Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
File: AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json)
Hash identifier: pQrs4orVoqGCTEjgHBVD/BmSo9B+RB/KOSuLAQBqs/s=
Subject key identifier: 67:88:DE:20:BA:7E:59:66:5B:57:E5:34:33:87:F3:81:75:CE:B6:AC
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial: 019D333E659DFC1BDE4860577122F329187F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
Manifest number: 0122
Signing time: Sat 28 Mar 2026 07:00:20 +0000
Manifest this update: Sat 28 Mar 2026 07:00:20 +0000
Manifest next update: Sun 29 Mar 2026 07:00:20 +0000
Files and hashes: 1: 5Fb55k26fRyS8mOWbJCdz2BKjkk.asa (hash: Y7eCwWYpq3p8nW4jhVM54zY0TbWIl2xIddYqDKv3JGc=)
2: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: n9zqPAhrmeW9bza3MML8ReiEjbZrVpCBBamf050GFL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:65:9d:fc:1b:de:48:60:57:71:22:f3:29:18:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
Validity
Not Before: Mar 28 07:00:20 2026 GMT
Not After : Mar 29 07:00:20 2026 GMT
Subject: CN=6788de20ba7e59665b57e5343387f38175ceb6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:1c:4b:21:4e:e4:10:fb:ac:81:91:a5:b4:
44:64:4c:6a:3d:50:95:d6:4c:5d:9a:0c:fd:c4:12:
05:f5:f1:5a:e9:18:03:67:cb:59:36:62:36:12:bf:
94:4d:f0:54:16:ed:6b:1d:da:7b:77:5b:85:9f:da:
08:98:af:11:f0:2d:40:e8:c0:fe:d0:29:b1:28:ef:
d6:3b:95:ff:d8:9d:8a:b8:2d:83:53:01:90:37:c4:
b0:ce:ca:d6:87:7d:d3:f3:63:c9:ed:63:19:7e:fb:
3c:7f:a9:a9:fe:25:b6:f9:cf:88:69:f2:ed:0d:3f:
36:ef:36:74:7a:1c:4b:f6:47:aa:4a:60:e2:97:c0:
22:db:6e:80:cc:5e:1b:11:3d:35:37:28:97:8d:6e:
db:22:73:ea:31:bf:35:af:0c:2b:a8:0a:7f:3f:ef:
e9:17:50:22:d7:80:10:a1:ac:f0:8e:a8:d8:3f:e2:
58:d0:17:ea:f2:53:ea:0f:dd:31:e1:52:14:76:b2:
01:19:6b:f9:96:5a:bc:ab:3c:5f:58:3c:00:eb:dd:
c4:f4:47:02:72:0e:a7:8c:e8:41:fc:57:07:3d:f1:
c1:aa:e0:7b:6e:e4:26:4a:39:c2:ae:aa:7e:55:1e:
64:c2:7c:5f:cf:31:07:b1:a6:4e:9a:49:b7:c2:32:
99:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:88:DE:20:BA:7E:59:66:5B:57:E5:34:33:87:F3:81:75:CE:B6:AC
X509v3 Authority Key Identifier:
keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b3:b0:38:ad:0c:0d:1b:46:16:54:b1:cc:0b:85:82:77:26:
bd:07:4d:15:fb:3d:93:f0:ac:c3:65:61:d2:72:48:02:c8:11:
f7:0a:9f:e0:47:b6:ae:0f:0a:c4:0d:90:73:ae:5a:f7:43:e7:
fa:9e:54:48:0d:f4:3d:fc:64:9c:e7:3c:09:71:34:dc:c1:6c:
fc:bb:13:c7:00:be:a9:52:aa:55:d7:47:8c:4e:12:7f:70:13:
ef:2f:5a:63:a2:47:c5:08:5f:28:70:7b:a9:6a:c3:b3:7d:44:
90:d0:61:94:f9:65:b4:7b:db:00:4e:b9:a6:28:14:77:2d:51:
af:cf:f7:52:6b:aa:f3:6f:f8:79:48:42:50:e0:57:47:96:6b:
c5:c8:06:a7:7b:20:80:5d:c4:ea:cd:22:c8:ed:bf:ab:2d:60:
0a:e6:16:3c:a5:b6:a3:0f:93:27:bd:e6:7a:91:91:9b:14:fc:
82:95:f4:70:4b:e0:99:25:34:44:38:e6:c5:a8:51:d0:16:58:
a4:5d:a4:6f:8e:5b:af:c3:3d:74:d5:6c:8b:2b:6e:34:05:a1:
ab:fb:9a:79:2a:4e:ce:72:45:28:76:b3:9b:fc:1d:33:fc:c1:
17:8f:f3:18:c5:9c:eb:0c:05:43:a8:5e:f6:71:44:1f:6c:77:
09:5c:f6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:51 2026 by rpki-client