Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier: FN8vNh8vSPWM4Yb37UnEy/1Wuhcfh5qMf3nkP7CjuQE=
Subject key identifier: 14:0F:C6:1D:55:FB:69:3F:88:DD:94:36:45:93:FA:4C:1A:E9:59:35
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 019D37F79A80E52AEF90FF2A3DC036153E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number: 10BE
Signing time: Sun 29 Mar 2026 05:01:06 +0000
Manifest this update: Sun 29 Mar 2026 05:01:06 +0000
Manifest next update: Mon 30 Mar 2026 05:01:06 +0000
Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: NKWSTbBjnrE/u/UjBzCs4NokcJjCxtcTKBVkYYdwMJ8=)
2: IseXGFrOHh1SrFUGwBGdimL1xPE.roa (hash: QRfGT54r8WrtHwlE62/eFdNxhXQLn2BRJl4Hpjv4kZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:9a:80:e5:2a:ef:90:ff:2a:3d:c0:36:15:3e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: Mar 29 05:01:06 2026 GMT
Not After : Mar 30 05:01:06 2026 GMT
Subject: CN=140fc61d55fb693f88dd94364593fa4c1ae95935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:ef:48:d4:6c:8d:73:e0:83:73:bf:56:fd:
08:41:ec:51:c9:87:78:a3:9a:c5:62:d2:77:a3:a7:
10:7c:42:2f:ad:92:6d:73:be:bd:c2:d1:85:8f:ef:
c4:9d:8f:e8:62:a7:6e:f1:d7:7f:22:78:e7:19:7b:
dd:89:3f:d9:0b:8c:32:5a:e8:29:ba:84:11:82:34:
3c:40:ea:72:0f:43:2c:46:72:08:0d:6f:de:f2:21:
29:6d:15:11:e2:a5:e2:b1:4a:2c:0f:41:6c:64:02:
0a:41:1d:6b:b0:a8:0d:17:7b:b3:5a:f7:51:7e:b8:
d8:64:7d:d8:57:fd:32:99:4b:33:cd:df:de:16:f9:
3e:a2:bd:f6:65:68:d5:b0:2d:cd:6a:b5:07:ae:7b:
fe:51:df:68:b7:eb:43:7f:c9:ee:62:47:f3:06:75:
df:dd:da:da:4f:e0:7b:20:29:e0:7c:52:e0:d0:59:
43:3d:ac:93:7b:4a:19:2f:de:36:e4:3b:1d:fb:2c:
45:33:67:04:a2:05:c8:65:fe:b9:b7:71:7a:fb:b1:
a7:da:ce:f9:54:d6:c9:e1:e3:4b:85:e4:9a:3f:5e:
cf:91:50:c6:6c:0e:b5:06:a8:ef:e8:6a:51:ac:ab:
6c:8e:6d:ec:ea:e7:ab:45:23:8b:87:17:2b:9b:e3:
aa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0F:C6:1D:55:FB:69:3F:88:DD:94:36:45:93:FA:4C:1A:E9:59:35
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:55:18:81:f9:bd:c9:9e:e5:12:e0:ef:27:31:cc:d1:a7:0c:
6d:d0:b7:f2:6f:23:07:89:47:4e:45:01:25:b1:f5:bd:ad:5f:
21:b0:02:86:d7:58:bc:09:0f:05:cc:df:f3:63:67:68:2f:91:
7a:de:f4:92:01:56:92:e7:6f:b4:ce:52:e1:a2:ca:17:26:97:
86:f4:cb:8a:b8:6b:f9:4a:22:16:3c:b0:6a:f5:45:29:a9:45:
22:b0:34:1b:80:32:3f:74:51:fa:5e:28:58:c4:51:71:1c:20:
4b:57:3a:87:c3:7b:b4:27:b4:ba:84:04:c3:de:63:9b:e3:37:
b5:ae:0b:b4:7e:f5:3e:17:74:57:b7:11:16:d3:3e:eb:f0:af:
57:f6:7b:ac:cd:53:b0:c9:51:37:37:b0:0f:9e:a4:16:9e:54:
c4:39:c1:d4:78:a0:db:f2:6e:a1:a9:a0:34:1b:b9:48:bc:f2:
ec:a9:0b:62:f3:3b:bd:ed:60:4a:c0:b8:e0:79:76:9a:67:f4:
2f:32:42:ed:e6:b8:1c:55:90:bb:df:41:6e:de:e7:10:3d:7d:
60:32:5d:19:f4:18:1e:74:a8:f2:33:9d:76:40:df:3f:bf:29:
b3:bf:ad:96:04:a3:b9:fe:67:3c:3d:5b:a4:e8:10:9b:85:54:
db:4e:95:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:38 2026 by rpki-client