Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
File: AJTA9zaMBHZD6RxX1s_an5mJc2I.mft (raw, json)
Hash identifier: Bff0qmlQMq6vaUuk4o8MF2FBTC4gb4C1mrj4bllNkD4=
Subject key identifier: 14:56:B4:6E:CF:1D:E7:BC:70:3F:0B:A5:03:0C:91:9F:97:09:A9:BC
Authority key identifier: 00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
Certificate issuer: /CN=0094c0f7368c047643e91c57d6cfda9f99897362
Certificate serial: 019E20239D87479E0F49C8436CDE7CE4B673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
Manifest number: 019E
Signing time: Wed 13 May 2026 07:01:05 +0000
Manifest this update: Wed 13 May 2026 07:01:05 +0000
Manifest next update: Thu 14 May 2026 07:01:05 +0000
Files and hashes: 1: AJTA9zaMBHZD6RxX1s_an5mJc2I.crl (hash: G3q5vH46mLqnjLgVKfD3yMG2DoA23fKVWiltiObI0p4=)
2: DzQ8irc-4RBk4ZzUbrd1aGGR-sY.asa (hash: CPLLMLkvayhGpNIRTtZEtIvUVWnwTscyQoRbkvd4JCc=)
3: Sdyoi-DJheUx969WiGu9zZYw2R4.roa (hash: zNk/KkOF+ii1aUgCLSl3f+9W1j7Kt8UQ+x8h5WRuSFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:9d:87:47:9e:0f:49:c8:43:6c:de:7c:e4:b6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0094c0f7368c047643e91c57d6cfda9f99897362
Validity
Not Before: May 13 07:01:05 2026 GMT
Not After : May 14 07:01:05 2026 GMT
Subject: CN=1456b46ecf1de7bc703f0ba5030c919f9709a9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:03:61:9c:1c:dc:40:bf:bd:82:86:d1:73:fc:
47:b5:3f:1c:e9:cf:62:18:32:b4:97:b3:64:ad:b9:
14:2d:f5:50:59:9f:e9:4e:1b:2e:0b:72:99:a0:40:
09:0b:4c:eb:12:ea:b8:81:28:2f:3d:c1:0a:4b:41:
75:f6:fd:f4:a2:e2:b1:f1:fd:c7:60:f5:ca:4d:86:
e5:83:40:9c:b6:ba:6b:80:58:79:3e:b4:61:28:16:
f0:9b:75:b2:49:ea:d0:70:3d:4a:10:63:b8:79:45:
32:4a:50:96:21:d9:64:f5:a4:2f:13:89:24:b0:ba:
91:d6:0b:88:43:48:13:bb:35:44:f2:7a:57:a9:66:
a1:5c:87:9d:ae:65:25:2c:8b:09:4a:d1:41:b3:02:
fd:30:c4:2c:98:f8:be:e8:5e:c6:f3:6f:22:b9:d7:
1b:ff:e9:da:53:ff:8d:9f:24:07:84:f4:b7:1b:3b:
53:af:89:50:b0:41:5b:87:0f:e0:5e:78:d3:80:6f:
c3:38:78:53:7d:45:98:a9:bb:44:84:f5:85:39:db:
b4:10:5d:a7:77:28:73:15:d9:ea:2f:ad:7e:8d:aa:
d1:81:b4:df:76:6f:81:fb:77:01:7f:5a:87:c1:a5:
86:84:c4:17:3b:8d:05:51:67:a4:29:ed:7c:0a:f9:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:56:B4:6E:CF:1D:E7:BC:70:3F:0B:A5:03:0C:91:9F:97:09:A9:BC
X509v3 Authority Key Identifier:
keyid:00:94:C0:F7:36:8C:04:76:43:E9:1C:57:D6:CF:DA:9F:99:89:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJTA9zaMBHZD6RxX1s_an5mJc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/63efbb-fe02-468a-960d-3c2742f28a3c/1/AJTA9zaMBHZD6RxX1s_an5mJc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2d:84:f7:1e:4a:95:e5:d8:bc:b5:c0:26:14:1f:39:9a:0f:
bc:0e:a9:c7:60:bf:f1:68:c5:58:ac:6a:41:34:b7:b3:e1:b4:
c4:ff:35:ac:23:27:b1:ca:54:87:f5:87:b7:99:ed:1c:b1:05:
75:31:9b:e4:1d:a9:cc:16:41:5b:80:db:6d:de:30:43:c0:56:
4f:2c:a6:b1:a3:1b:89:2d:e9:ad:9b:97:34:d7:d3:cd:a3:6d:
89:07:8b:cc:58:47:d5:1a:72:5d:3e:49:8c:1f:71:37:4a:8f:
24:a9:9d:e9:fc:7e:b7:9c:fe:89:ab:0e:92:53:a6:bf:86:ec:
c2:5b:8a:55:f1:ce:ff:cd:52:a8:d1:6f:f7:f8:3b:76:a2:d7:
00:a9:b6:13:0f:aa:84:26:68:86:12:bf:a8:c9:dd:6b:a0:01:
a8:a0:a3:c2:4b:e0:2c:b5:fe:ed:62:31:db:ed:98:72:42:06:
73:85:f8:d4:bd:e1:02:6f:32:d9:fd:23:cf:3f:01:b6:2a:85:
c1:b9:b7:47:db:0a:6e:0f:fd:20:8c:8b:a7:47:21:8b:4a:a8:
61:6b:04:7d:99:bf:96:6f:ee:73:a6:8c:b9:99:2b:26:16:08:
a8:d8:81:bc:3e:fb:76:b8:eb:28:cc:38:92:1b:21:86:c2:a5:
1c:d1:28:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:53:49 2026 by rpki-client