Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
File: AJLnRYJTGqr-6IuccujCnkVNBlk.mft (raw, json)
Hash identifier: NhdZFmk8+aJZt27AdVYLoOn1TkbpMjy9KE25trOa3MI=
Subject key identifier: 70:50:CC:DC:5B:81:E0:A1:7C:28:B3:63:6F:8D:88:11:F9:48:49:5C
Authority key identifier: 00:92:E7:45:82:53:1A:AA:FE:E8:8B:9C:72:E8:C2:9E:45:4D:06:59
Certificate issuer: /CN=0092e74582531aaafee88b9c72e8c29e454d0659
Certificate serial: 01A17582670B2DA04CD3558F067089C7DCD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
Manifest number: 01A5
Signing time: Mon 26 Oct 2026 00:00:42 +0000
Manifest this update: Mon 26 Oct 2026 00:00:42 +0000
Manifest next update: Tue 27 Oct 2026 00:00:42 +0000
Files and hashes: 1: 6ontWII5WMer-NC2JkFZC94eMPo.roa (hash: ikc5sMI2WQkSDX/3GmIBdgUqzy3XSw6lVBzfeyAHG84=)
2: AJLnRYJTGqr-6IuccujCnkVNBlk.crl (hash: pgI+a0E97hSgrGZti79yc1SPN6QHDDrUjqL9jiWmHd8=)
3: KdjeaKOVQI8nkLscbrcljjEWQvo.roa (hash: hmKWt5BMw7FcRXxgWPqVLHCN6voSzvaQG+o7oZwdPWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:82:67:0b:2d:a0:4c:d3:55:8f:06:70:89:c7:dc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0092e74582531aaafee88b9c72e8c29e454d0659
Validity
Not Before: Oct 26 00:00:42 2026 GMT
Not After : Oct 27 00:00:42 2026 GMT
Subject: CN=7050ccdc5b81e0a17c28b3636f8d8811f948495c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cd:d0:93:22:fb:3e:54:da:d6:08:44:3a:c1:
8d:ff:47:a0:2e:e9:91:c7:f1:4f:ca:cc:a2:5c:5e:
ca:39:91:3f:f3:1e:6a:0c:c7:c0:ab:fc:5e:8f:de:
9b:d0:f9:9a:cf:45:37:d0:5b:b3:a3:a5:f4:c0:6e:
d4:03:87:eb:7b:86:77:63:76:d6:ee:5a:29:8d:2d:
f5:e6:68:11:c5:20:92:b5:1a:3d:a6:da:c2:9b:23:
5c:5d:f4:5d:cc:7a:52:ad:87:9c:c2:9a:2a:2f:6b:
cd:ee:8f:c6:a7:7f:09:79:ee:16:56:17:76:46:fc:
6e:23:12:9f:2a:21:23:18:08:ee:99:9e:71:09:ae:
d0:da:ed:e6:db:0d:78:0d:84:de:02:87:fd:49:91:
f8:1b:99:14:b0:ae:1d:07:36:f6:9e:f8:69:be:82:
83:de:e0:9e:66:fe:f8:e2:a5:98:41:ef:c1:f5:a9:
1e:15:fb:a0:ec:d2:4e:5b:b7:d9:26:e7:a6:a1:85:
f0:da:10:1a:88:d7:72:9a:83:b7:9f:6d:94:79:ac:
d9:8d:12:3a:9d:88:e0:cc:67:48:ab:e2:a5:7f:a0:
2e:16:c3:e8:7a:ac:e1:98:67:59:55:60:20:69:42:
bb:b7:a6:a9:26:06:1d:25:eb:e2:7a:e6:d9:31:da:
7c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:50:CC:DC:5B:81:E0:A1:7C:28:B3:63:6F:8D:88:11:F9:48:49:5C
X509v3 Authority Key Identifier:
keyid:00:92:E7:45:82:53:1A:AA:FE:E8:8B:9C:72:E8:C2:9E:45:4D:06:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b2:89:85:68:d0:03:3e:6e:bd:26:23:3f:bb:71:80:5e:09:
3c:c2:e5:24:89:0e:c7:66:ed:d7:90:be:79:a6:ce:c8:20:15:
be:75:53:78:27:ce:a8:60:fb:e1:c6:6e:1e:10:58:16:2a:58:
8b:62:83:ca:2e:2a:e0:d4:12:bb:29:81:60:f2:6b:9f:b9:a3:
3c:b2:af:b0:0f:5b:52:f3:c3:19:3c:ca:00:17:e0:c4:b6:67:
dd:ab:f6:23:ab:ae:b1:aa:f8:5d:66:00:30:e2:97:4d:62:da:
5c:3e:c7:18:23:17:49:49:e9:a9:af:5e:99:44:86:a4:e2:37:
c7:10:6e:8b:a1:f2:b0:f1:dd:70:b2:5c:72:90:44:1c:ea:6b:
8f:8b:f4:79:a1:8d:df:35:1d:da:90:cf:1f:05:eb:d7:34:f1:
2b:10:f3:88:b1:91:35:e1:cf:48:b4:0e:4c:f6:63:d5:94:6e:
6d:ad:f6:27:a5:de:01:17:9c:0e:ae:fa:01:98:e8:25:f7:a9:
cd:a8:3d:e7:89:86:a6:08:37:89:1e:71:96:29:aa:d7:47:4f:
45:c0:45:f9:6c:ad:7f:05:0a:7a:2c:ce:34:b8:6c:a7:11:b3:
9d:7c:90:89:6c:8c:7e:f3:b4:b8:ca:e2:ed:d8:d5:92:2a:1d:
13:22:ec:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:26:38 2026 by rpki-client