Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
File: AJLnRYJTGqr-6IuccujCnkVNBlk.mft (raw, json)
Hash identifier: FCxlkW6SnP82RDeTgctbTfxYX7r7hvJiUxu/b6ETKeg=
Subject key identifier: AE:11:DE:F6:FA:68:5D:5E:88:03:5F:88:C0:3F:D5:99:0A:8D:B6:AA
Authority key identifier: 00:92:E7:45:82:53:1A:AA:FE:E8:8B:9C:72:E8:C2:9E:45:4D:06:59
Certificate issuer: /CN=0092e74582531aaafee88b9c72e8c29e454d0659
Certificate serial: 019FA22993F45D3AE7F7F47B3097AB87E836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
Manifest number: B3
Signing time: Mon 27 Jul 2026 06:01:01 +0000
Manifest this update: Mon 27 Jul 2026 06:01:01 +0000
Manifest next update: Tue 28 Jul 2026 06:01:01 +0000
Files and hashes: 1: 6ontWII5WMer-NC2JkFZC94eMPo.roa (hash: ikc5sMI2WQkSDX/3GmIBdgUqzy3XSw6lVBzfeyAHG84=)
2: AJLnRYJTGqr-6IuccujCnkVNBlk.crl (hash: zgNNfR9nyevGbYgPxVCe6FJ4bVTgJNsU2PVSWJNmh5w=)
3: KdjeaKOVQI8nkLscbrcljjEWQvo.roa (hash: hmKWt5BMw7FcRXxgWPqVLHCN6voSzvaQG+o7oZwdPWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:93:f4:5d:3a:e7:f7:f4:7b:30:97:ab:87:e8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0092e74582531aaafee88b9c72e8c29e454d0659
Validity
Not Before: Jul 27 06:01:01 2026 GMT
Not After : Jul 28 06:01:01 2026 GMT
Subject: CN=ae11def6fa685d5e88035f88c03fd5990a8db6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:ed:de:78:d8:04:7b:d9:88:ed:3f:0a:0c:
d8:0a:5a:8e:7d:60:06:21:6f:b9:32:94:77:89:7e:
13:e5:5e:8a:6c:3d:7a:78:1d:80:c9:ba:b4:5c:42:
9f:fe:84:a6:19:52:98:15:9c:41:97:7c:9f:d3:76:
28:3d:a8:cd:51:9d:6d:54:41:c1:57:a5:46:e2:f9:
e9:bb:75:15:39:f1:66:94:07:a6:9a:4f:82:c8:46:
d3:09:38:f0:d9:af:a7:3c:7f:3b:b6:42:88:7a:3b:
07:f0:0f:a3:b3:62:a6:af:9c:ca:09:cd:a5:08:ef:
19:ea:e0:1d:ee:40:3f:91:6c:17:6d:aa:68:8f:34:
f4:db:6d:90:9d:cb:9c:42:92:4a:09:43:dd:5b:26:
00:7e:6c:54:5e:e3:b8:88:ae:b7:12:4b:b6:22:db:
49:b1:c8:6e:96:52:6e:11:1d:b7:fc:5b:b9:e2:2a:
97:ce:98:1b:7c:ef:6a:29:c3:54:84:2a:22:9a:4a:
81:e2:10:ad:f1:42:04:42:bd:f4:c0:d9:dc:a1:9d:
df:19:7e:e3:95:25:95:97:77:b3:b6:2f:2a:4c:0e:
bb:61:a6:6f:9b:95:ab:26:a5:e5:d1:d6:2b:2f:40:
11:57:73:6a:d9:da:a4:2a:64:f2:c3:ce:12:77:db:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:11:DE:F6:FA:68:5D:5E:88:03:5F:88:C0:3F:D5:99:0A:8D:B6:AA
X509v3 Authority Key Identifier:
keyid:00:92:E7:45:82:53:1A:AA:FE:E8:8B:9C:72:E8:C2:9E:45:4D:06:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:58:4d:e9:3b:2c:81:07:4e:34:80:8b:ed:ed:be:35:76:6d:
a4:bd:50:b1:c2:37:ae:df:0a:79:53:3e:06:8c:29:f1:b8:d0:
b3:ce:26:7e:2e:28:09:4d:b6:ee:16:41:1d:2f:3f:b1:8c:24:
5d:84:fb:01:12:5c:76:7c:f8:30:90:38:42:49:c7:94:64:1b:
54:da:00:05:f1:ca:03:2c:a8:8f:ac:c0:c5:61:7e:e9:f3:7d:
1d:bf:59:eb:c5:6a:6b:dd:d4:c3:02:16:4d:97:be:af:cb:fd:
b9:e5:d5:14:49:45:46:1c:b3:8f:ee:50:34:81:ca:dd:62:c6:
fd:31:be:a1:98:9a:03:13:4a:f9:c5:22:78:95:1d:83:f6:27:
1b:57:aa:4e:72:0c:10:5d:7c:e1:23:29:1e:92:94:f9:5a:16:
07:dd:06:e5:6d:ca:60:a8:ae:07:01:b8:e0:55:b2:26:ba:43:
79:0e:c1:25:a1:88:de:40:10:81:84:2d:82:a5:76:8d:21:62:
bb:71:53:1a:78:ab:da:b0:6c:42:a0:ba:b7:1e:4d:5e:ec:b4:
52:19:fa:1e:39:4e:d4:fd:8f:89:1c:08:d1:8e:fb:af:90:a1:
6f:df:bf:c8:96:af:25:ef:83:4a:d1:43:bf:7c:cc:7e:35:cb:
64:8e:d7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:56:24 2026 by rpki-client