Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File: Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier: clwxv5gLylro3bLOsDq9T8Y5GYxj/zlQiSLE4hOhgXc=
Subject key identifier: 8B:51:8E:4D:39:36:7D:76:FB:CD:AF:D6:B5:3B:75:B7:3E:15:D2:D0
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer: /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial: 019E2881D15B5A868997D85D44549C79D88E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number: 0718
Signing time: Thu 14 May 2026 22:00:56 +0000
Manifest this update: Thu 14 May 2026 22:00:56 +0000
Manifest next update: Fri 15 May 2026 22:00:56 +0000
Files and hashes: 1: 8_kucGIrmgrww2gQuMj2PaOsbZQ.asa (hash: 959Y1QCy7S6Njd/ATDYfLCDvVcTQhA7oCE0SACZTltQ=)
2: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: ijwxLrXGxqJrdcdcwXGSSS+UD213QS0LWRa6vkrwkWw=)
3: IQC6LuJcxVvsBm-_EZRDXpPWxCc.roa (hash: wvfm7aMZTdRYHX9ee2IfOerZQpff8X8TbhsJrJvPsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:81:d1:5b:5a:86:89:97:d8:5d:44:54:9c:79:d8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Validity
Not Before: May 14 22:00:56 2026 GMT
Not After : May 15 22:00:56 2026 GMT
Subject: CN=8b518e4d39367d76fbcdafd6b53b75b73e15d2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:56:7b:ab:ad:15:82:ee:96:79:a2:e5:32:0c:
27:24:27:b0:0a:b5:ce:e5:dc:4d:e1:70:62:35:27:
73:2d:16:c8:1f:d9:55:26:0d:ce:0c:77:e2:6a:62:
76:8d:a3:1d:3d:0c:89:a9:f8:3b:25:d9:8e:30:41:
2d:fb:c5:8e:2e:c3:95:7c:61:7c:08:8f:48:63:f3:
85:dc:0a:3d:60:72:51:88:5d:75:6f:9a:cb:66:56:
c1:f9:c5:50:da:20:49:f0:34:fe:a5:88:4f:7f:d7:
5a:fe:65:14:e0:a8:d9:6d:0c:97:51:1d:31:9c:89:
68:c2:ba:1e:36:52:2a:df:73:84:27:bc:f7:81:14:
0d:ed:8b:7a:b4:cc:60:84:96:0d:33:11:ea:08:92:
b6:04:eb:ab:e6:95:fd:24:31:fa:63:e1:c2:3d:03:
e7:d5:31:f7:fe:7e:61:b7:84:ab:fe:d0:93:5b:39:
47:f0:5b:c0:a9:5e:b4:07:cb:40:1f:40:2b:f2:59:
23:a7:34:98:af:8d:45:38:a9:af:a3:18:4c:27:8b:
37:65:6c:0f:c3:80:17:6a:15:18:d7:e3:d6:86:c8:
18:61:24:1f:9d:5d:b7:f9:74:04:ec:9c:17:8d:6c:
2e:8b:74:c3:e8:05:1c:75:48:66:cf:61:8d:a7:24:
21:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:51:8E:4D:39:36:7D:76:FB:CD:AF:D6:B5:3B:75:B7:3E:15:D2:D0
X509v3 Authority Key Identifier:
keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a8:4e:9f:ac:af:2c:20:7c:5e:c4:69:90:24:33:08:b6:53:
7e:2a:5a:10:8d:ce:1d:35:b9:2f:cf:15:b3:58:d6:91:69:4f:
10:f7:b3:1d:f7:be:d5:51:c5:df:e1:a9:47:3b:92:dd:8d:da:
c4:36:7f:7d:63:b7:10:f8:6c:e6:72:fe:13:0c:95:e7:43:cc:
9c:fb:96:fd:48:92:9b:80:27:07:08:da:b5:17:aa:10:33:1b:
1b:98:1e:0b:48:41:7a:8f:23:fd:02:ee:f1:1c:a4:91:37:88:
53:25:12:39:cf:3d:80:ec:88:27:51:06:29:c6:e6:9f:1c:22:
58:3f:50:70:60:d3:11:3a:c7:42:b5:5d:43:6b:27:3e:c3:69:
6b:1a:54:2b:92:92:d6:03:ac:9c:cc:2b:e2:10:3a:82:70:21:
ba:d5:c3:ff:f7:0e:02:47:1c:4c:9e:cc:22:c9:3b:56:cf:0d:
01:c7:76:3a:26:ca:0c:a7:ec:69:10:20:2e:0b:d8:04:d4:ed:
9d:ad:50:92:6f:97:fd:36:c1:35:0e:c5:cf:82:79:44:cc:0a:
3b:b4:75:e1:a0:43:19:31:0a:3f:b6:63:2b:70:34:4a:7d:39:
1b:b2:06:8a:a1:93:14:73:74:a3:55:16:7c:19:9f:c0:a5:db:
38:5f:fa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:46 2026 by rpki-client