Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
File: AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json)
Hash identifier: PDKkaAglk0YpsclugL2xxZXMMeaL9qful5fjoBw/BUs=
Subject key identifier: A6:60:99:64:81:E0:70:16:D4:06:2F:47:3F:1B:2B:EB:53:BF:E7:3D
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial: 01A03BCC6766BF44660CE294CCEF835E3261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
Manifest number: 02B9
Signing time: Wed 26 Aug 2026 02:00:46 +0000
Manifest this update: Wed 26 Aug 2026 02:00:46 +0000
Manifest next update: Thu 27 Aug 2026 02:00:46 +0000
Files and hashes: 1: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: OYhBPVEH/5PC/40uNzUk23tuubP2rIA+4YY8Mk+EyvI=)
2: Sdyoi-DJheUx969WiGu9zZYw2R4.roa (hash: zNk/KkOF+ii1aUgCLSl3f+9W1j7Kt8UQ+x8h5WRuSFQ=)
3: _miH7FBiHwPi4721dvB8jbwLmFQ.asa (hash: cMwZRx/upRnUPDyHDqJgN+CqRc6j1mU3mRK9rHQxEIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:cc:67:66:bf:44:66:0c:e2:94:cc:ef:83:5e:32:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
Validity
Not Before: Aug 26 02:00:46 2026 GMT
Not After : Aug 27 02:00:46 2026 GMT
Subject: CN=a660996481e07016d4062f473f1b2beb53bfe73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:bd:d9:b5:d2:eb:47:df:ac:f8:1d:f2:34:
65:0a:d7:2f:ec:a0:67:9c:08:5f:97:c6:f5:65:b6:
6f:f3:92:5c:f0:08:c5:48:f7:15:2e:79:24:fe:46:
23:14:1a:02:8a:25:a2:98:c1:cf:82:e0:93:cf:31:
c1:d4:94:e9:5e:6e:c8:2a:90:96:d3:93:5a:3b:ba:
85:2e:12:96:b7:85:03:22:ab:16:94:93:36:36:f2:
4e:64:27:69:22:b0:ff:81:3c:f7:49:92:62:9f:b2:
28:1f:d6:a9:94:85:da:60:3b:ec:e9:1b:a7:30:c1:
0a:88:02:a2:bb:dc:a5:06:80:12:ca:31:db:60:b3:
d8:a5:a1:2d:bf:b3:ad:0b:e6:5e:f1:0e:33:e2:8c:
40:84:e7:d5:0e:83:a6:a6:6f:35:d6:a3:89:be:bb:
eb:4c:a0:a5:54:bd:d8:14:a1:58:09:94:40:19:9a:
e8:e8:bf:25:77:c9:ca:b8:38:15:a7:27:14:18:7e:
74:4a:68:05:ac:f8:e7:e4:38:d6:4e:b1:8e:1b:64:
d0:e8:d9:2f:e0:96:b4:2e:fd:42:ad:96:23:c4:79:
73:a4:9e:0a:6f:c2:55:15:c8:c3:a2:d5:40:c0:ac:
53:8e:b4:8b:5c:7b:76:8f:d7:a0:d7:dc:b2:7b:4f:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:60:99:64:81:E0:70:16:D4:06:2F:47:3F:1B:2B:EB:53:BF:E7:3D
X509v3 Authority Key Identifier:
keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a9:4d:ce:11:83:1c:ee:b1:dd:d1:73:ed:c4:6a:4a:1c:2e:
