Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier: zV9+w82aixIwN2BvZWpiWT5IxCevABRZQLPE1xb3lKg=
Subject key identifier: 40:E6:70:B1:FE:C7:1F:D3:77:D6:36:7F:39:69:24:56:7C:55:42:E1
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 019D38D2E1A5954D531B7988B71AFA3207BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:37 +0000
Manifest this update: Sun 29 Mar 2026 09:00:37 +0000
Manifest next update: Mon 30 Mar 2026 09:00:37 +0000
Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: mzF5pkC8q1sWrWyUc5ussLBWDscs8/61oricI3VC4Wc=)
2: j51-vhqySrtPDmWytRuJdkGEvC8.roa (hash: hWPfWXr9RPCgElnT55rpdjybwa6yeKeJ6tIi6IBtbEE=)
3: lBelNikhE64GysX2fGFFE4vhjCQ.roa (hash: OyoE+SKk2HTXSgPYtWOQOXKI4eO+3EXXvE2q2Oo53nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e1:a5:95:4d:53:1b:79:88:b7:1a:fa:32:07:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: Mar 29 09:00:37 2026 GMT
Not After : Mar 30 09:00:37 2026 GMT
Subject: CN=40e670b1fec71fd377d6367f396924567c5542e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:1e:97:c3:45:fb:24:ff:6b:37:48:a3:45:
51:8c:f0:03:3f:e3:7d:49:48:89:42:d8:eb:71:26:
40:b2:c7:cf:18:8e:14:fa:93:7d:38:43:3f:98:c6:
82:75:f3:b1:71:35:1c:ae:1e:79:83:79:07:7a:06:
6e:0d:ca:8d:90:9d:3a:f5:b0:22:4c:15:52:ae:19:
ee:8d:7c:ae:b3:89:f0:10:b3:b7:ae:57:79:f3:09:
48:87:40:c1:a6:b3:0a:0b:f9:b4:45:01:9c:8b:2d:
6c:2d:b2:5f:25:c2:72:ee:10:52:85:ff:48:b0:24:
0a:d5:0a:d0:fb:f5:12:03:e4:a7:31:92:6d:35:f9:
e3:e1:16:45:16:72:3a:26:ce:1c:ee:92:ec:df:73:
86:07:62:22:6d:40:53:f3:99:91:1f:e3:55:88:a2:
84:a9:ae:1a:55:6d:c1:69:db:3b:51:01:3c:1d:3c:
7d:90:d8:15:b8:8e:de:cf:de:46:14:b8:f2:82:bc:
cb:c5:f4:ef:fd:89:26:00:1f:0d:11:03:96:46:2c:
b8:f4:98:96:1d:44:57:59:af:f9:f0:aa:9e:9f:e0:
0e:b2:1e:33:1b:ea:5f:2b:c8:38:63:28:41:64:02:
34:da:96:df:46:99:60:b1:3c:b9:09:fa:08:92:76:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E6:70:B1:FE:C7:1F:D3:77:D6:36:7F:39:69:24:56:7C:55:42:E1
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:22:5d:ae:3e:29:31:a2:7b:e8:07:7d:0c:f7:63:dd:c0:f1:
44:38:4e:bb:47:e0:85:1f:d0:c5:00:c1:e6:e3:f3:39:47:76:
f2:3f:aa:ec:1e:cd:d8:ba:8d:db:66:7d:38:8f:f0:1c:57:ef:
b1:93:7a:c9:8c:03:20:71:89:ad:14:07:0f:0c:c5:4d:91:64:
04:fe:c7:52:0d:46:c4:71:7d:71:ba:92:84:1c:54:3d:77:b8:
07:4a:74:c6:3f:93:78:bc:ec:ed:1b:fd:d8:27:33:b7:fb:99:
38:02:1a:a9:54:4e:23:cc:38:33:f7:3c:50:af:63:fb:a2:d6:
d1:7a:b9:0a:b8:df:71:32:17:80:20:ea:b0:86:01:65:72:8f:
9c:d0:dc:c6:e6:23:99:bc:c5:00:ef:93:08:ab:3e:39:87:f2:
5d:1e:a0:0f:c0:2c:05:01:bc:da:e2:31:ee:30:28:70:74:6c:
bc:a9:57:ea:44:38:14:c9:28:aa:60:fe:be:1a:42:e5:44:70:
ab:d0:79:83:62:34:b2:e8:99:5c:d6:e9:6d:a0:3b:94:df:a4:
69:b1:9a:04:e9:fa:9f:a3:ff:81:a4:3a:f5:04:01:98:ff:c3:
4c:5c:00:ae:87:dd:db:ff:6b:4e:d7:5a:e8:0a:8d:81:e0:77:
43:27:98:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040uGllU1TG3mItxr6Mge+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzlhZTExMTg4MDg4NTQ3ZWIzZTUyMzQ4M2NjYTk4NTU2
YzExNWIwHhcNMjYwMzI5MDkwMDM3WhcNMjYwMzMwMDkwMDM3WjAzMTEwLwYDVQQD
Eyg0MGU2NzBiMWZlYzcxZmQzNzdkNjM2N2YzOTY5MjQ1NjdjNTU0MmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEAel8NF+yT/azdIo0VRjPADP+N9
SUiJQtjrcSZAssfPGI4U+pN9OEM/mMaCdfOxcTUcrh55g3kHegZuDcqNkJ069bAi
TBVSrhnujXyus4nwELO3rld58wlIh0DBprMKC/m0RQGciy1sLbJfJcJy7hBShf9I
sCQK1QrQ+/USA+SnMZJtNfnj4RZFFnI6Js4c7pLs33OGB2IibUBT85mRH+NViKKE
qa4aVW3Bads7UQE8HTx9kNgVuI7ez95GFLjygrzLxfTv/YkmAB8NEQOWRiy49JiW
HURXWa/58Kqen+AOsh4zG+pfK8g4YyhBZAI02pbfRplgsTy5CfoIknbcLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDmcLH+xx/Td9Y2fzlpJFZ8VULhMB8GA1UdIwQY
MBaAFAI5rhEYgIhUfrPlI0g8yphVbBFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMt
NjcyODBjOGJiYWI4LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMtNjcyODBjOGJiYWI4
LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiJdrj4p
MaJ76Ad9DPdj3cDxRDhOu0fghR/QxQDB5uPzOUd28j+q7B7N2LqN22Z9OI/wHFfv
sZN6yYwDIHGJrRQHDwzFTZFkBP7HUg1GxHF9cbqShBxUPXe4B0p0xj+TeLzs7Rv9
2Cczt/uZOAIaqVROI8w4M/c8UK9j+6LW0Xq5CrjfcTIXgCDqsIYBZXKPnNDcxuYj
mbzFAO+TCKs+OYfyXR6gD8AsBQG82uIx7jAocHRsvKlX6kQ4FMkoqmD+vhpC5URw
q9B5g2I0suiZXNbpbaA7lN+kabGaBOn6n6P/gaQ69QQBmP/DTFwArofd2/9rTtda
6AqNgeB3QyeYYg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:46 2026 by rpki-client