Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File: Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier: 46gNDCMChwW1mb0CJrP0Eef1Ol48XVwsqUne915gsu4=
Subject key identifier: A9:99:59:3F:69:54:EE:6F:32:A0:0C:C3:42:81:DF:4F:9E:28:1D:E6
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer: /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial: 019F122EAC6182F269A0014E38D0CBD0F333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number: 0791
Signing time: Mon 29 Jun 2026 07:01:16 +0000
Manifest this update: Mon 29 Jun 2026 07:01:16 +0000
Manifest next update: Tue 30 Jun 2026 07:01:16 +0000
Files and hashes: 1: 8_kucGIrmgrww2gQuMj2PaOsbZQ.asa (hash: 959Y1QCy7S6Njd/ATDYfLCDvVcTQhA7oCE0SACZTltQ=)
2: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: RjBFffxzK9QIlxmfHHMLJBqRFW7WtKjCEhUG9THeNQc=)
3: IQC6LuJcxVvsBm-_EZRDXpPWxCc.roa (hash: wvfm7aMZTdRYHX9ee2IfOerZQpff8X8TbhsJrJvPsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:ac:61:82:f2:69:a0:01:4e:38:d0:cb:d0:f3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Validity
Not Before: Jun 29 07:01:16 2026 GMT
Not After : Jun 30 07:01:16 2026 GMT
Subject: CN=a999593f6954ee6f32a00cc34281df4f9e281de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5b:61:b1:be:d0:2a:33:e0:ea:be:06:3b:ce:
92:94:41:8f:07:ad:a2:89:bb:26:f1:67:28:1b:86:
12:9d:2e:d7:6a:59:e0:89:86:0a:a7:69:df:2c:6b:
e8:74:1a:ad:a0:9e:49:5e:84:be:df:12:0c:50:0f:
2e:f6:01:b6:5e:fe:92:dc:49:1f:32:44:72:2c:10:
29:eb:e1:66:6a:1e:74:f5:a5:cd:20:aa:33:84:49:
42:52:26:24:07:16:b9:8a:0e:9f:80:1d:2d:5c:99:
92:e6:c9:ce:c6:29:3c:93:ed:36:52:ff:73:49:d9:
5e:81:02:81:ba:e9:d8:90:60:33:53:d2:9b:f1:23:
c5:00:67:53:be:6d:12:5f:1a:d7:ed:3e:54:46:09:
c3:5b:e5:05:85:f8:63:77:cc:a1:ac:48:57:c7:1a:
ec:b2:72:8b:9a:56:85:4c:bc:ea:21:e9:1c:9d:69:
80:4d:09:c1:33:5f:0e:a1:ca:c6:67:c4:4d:24:d2:
36:26:73:a2:db:39:11:a5:85:d8:ae:83:f6:c8:2b:
cb:42:e9:1e:37:3a:58:25:1b:45:29:49:28:6f:de:
63:96:bd:39:9a:49:dc:54:49:de:55:8c:8b:1b:a2:
66:d0:b8:7a:36:4d:75:5a:28:13:15:a7:d9:20:7e:
8f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:99:59:3F:69:54:EE:6F:32:A0:0C:C3:42:81:DF:4F:9E:28:1D:E6
X509v3 Authority Key Identifier:
keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:47:74:24:84:3f:e7:7d:06:b2:8c:30:8b:7a:25:16:fc:7c:
01:b6:97:af:ea:19:78:94:91:d6:6c:3b:ae:0d:9a:47:09:ab:
0d:02:22:81:bf:5f:e7:5f:82:73:e2:4d:5e:93:b3:48:13:14:
9c:95:f9:8d:d0:81:16:73:49:28:5b:59:c9:82:81:9a:7d:c2:
a6:3e:46:02:a5:9e:d3:1f:1e:da:2a:93:c9:15:a0:69:5e:db:
88:09:ae:4f:8b:99:93:51:b1:3f:05:be:55:04:82:6b:90:19:
d6:73:26:f1:6a:c6:b9:90:bb:48:1d:29:6a:07:5f:14:1a:a1:
a2:81:ef:fd:6e:c6:75:60:1f:b1:7a:05:6c:d1:72:c0:2c:3c:
d9:3f:16:65:72:ac:62:9d:b5:13:60:51:a5:aa:9e:50:80:d6:
88:b6:53:5d:6e:04:64:e6:12:f0:4c:ab:59:8c:74:0b:50:4d:
9d:bf:91:cc:a4:5a:41:3d:88:1a:c3:a0:fe:12:12:60:5e:a1:
ec:08:35:73:d8:c5:b3:2a:fa:90:32:f8:ae:d7:f9:42:2b:51:
df:d6:94:00:e6:46:5d:3f:17:01:24:7d:f8:38:73:ad:72:05:
b0:9c:80:27:89:29:5c:0d:16:04:e9:68:8d:8e:de:88:28:9d:
bd:70:f0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:46 2026 by rpki-client