55:bd:e5:02:6c:8e:10:fe:53:08:53:6c:b6:6a:47:e8:fe:d1:
c4:24:06:1f:cf:3e:d6:11:f7:de:21:2f:01:7b:6b:39:c6:f0:
18:0f:21:29:8e:05:d7:76:0c:e2:00:88:08:4b:9f:0d:4f:ff:
b4:e8:47:52:b4:0e:8c:61:47:4f:9a:c1:77:2b:63:50:f6:65:
a6:df:bc:03:57:1c:3a:b2:a3:3f:4b:d5:0d:fe:ca:bc:67:e3:
b5:54:5e:9f:65:06:27:bf:40:c4:d1:24:18:80:4f:7d:13:5b:
96:51:79:3b:4a:79:59:90:5c:40:ee:85:26:04:8f:a3:e5:f5:
97:93:b6:2b:3d:82:0a:e1:60:d9:2b:37:53:61:e1:44:02:a2:
27:f0:75:c4:2f:a7:07:81:a7:06:2c:74:a9:2d:12:71:74:61:
7f:f2:53:85:f0:0f:fd:11:94:ce:69:2c:31:dd:8d:b4:3b:af:
19:2f:b0:1a:3c:cc:e6:92:a5:1b:4f:16:86:2c:91:87:61:cb:
f7:f1:e5:92:79:cc:1d:8d:5c:8a:8e:e7:b9:2c:ca:ea:ed:be:
8a:11:bf:a0:c9:4e:0c:38:30:b7:d4:51:b7:e8:8c:77:71:79:
0a:69:3c:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA7zGdmv0RmDOKUzO+DXjJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTRjMGY3MzY4YzA0NzY0M2U5MWM1N2Q2Y2ZkYTlmOTk4
OTczNjIwHhcNMjYwODI2MDIwMDQ2WhcNMjYwODI3MDIwMDQ2WjAzMTEwLwYDVQQD
EyhhNjYwOTk2NDgxZTA3MDE2ZDQwNjJmNDczZjFiMmJlYjUzYmZlNzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K+92bXS60ffrPgd8jRlCtcv7KBn
nAhfl8b1ZbZv85Jc8AjFSPcVLnkk/kYjFBoCiiWimMHPguCTzzHB1JTpXm7IKpCW
05NaO7qFLhKWt4UDIqsWlJM2NvJOZCdpIrD/gTz3SZJin7IoH9aplIXaYDvs6Run
MMEKiAKiu9ylBoASyjHbYLPYpaEtv7OtC+Ze8Q4z4oxAhOfVDoOmpm811qOJvrvr
TKClVL3YFKFYCZRAGZro6L8ld8nKuDgVpycUGH50SmgFrPjn5DjWTrGOG2TQ6Nkv
4Ja0Lv1CrZYjxHlzpJ4Kb8JVFcjDotVAwKxTjrSLXHt2j9eg19yye0955wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZgmWSB4HAW1AYvRz8bK+tTv+c9MB8GA1UdIwQY
MBaAFACUwPc2jAR2Q+kcV9bP2p+ZiXNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82M2VmYmItZmUwMi00NjhhLTk2MGQt
M2MyNzQyZjI4YTNjLzEvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82M2VmYmItZmUwMi00NjhhLTk2MGQtM2MyNzQyZjI4YTNj
LzEvQUpUQTl6YU1CSFpENlJ4WDFzX2FuNW1KYzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqlNzhGD
HO6x3dFz7cRqShwuVb3lAmyOEP5TCFNstmpH6P7RxCQGH88+1hH33iEvAXtrOcbw
GA8hKY4F13YM4gCICEufDU//tOhHUrQOjGFHT5rBdytjUPZlpt+8A1ccOrKjP0vV
Df7KvGfjtVRen2UGJ79AxNEkGIBPfRNbllF5O0p5WZBcQO6FJgSPo+X1l5O2Kz2C
CuFg2Ss3U2HhRAKiJ/B1xC+nB4GnBix0qS0ScXRhf/JThfAP/RGUzmksMd2NtDuv
GS+wGjzM5pKlG08WhiyRh2HL9/HlknnMHY1cio7nuSzK6u2+ihG/oMlODDgwt9RR
t+iMd3F5Cmk8iA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 10:38:02 2026 by rpki-client