1eDD3m0QcOs9OJnTJbcGmRCzbd8Wz
W7zJoqIQuhiC9UKC1mdyjTirYXYMw+Z4i+5hdkM3lm7s6EAE06XW4GYEAsmaqILP
Up0y3LBRUdQLw2CQkV4UhbY5UDXiXze13Dy/vs0sTf34FFI6mjL+9T+CaZRGNDwT
dDs4h/UukpVoug==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:07 2026 by rpki-client