Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
File: AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json)
Hash identifier: daC5DpQBLTczpkUC2rb+tKU+k2kDen27p5QRgF1Uzcw=
Subject key identifier: EB:0B:6A:D4:1B:8B:0A:20:2A:19:AD:82:E9:BD:22:C1:F9:97:DE:E3
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial: 019F1265CE941849D2367A2A158F3A514931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
Manifest number: 021E
Signing time: Mon 29 Jun 2026 08:01:29 +0000
Manifest this update: Mon 29 Jun 2026 08:01:29 +0000
Manifest next update: Tue 30 Jun 2026 08:01:29 +0000
Files and hashes: 1: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: HLK7wlG5VmHLmbHg6illQ9RMea59zFYQ8/3Y/sKeeTM=)
2: Sdyoi-DJheUx969WiGu9zZYw2R4.roa (hash: zNk/KkOF+ii1aUgCLSl3f+9W1j7Kt8UQ+x8h5WRuSFQ=)
3: pt-fhKQ2sRRBx8lpcYMYt8s_8d4.asa (hash: 61S3nZzWWm+wG81cqTpRHAavuHF+5x+9jg8cy1Dq+A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:ce:94:18:49:d2:36:7a:2a:15:8f:3a:51:49:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
Validity
Not Before: Jun 29 08:01:29 2026 GMT
Not After : Jun 30 08:01:29 2026 GMT
Subject: CN=eb0b6ad41b8b0a202a19ad82e9bd22c1f997dee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:48:95:ea:59:84:9a:4a:1e:6b:dd:ce:fa:6b:
af:83:83:1f:93:74:f0:eb:fe:f9:31:b3:81:57:7c:
52:24:ab:1e:b7:7f:62:5e:dd:d7:03:89:43:03:80:
27:ea:10:ba:71:2d:9a:52:a1:4d:de:e9:9b:66:47:
f3:d9:ee:17:5b:d3:2b:af:c6:4e:c4:e2:f8:a1:c6:
30:ad:e2:5f:e3:8b:f7:09:5b:31:5f:84:2b:bf:6d:
0b:a8:67:a6:40:f8:89:75:c8:d3:17:88:64:a6:3e:
a3:d8:8c:53:a4:42:3e:2d:3d:8a:32:cf:3b:b8:5f:
89:f5:2e:b4:d3:8b:f8:99:85:71:7c:a5:de:da:93:
89:f2:c8:79:a5:c6:46:53:0f:f2:da:7e:05:54:43:
ad:c3:28:47:20:f0:cd:cf:4a:0b:ff:6f:90:10:2b:
ac:76:4e:ee:20:ff:f8:bf:82:67:43:ec:4d:c8:35:
65:97:80:ce:d4:b8:51:af:49:12:08:84:b8:74:80:
36:6e:10:2d:13:bf:53:b8:6b:80:8f:48:03:68:ef:
fa:ff:db:23:09:2b:66:44:83:b8:31:14:ad:41:d1:
08:80:73:3c:46:b2:51:88:90:d2:92:6e:96:22:f9:
36:d0:a1:57:5c:49:d4:f0:ac:97:95:5f:95:22:fe:
16:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0B:6A:D4:1B:8B:0A:20:2A:19:AD:82:E9:BD:22:C1:F9:97:DE:E3
X509v3 Authority Key Identifier:
keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:73:cb:b5:f4:0b:b3:9e:b6:f6:e8:dd:94:d3:72:a6:ef:82:
33:77:8f:02:34:b2:64:8e:71:30:7d:fb:fe:df:34:f8:27:ee:
6f:41:1c:0b:c4:39:26:77:07:47:3d:f0:4b:51:c8:28:97:98:
34:97:dc:ae:a1:78:8b:ff:24:88:69:0e:44:79:4a:ba:98:57:
d7:06:58:ab:50:50:57:b6:02:67:1d:bf:b4:2f:7f:9f:ce:5d:
c1:40:f3:82:fb:b6:ee:c0:18:7b:b2:51:6a:b8:23:6b:1c:d6:
95:4e:8b:5f:79:70:79:f3:a5:67:2c:a1:b9:eb:2e:3e:c4:57:
8d:a7:6b:bf:3b:1d:07:13:2f:91:a3:cd:58:33:4e:b0:76:c4:
5c:8d:de:c7:c9:7a:d6:19:82:98:7f:d1:48:81:32:75:2d:13:
e0:d1:da:fa:da:b2:03:4d:c0:e4:18:74:be:fa:42:8e:10:d4:
8a:08:91:b3:6a:09:f9:2b:f4:8f:fc:4d:fa:3d:0a:ab:89:aa:
f1:81:5b:2f:71:6e:1e:46:cf:1a:0e:ef:63:db:86:d2:c0:73:
b8:5e:60:af:d5:6a:c9:4f:c6:24:07:95:e1:e7:f7:d5:c6:ec:
e0:49:90:3f:e2:02:42:5e:a7:86:f6:6a:36:1f:4f:a6:e7:97:
76:82:8a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:39 2026 by rpki-client