Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File: Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier: Oj6yZdHFkBkh4Lt4Kl9LF9aFsVO9k+Tg8iEKY5D5uyM=
Subject key identifier: 97:CD:8E:93:1A:31:3D:73:63:B8:E3:40:C4:67:45:FC:46:3D:27:E2
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer: /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial: 01A12FC63FF04022353865AA768568BF4A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number: 08AA
Signing time: Mon 12 Oct 2026 11:01:23 +0000
Manifest this update: Mon 12 Oct 2026 11:01:23 +0000
Manifest next update: Tue 13 Oct 2026 11:01:23 +0000
Files and hashes: 1: 8NgcjLPwi4C-rpW04ANs6GcSgJ8.asa (hash: iTtRgVbNtKgQ9MR4BoISBrN3IJ+TIW9LtTTrDeAFx1k=)
2: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: gcRTnHIK4EF03Y8WclBWr8vtMM7Gsb7LR2kjP1LXHc8=)
3: IQC6LuJcxVvsBm-_EZRDXpPWxCc.roa (hash: wvfm7aMZTdRYHX9ee2IfOerZQpff8X8TbhsJrJvPsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c6:3f:f0:40:22:35:38:65:aa:76:85:68:bf:4a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Validity
Not Before: Oct 12 11:01:23 2026 GMT
Not After : Oct 13 11:01:23 2026 GMT
Subject: CN=97cd8e931a313d7363b8e340c46745fc463d27e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:04:bc:ce:a8:5a:a3:f3:0e:20:df:3d:c0:
ab:ef:2c:5f:4c:f2:f2:89:1c:76:8e:2e:ef:7a:34:
33:57:60:d9:e6:08:51:5c:51:55:e6:dc:c4:b2:4e:
ae:44:ac:01:a6:6e:af:21:e6:fe:46:54:e3:23:32:
7d:28:ca:4a:73:0b:4c:58:8f:4a:8d:a6:01:e5:96:
ff:9e:c2:1b:29:7b:7c:d3:fe:64:4e:d5:33:11:19:
45:72:ae:c8:fb:23:19:61:fd:0a:05:86:8c:79:39:
5c:f4:f8:a1:22:7d:8a:2d:e7:94:28:11:1b:23:b4:
f3:39:4f:eb:04:5c:10:6a:ab:71:07:c7:02:36:cd:
16:83:08:c3:68:32:87:ef:11:55:cd:cf:b2:12:76:
14:0f:bc:ec:49:4c:aa:86:1b:31:c2:81:1f:5e:62:
43:10:dd:07:b6:84:7e:08:98:82:43:71:e0:c1:65:
53:1e:01:f1:76:73:c9:76:b4:f7:72:67:f6:b9:fa:
5e:0c:ed:be:0d:0b:55:aa:55:db:43:3b:aa:b9:79:
37:bc:f7:c7:56:1f:bb:e7:f2:c2:dd:6a:4b:91:c1:
cf:b8:ec:12:bd:d8:50:66:e5:e0:4b:9c:da:35:fb:
8e:10:20:03:45:41:7d:27:05:f6:de:01:ee:66:2b:
40:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CD:8E:93:1A:31:3D:73:63:B8:E3:40:C4:67:45:FC:46:3D:27:E2
X509v3 Authority Key Identifier:
keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1c:cc:9b:89:97:33:63:3e:25:0f:72:fe:e4:4e:08:15:e7:
1b:cd:3c:dd:87:ca:76:8d:a5:32:4e:c7:2f:21:3b:41:b4:fc:
e4:5b:bb:49:98:e0:8d:20:3a:8d:04:a7:fa:b2:70:9f:ab:67:
92:da:d3:17:8d:b0:06:5f:c1:25:de:87:5d:12:8b:ba:23:48:
a0:ad:46:97:9a:3a:2b:ff:93:dd:93:4d:88:a7:49:dc:14:83:
0d:f6:13:3b:72:64:79:7e:64:0f:2c:3c:36:d0:9f:b6:01:e3:
9b:5a:9a:45:b9:d9:41:e4:a0:85:b1:d1:64:d2:9e:c9:b8:f2:
a1:10:87:e8:34:21:7d:f5:8f:58:e7:a9:e7:70:8f:c7:b3:e7:
54:79:b1:ab:67:83:87:c3:76:7a:1c:73:ae:1c:62:b4:78:46:
45:03:08:cd:31:83:40:98:02:84:bc:af:14:11:1d:17:5b:20:
bd:46:61:1d:27:2d:83:fb:51:76:19:29:5a:6c:0b:fe:f1:76:
1b:f7:4d:5e:c9:aa:86:c9:28:e1:dc:41:7e:8d:4d:93:2c:4d:
91:25:93:e3:68:62:ad:0c:f8:b0:6a:39:8a:2a:74:14:fe:25:
e9:83:7d:54:f8:37:64:3b:39:ca:90:1c:fe:fe:c8:81:a0:c3:
9d:37:69:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:38:19 2026 by rpki-client