Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
File: AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json)
Hash identifier: 5l1S3zD7f8+Dkt0PdW5S/3kuomMuAG/vhSKSmvfz43A=
Subject key identifier: 61:EC:AE:8D:4B:9F:65:D0:5B:81:9B:93:DE:FF:25:CD:AE:A8:3F:6D
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial: 01A15F9F267CA7D8B7B604D7B987ED24E14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
Manifest number: 035A
Signing time: Wed 21 Oct 2026 18:00:27 +0000
Manifest this update: Wed 21 Oct 2026 18:00:27 +0000
Manifest next update: Thu 22 Oct 2026 18:00:27 +0000
Files and hashes: 1: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: hcoAElEjc8KQggoq3eEVHiP3TcX/9t7qhCG+QZJFm0E=)
2: JCczrT4XeuCG3bCzv9cOOlTKMyw.asa (hash: Z04R6pisEKNfYlSvm2euCu4QekE3gDkLZE4OVhmOpmI=)
3: Sdyoi-DJheUx969WiGu9zZYw2R4.roa (hash: zNk/KkOF+ii1aUgCLSl3f+9W1j7Kt8UQ+x8h5WRuSFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:9f:26:7c:a7:d8:b7:b6:04:d7:b9:87:ed:24:e1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
Validity
Not Before: Oct 21 18:00:27 2026 GMT
Not After : Oct 22 18:00:27 2026 GMT
Subject: CN=61ecae8d4b9f65d05b819b93deff25cdaea83f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:90:29:52:bb:cd:ba:7c:c6:b3:25:da:02:68:
dc:47:0c:4d:33:32:fd:b5:f4:0f:02:55:7d:1a:65:
48:1f:11:58:6a:ee:3f:9e:55:ec:ee:8b:87:09:5b:
2c:3a:57:a5:d5:f2:15:63:76:d6:34:dc:58:fe:4e:
6c:18:2f:2e:9e:e5:b6:e6:ef:f4:8d:19:76:99:1a:
bd:e3:bb:3e:c4:76:8e:78:d4:c0:04:b7:17:18:b2:
3e:59:20:d7:2d:16:e5:e7:5f:84:ed:1b:1a:97:b1:
99:61:83:46:30:29:3d:57:61:16:48:fc:e4:9d:20:
5b:e5:2e:9b:95:8e:d1:67:33:01:ca:97:86:d0:75:
6d:cc:35:b0:00:ed:2b:da:54:82:93:bd:92:5f:ff:
83:4f:35:bb:2f:c5:9f:d3:c7:1a:ec:7c:27:de:20:
18:87:ec:5f:c3:fb:78:3c:29:0f:82:f8:d6:5e:5a:
36:26:ce:a3:5e:7e:c7:5f:30:91:0c:c6:a5:cf:1e:
7d:cd:35:a1:07:f1:0d:7e:9a:90:64:e8:0e:bc:a1:
59:a2:5c:09:89:dd:63:8a:69:80:b8:d1:52:1e:40:
ea:4e:28:e4:43:8e:30:fb:39:68:25:88:f0:18:d7:
51:f2:bf:7b:e0:8b:d9:3b:50:bf:3f:08:43:d4:d5:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EC:AE:8D:4B:9F:65:D0:5B:81:9B:93:DE:FF:25:CD:AE:A8:3F:6D
X509v3 Authority Key Identifier:
keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:96:88:50:4b:50:0f:c0:a3:fc:3b:a8:dd:8c:c0:c3:5c:e3:
c5:d4:fa:e4:76:1a:bc:52:70:98:fd:40:36:e2:e2:d4:64:76:
0a:d7:72:39:20:6c:20:e7:f7:17:62:d8:13:eb:40:c0:70:28:
2e:17:d6:da:66:cf:ad:91:4a:ee:e3:a3:16:e1:02:40:c4:11:
76:dd:2b:5b:70:dd:76:97:37:59:ed:2d:34:c0:26:54:27:d2:
e8:fe:20:44:ea:b2:1b:fd:1b:e3:1c:ba:f8:d5:82:9c:d1:1c:
39:4c:35:ea:20:9d:25:18:42:3d:19:fa:90:2e:76:f8:b7:b3:
6c:29:ed:2c:ef:62:1f:90:6c:81:e5:93:49:12:ba:72:3d:89:
eb:56:67:db:4d:ed:cd:95:94:93:95:72:5b:78:01:3d:10:91:
19:cb:63:ae:5e:54:d0:c6:19:8a:ab:77:57:7d:fc:7a:a6:e5:
a9:57:b9:dc:44:da:57:dd:6c:4c:93:e4:96:2c:e5:6b:99:7d:
dc:4f:39:94:03:ac:b9:ed:95:44:a4:4e:93:ff:2a:26:66:0c:
88:3b:f6:9d:af:e2:8a:3e:ae:67:4f:72:35:4c:a5:e9:fc:19:
4b:03:2d:30:aa:ae:a8:fc:70:f8:2f:21:3a:7c:a3:ea:01:f1:
6d:b4:71:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:18:45 2026 by rpki-client