Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File: Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier: ZFZwkYT68j1n0ZQXrDL3TdkJ3yQLMrWhz6GSkGyJrLM=
Subject key identifier: 34:EE:A1:2E:7F:1E:E7:B9:E3:A5:0C:81:F4:3E:7E:5C:B1:FA:DA:0E
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer: /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial: 01A002817E07E249447A77AA8A34EF53ED8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number: 080E
Signing time: Fri 14 Aug 2026 23:00:35 +0000
Manifest this update: Fri 14 Aug 2026 23:00:35 +0000
Manifest next update: Sat 15 Aug 2026 23:00:35 +0000
Files and hashes: 1: 8NgcjLPwi4C-rpW04ANs6GcSgJ8.asa (hash: iTtRgVbNtKgQ9MR4BoISBrN3IJ+TIW9LtTTrDeAFx1k=)
2: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: qfMgvZch5BUcTkL3R7n9O8GuKM8+JZltdCRgLmYxiEc=)
3: IQC6LuJcxVvsBm-_EZRDXpPWxCc.roa (hash: wvfm7aMZTdRYHX9ee2IfOerZQpff8X8TbhsJrJvPsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:7e:07:e2:49:44:7a:77:aa:8a:34:ef:53:ed:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Validity
Not Before: Aug 14 23:00:35 2026 GMT
Not After : Aug 15 23:00:35 2026 GMT
Subject: CN=34eea12e7f1ee7b9e3a50c81f43e7e5cb1fada0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:56:36:57:d8:b7:65:d5:62:0a:4f:22:c5:
72:7c:a5:d2:e8:4d:e3:db:ee:3c:f6:79:7c:91:50:
88:ec:2b:bc:d5:d0:49:17:20:1c:80:6e:71:32:db:
67:be:07:f3:dd:c2:85:aa:fe:e4:6e:ac:15:6b:91:
2d:28:cb:83:0a:b0:be:72:d6:6e:09:1a:4a:6d:73:
32:93:23:ea:79:43:ee:3f:ab:f8:6f:30:9f:64:40:
7d:dc:9c:bd:b4:43:2d:03:db:72:59:4a:d4:b0:b0:
21:73:a6:40:73:a8:94:ad:7b:ba:ee:3e:7e:d6:27:
38:81:ff:be:ed:98:7a:92:1d:50:d3:d0:ac:1e:08:
79:7e:12:b3:07:df:b6:48:cd:30:ad:0d:8a:0b:5c:
fc:d8:50:48:c2:58:a1:43:2e:dd:3b:b1:41:1a:2f:
bf:76:b8:7b:60:5d:1f:f7:5d:1e:65:bf:b0:ba:fa:
78:bd:b9:e8:93:7b:a3:20:80:a1:8d:d2:69:c5:6c:
76:65:e9:3e:d9:96:4b:a0:20:e1:65:07:bb:31:aa:
2d:41:8a:0a:7f:d1:67:d5:73:be:35:1c:4b:45:6d:
90:d0:c5:f6:d7:7a:17:fa:83:5b:a1:95:20:b4:60:
a6:77:c7:d4:21:10:c4:3e:e3:97:dd:90:a2:b4:69:
95:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EE:A1:2E:7F:1E:E7:B9:E3:A5:0C:81:F4:3E:7E:5C:B1:FA:DA:0E
X509v3 Authority Key Identifier:
keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:29:88:f0:8f:35:4c:c7:73:5c:f7:fb:76:f9:10:5c:2c:a5:
71:11:e2:f8:f2:47:05:58:0b:d4:3c:5d:61:9f:b1:ab:b1:e5:
ab:15:7e:70:45:b8:15:bb:7e:96:b5:ed:09:e2:48:47:ec:88:
99:a4:20:6f:5b:cb:0c:71:81:6c:08:00:af:a0:f3:2a:a7:7f:
a7:90:09:07:19:f2:6e:21:fa:3b:69:8c:5f:3c:b4:4a:97:a9:
6d:d4:e5:31:7e:a2:7e:51:b2:a5:08:a6:53:82:d0:ba:48:53:
06:7c:17:92:56:ad:ee:65:ff:ca:10:51:41:03:2f:5f:7c:01:
00:77:cb:ba:ab:99:17:0b:b1:b9:94:8a:c0:fa:51:8d:19:92:
59:f7:da:ed:e3:b0:2f:31:ec:ac:e3:3c:34:fe:ac:e9:3e:70:
8e:df:2d:b5:5c:38:0a:27:75:dd:b7:a4:88:b9:e9:16:8d:89:
f4:73:ac:26:d8:21:95:ee:79:e4:03:48:fe:99:5e:af:bd:1c:
1e:3a:85:4d:f8:f7:3d:43:6e:ce:54:4c:3c:e3:30:a3:ed:d2:
83:fa:0a:53:ed:f5:00:a9:aa:d8:91:48:cb:9f:4e:84:a8:b5:
ea:aa:b2:09:a3:07:23:5b:d8:a8:46:22:f0:ed:18:e6:3e:05:
0f:67:fc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:07 2026 by rpki-client