Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier: 9UEvP2eGRafnX2HtVtI4NiSp8euMKj3sEozyE5U8VRI=
Subject key identifier: A4:12:66:83:6B:05:63:B6:BA:E1:E5:D3:EF:7D:C7:84:86:36:4B:B7
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 019E31F3806209B2D3594330B29E76A4A38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 18:01:42 +0000
Manifest this update: Sat 16 May 2026 18:01:42 +0000
Manifest next update: Sun 17 May 2026 18:01:42 +0000
Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: mXfZ6by02yOAr8b2t5qAW9zM0AayqiZKw/arYQ+Pu6s=)
2: j51-vhqySrtPDmWytRuJdkGEvC8.roa (hash: hWPfWXr9RPCgElnT55rpdjybwa6yeKeJ6tIi6IBtbEE=)
3: lBelNikhE64GysX2fGFFE4vhjCQ.roa (hash: OyoE+SKk2HTXSgPYtWOQOXKI4eO+3EXXvE2q2Oo53nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f3:80:62:09:b2:d3:59:43:30:b2:9e:76:a4:a3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: May 16 18:01:42 2026 GMT
Not After : May 17 18:01:42 2026 GMT
Subject: CN=a41266836b0563b6bae1e5d3ef7dc78486364bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:7f:22:8b:a1:1d:84:0d:08:42:c3:18:42:
81:63:b7:c3:ac:a1:c2:a1:ae:b7:ad:80:e9:cb:44:
b2:1a:67:5e:d2:a7:7d:3a:fc:fe:d7:cb:9c:15:0e:
8b:76:24:88:7b:9c:cb:9a:37:68:96:87:eb:47:93:
ab:79:d4:80:52:d8:5f:cf:93:6c:fe:a9:52:83:a6:
cb:ff:0a:4a:e6:71:e6:1d:15:b1:21:91:f7:46:59:
42:42:cf:51:ad:2e:99:65:d0:0c:9c:ad:17:72:41:
ce:25:54:95:b3:ad:05:bb:ed:91:0b:22:b3:4c:a7:
2c:ae:7b:ad:ae:07:8e:7f:e9:f0:3d:23:ea:1c:43:
97:0c:5b:06:65:8b:88:86:42:73:d5:c7:17:3d:e8:
c3:91:9d:c4:f9:e7:14:d8:4c:4a:14:93:a4:e9:fb:
71:c2:19:c7:b4:6e:a0:da:5a:1c:f8:2c:e2:7b:48:
ba:a1:cc:48:22:92:5d:ae:7a:ae:51:cd:20:c6:5c:
09:63:0e:76:a3:73:91:74:d6:c3:7e:4c:d6:9d:98:
60:3f:92:2e:84:be:f1:57:6f:b5:91:dc:2d:9c:5b:
f7:aa:4a:89:32:53:80:b7:75:00:13:3a:d3:a6:a6:
c0:58:be:bf:6d:a6:07:c5:06:de:10:75:58:b5:08:
de:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:12:66:83:6B:05:63:B6:BA:E1:E5:D3:EF:7D:C7:84:86:36:4B:B7
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4e:83:68:7d:ca:81:cc:ec:2c:ad:bb:07:ca:31:ee:fc:46:
f3:55:a4:c3:aa:87:c8:fc:f4:5d:24:14:c3:16:c5:fc:20:17:
b3:5f:08:8b:29:6c:d0:97:dd:d6:4d:22:30:4d:65:ba:b0:ce:
5c:e3:ae:ec:1b:b5:7c:a9:47:cf:fc:df:e6:ad:9c:61:be:4f:
1c:5b:80:1b:df:79:9d:29:22:18:22:d1:cb:5b:ff:13:35:16:
b4:3f:9f:64:63:4c:45:4b:d3:f0:24:f0:ee:3b:b8:20:a2:6a:
e2:75:5f:47:6f:60:76:ac:5a:f3:df:fe:34:3a:26:ca:f6:c6:
b7:d5:d6:2e:41:1c:0f:9c:20:79:26:75:de:6f:27:1d:84:28:
98:f9:99:49:8f:99:ec:a0:f5:4a:6f:e9:5f:4f:78:5c:fa:b2:
85:45:46:f8:60:11:36:7e:6a:8a:58:7c:11:34:d3:c5:c6:19:
02:59:6c:53:ad:b6:cc:9f:b1:94:a9:70:9d:2b:14:15:9f:7b:
08:ff:76:a3:97:d9:63:6d:cd:22:3b:9e:df:e5:69:e0:7a:9b:
40:f9:cf:5e:63:7e:96:2a:45:fc:48:80:01:52:53:fc:4c:b2:
12:da:ca:fe:d5:96:e3:c9:33:2a:f9:9a:65:90:2a:cc:a9:30:
16:e4:70:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:20:12 2026 by rpki-client