Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier: UPRb0n03teOi8uE5GdHKwq440gGZ6CN/3osIRgjbtfQ=
Subject key identifier: 32:08:AF:66:00:01:75:F4:41:C1:E0:7F:53:29:AF:9F:72:BE:1A:11
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 01A00093B487D64BA01C341FAE6AFBCBBD81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number: 122F
Signing time: Fri 14 Aug 2026 14:01:15 +0000
Manifest this update: Fri 14 Aug 2026 14:01:15 +0000
Manifest next update: Sat 15 Aug 2026 14:01:15 +0000
Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: WFrzIWkoCQkLvRbVEHl9uDFTnofvjCs44GFbexF27pE=)
2: IseXGFrOHh1SrFUGwBGdimL1xPE.roa (hash: QRfGT54r8WrtHwlE62/eFdNxhXQLn2BRJl4Hpjv4kZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:b4:87:d6:4b:a0:1c:34:1f:ae:6a:fb:cb:bd:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: Aug 14 14:01:15 2026 GMT
Not After : Aug 15 14:01:15 2026 GMT
Subject: CN=3208af66000175f441c1e07f5329af9f72be1a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:d9:da:0a:37:f2:fc:e4:cd:e4:72:f1:4d:
66:cd:55:f8:1a:6b:14:04:ea:ba:0a:52:af:77:61:
a6:04:10:86:78:57:e7:c6:ab:82:95:19:b9:8d:2a:
77:9c:94:37:88:62:63:9c:4c:4e:9b:65:25:8d:69:
80:f8:a4:50:ab:d8:b5:a1:e1:7c:a3:3e:28:6e:dd:
94:43:d4:c1:af:6f:4a:a7:fe:ca:ed:a6:30:7c:4a:
f3:ed:4f:2f:43:f1:a8:31:f7:f4:b4:36:7f:fa:08:
fb:f3:ba:b4:f0:0d:ef:2b:c8:70:e9:01:2a:36:a5:
ef:6e:10:2d:12:e2:82:cb:b0:e5:3c:0e:2b:2a:90:
8a:c8:c4:c1:51:40:15:f6:e7:d2:68:00:ba:5f:9c:
99:1a:68:f1:77:af:c2:1f:f5:58:d7:63:82:29:ca:
44:2f:9a:a0:59:97:72:04:50:01:16:37:fc:67:6a:
4c:00:f1:e2:36:3b:91:5b:95:f6:19:3d:74:1c:c1:
d9:83:1a:62:95:6a:9c:56:7b:ea:cd:65:49:34:5f:
22:8b:71:a7:24:29:2a:e1:92:76:7e:55:b4:02:2b:
28:49:91:dc:d9:05:d8:5d:32:b4:a5:f9:08:99:21:
4b:35:30:4b:5f:e2:82:5d:66:d2:05:61:b9:a7:42:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:08:AF:66:00:01:75:F4:41:C1:E0:7F:53:29:AF:9F:72:BE:1A:11
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f8:4c:94:f8:2e:19:9c:41:02:f1:df:18:5b:10:ea:ba:5e:
fb:e3:ac:f5:31:ce:55:58:ff:bf:74:81:6e:c2:7a:79:2c:b1:
ec:47:f9:f1:c0:7f:a6:22:8b:b3:c0:d8:a0:09:3b:30:ec:2e:
36:a8:64:5a:3e:58:16:07:67:ad:3c:92:20:6c:9b:63:57:d8:
cb:9e:c7:b7:8d:71:dd:6a:7a:4b:3b:dd:f1:2a:56:20:fc:ca:
69:d5:2f:cd:81:19:48:2a:7b:98:04:bc:56:f5:5e:c9:55:bc:
6d:5a:02:07:8d:36:bd:a8:05:7a:fe:d7:4c:5d:8b:0f:cd:18:
fa:14:75:0e:21:a2:0e:62:6b:af:80:10:5a:c0:e6:8a:4d:0a:
f3:ef:ed:bc:19:4c:ef:77:c8:13:8e:d9:34:9e:3f:8a:cf:eb:
bd:c0:d1:cd:d2:7c:05:70:ae:ca:d9:43:b5:d7:46:2d:aa:46:
81:8c:fa:3c:68:73:5f:bb:3f:e5:4c:e7:c1:9e:1f:a0:8c:5f:
5e:7b:95:88:2c:d2:61:57:d0:12:a0:75:9c:20:30:f6:de:82:
63:38:3f:96:6e:2a:63:04:f4:e9:0b:f3:9d:df:a6:fc:20:da:
af:78:68:c9:6c:69:81:bd:4a:c5:a8:43:a1:98:05:8f:3f:94:
8b:8b:81:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:07 2026 by rpki-client