Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/AjZvGu7zHF6R5JAmsD50cMzhV40.mft
File: AjZvGu7zHF6R5JAmsD50cMzhV40.mft (raw, json)
Hash identifier: JO16BxCjitxaipEcNA2OX7n0jjU6ZKOP66sTB+qcbN0=
Subject key identifier: D7:3D:52:AC:69:43:AC:4B:51:58:98:27:F0:46:84:DA:B8:AB:BE:EB
Authority key identifier: 02:36:6F:1A:EE:F3:1C:5E:91:E4:90:26:B0:3E:74:70:CC:E1:57:8D
Certificate issuer: /CN=02366f1aeef31c5e91e49026b03e7470cce1578d
Certificate serial: 01A040F2C969492BC4E640788EEE820149D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjZvGu7zHF6R5JAmsD50cMzhV40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/AjZvGu7zHF6R5JAmsD50cMzhV40.mft
Manifest number: 64
Signing time: Thu 27 Aug 2026 02:00:48 +0000
Manifest this update: Thu 27 Aug 2026 02:00:48 +0000
Manifest next update: Fri 28 Aug 2026 02:00:48 +0000
Files and hashes: 1: AjZvGu7zHF6R5JAmsD50cMzhV40.crl (hash: ANtZtoG1p6//d9xnHhf3sq+39auRs3JH3kw31RgBb+s=)
2: oSP6Cf5NdjV4FXONxXvfRs-_8oY.roa (hash: w81hP+JqsQQtt62EYNuMoUw8Xp8nPiV4FHGOWRy41w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/AjZvGu7zHF6R5JAmsD50cMzhV40.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/AjZvGu7zHF6R5JAmsD50cMzhV40.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjZvGu7zHF6R5JAmsD50cMzhV40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:c9:69:49:2b:c4:e6:40:78:8e:ee:82:01:49:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02366f1aeef31c5e91e49026b03e7470cce1578d
Validity
Not Before: Aug 27 02:00:48 2026 GMT
Not After : Aug 28 02:00:48 2026 GMT
Subject: CN=d73d52ac6943ac4b51589827f04684dab8abbeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e7:e7:c5:a4:a9:37:97:c1:1c:c1:4e:95:b1:
53:c3:c6:68:fa:99:c4:c0:05:83:39:42:5a:4f:1b:
86:97:57:7d:27:eb:65:8f:8c:b2:fb:3c:9e:1d:73:
01:30:7a:2a:f1:8f:f0:b6:f2:75:77:26:86:bf:be:
4a:27:1c:70:e1:75:a0:98:fc:38:80:89:61:1d:36:
2e:f4:85:83:14:2c:81:7d:3d:4a:c4:1e:a3:22:65:
7b:94:af:63:a6:55:55:17:e9:13:2e:7b:ce:bd:15:
2b:8b:e3:e9:f1:bb:22:34:fa:82:6e:62:0c:8c:dd:
7e:eb:41:fd:f0:c6:1d:fe:12:43:26:ee:70:ff:ef:
d7:22:ce:ea:3a:30:c8:9a:d2:65:a2:4a:35:01:98:
46:f1:ec:6f:5b:e7:95:25:82:af:e2:6e:56:2a:9a:
93:56:00:04:f2:47:85:6d:12:1f:71:db:cd:43:83:
c3:21:40:6e:41:e2:e4:0d:2f:4a:0c:7e:b1:ec:b3:
48:8c:53:c4:f4:f6:c2:d6:2a:64:9a:86:2e:80:b5:
ee:b3:30:b6:e3:da:ff:e4:8b:79:0f:01:05:31:8f:
e3:8a:e9:aa:2d:53:ec:ee:13:d8:70:d9:54:59:76:
5c:52:69:fd:c6:55:6b:b0:50:9a:ad:b3:80:13:00:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3D:52:AC:69:43:AC:4B:51:58:98:27:F0:46:84:DA:B8:AB:BE:EB
X509v3 Authority Key Identifier:
keyid:02:36:6F:1A:EE:F3:1C:5E:91:E4:90:26:B0:3E:74:70:CC:E1:57:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjZvGu7zHF6R5JAmsD50cMzhV40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/AjZvGu7zHF6R5JAmsD50cMzhV40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a2bc1d-cf0e-4381-88b6-192ba865295e/1/AjZvGu7zHF6R5JAmsD50cMzhV40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:47:75:9a:c1:22:07:50:fe:c6:e5:12:1a:85:e4:58:9d:98:
ff:41:68:c1:eb:05:fc:98:e5:0b:5a:e9:d0:16:94:76:37:bc:
f7:d5:f0:c6:c5:be:67:ca:f3:be:53:c8:87:9b:6b:9a:17:63:
d4:c4:02:68:d6:3c:59:ea:e1:46:25:c4:09:a7:e2:3f:34:97:
77:b0:68:8c:a6:ea:1f:dd:be:4d:37:49:34:05:f1:bb:ac:ae:
64:6b:89:3e:88:f0:b4:66:61:19:c6:09:6a:8a:01:73:78:24:
fa:8e:d5:51:31:6c:03:3d:44:98:d9:19:07:e3:5d:cb:90:33:
91:36:69:86:93:6b:5d:6a:a5:50:b9:53:7d:1e:d1:93:07:81:
6c:25:8a:cb:c4:d1:84:fd:ca:c2:3c:9c:5d:a4:8c:8f:49:5d:
0b:81:a2:f8:db:45:05:3e:e8:e4:d2:81:57:2c:6d:d9:17:7c:
09:aa:db:06:9d:6d:ff:85:06:17:73:b6:16:09:09:ff:10:c4:
e1:8c:90:55:60:7f:18:4f:96:c3:bd:81:6e:5a:f4:a9:23:6e:
f8:94:b5:cc:b7:83:eb:a5:58:2c:16:29:74:02:4a:c7:38:aa:
14:5d:04:21:d4:ab:00:d9:e6:89:fa:68:37:76:3a:bf:32:4b:
41:d1:60:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:25:14 2026 by rpki-client