Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
File: AJLnRYJTGqr-6IuccujCnkVNBlk.mft (raw, json)
Hash identifier: QaYJIYud0lRMJe2WEcqHGqKGxH4GszvZHA4p9o2jC08=
Subject key identifier: 56:8D:71:E5:64:52:09:13:77:8B:D1:0F:77:B1:69:2F:7B:46:81:DA
Authority key identifier: 00:92:E7:45:82:53:1A:AA:FE:E8:8B:9C:72:E8:C2:9E:45:4D:06:59
Certificate issuer: /CN=0092e74582531aaafee88b9c72e8c29e454d0659
Certificate serial: 019EBA6B19DBEAC8D81CD1D602B9BCEDA17A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
Manifest number: 3B
Signing time: Fri 12 Jun 2026 06:00:41 +0000
Manifest this update: Fri 12 Jun 2026 06:00:41 +0000
Manifest next update: Sat 13 Jun 2026 06:00:41 +0000
Files and hashes: 1: 6ontWII5WMer-NC2JkFZC94eMPo.roa (hash: ikc5sMI2WQkSDX/3GmIBdgUqzy3XSw6lVBzfeyAHG84=)
2: AJLnRYJTGqr-6IuccujCnkVNBlk.crl (hash: WpV8Zrk0R2qN3hfSeegXUy3JAXVfneJ22Ay10uSyxhI=)
3: KdjeaKOVQI8nkLscbrcljjEWQvo.roa (hash: hmKWt5BMw7FcRXxgWPqVLHCN6voSzvaQG+o7oZwdPWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:6b:19:db:ea:c8:d8:1c:d1:d6:02:b9:bc:ed:a1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0092e74582531aaafee88b9c72e8c29e454d0659
Validity
Not Before: Jun 12 06:00:41 2026 GMT
Not After : Jun 13 06:00:41 2026 GMT
Subject: CN=568d71e564520913778bd10f77b1692f7b4681da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:8d:4a:19:f4:f3:b9:23:c9:c9:79:65:17:
4f:3c:53:dc:25:02:a5:e8:73:9b:aa:44:da:dc:ce:
8c:71:a0:7a:65:d0:c6:31:24:02:6e:3d:2f:0a:f7:
9a:26:57:b2:f4:cf:f2:70:2d:df:84:f2:66:93:26:
89:46:2d:7b:18:b6:97:07:de:1a:e0:fe:7c:df:7b:
df:9d:bc:ef:e9:58:a7:e4:d4:ea:00:d0:01:27:b3:
51:6d:65:9c:f2:9e:1e:9c:f2:69:d9:34:a5:11:06:
5a:29:c2:24:02:ea:20:ba:d1:bb:c6:a1:d8:de:1d:
47:e2:4b:e3:a2:9f:46:6b:ac:cb:6a:b5:fc:bf:cf:
b2:37:55:a0:62:1b:88:ea:90:9b:76:66:c2:04:fd:
ee:59:24:3d:d1:a8:5e:60:45:e8:38:1c:71:78:02:
1e:e3:d7:20:c8:b8:e5:63:8f:2a:55:ce:27:69:ca:
d4:8b:15:67:59:0f:6a:81:d1:5b:17:a7:e2:65:b7:
84:66:ed:e5:e3:0a:be:90:c9:32:ba:3e:2d:d2:02:
b2:c5:eb:96:58:97:52:0e:3c:a9:cf:be:cb:75:ce:
18:e9:7e:5f:37:f4:52:e5:4c:2e:47:9d:e9:62:46:
56:44:3e:2b:8f:fb:2f:b3:23:0e:85:37:6f:50:19:
cd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8D:71:E5:64:52:09:13:77:8B:D1:0F:77:B1:69:2F:7B:46:81:DA
X509v3 Authority Key Identifier:
keyid:00:92:E7:45:82:53:1A:AA:FE:E8:8B:9C:72:E8:C2:9E:45:4D:06:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJLnRYJTGqr-6IuccujCnkVNBlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/759143-d9bd-46e4-8865-8e1da5142c72/1/AJLnRYJTGqr-6IuccujCnkVNBlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ae:df:18:87:24:f0:d8:95:ab:e7:81:94:33:56:f3:ad:c8:
2b:54:79:2f:48:cd:21:cf:34:3d:1d:11:5d:0b:bf:6c:66:34:
d9:83:1c:f6:30:f0:d5:cf:d4:10:60:78:ca:25:38:1c:64:44:
c3:de:2f:99:54:a3:4e:db:9d:64:a0:20:56:ac:f6:81:bd:7a:
0a:71:7d:a4:8e:5a:cc:91:e1:0e:d2:94:25:81:1b:09:6e:c5:
3a:28:61:c0:3b:29:63:ff:97:e0:60:36:aa:83:16:d2:ba:06:
6a:49:bb:1c:36:d0:da:be:a3:f7:be:df:ea:24:f2:2f:74:2d:
eb:1f:54:68:99:d1:66:a2:8a:65:16:5b:ac:e2:96:22:52:03:
cf:c5:a4:5b:22:41:03:23:ee:d3:b3:f1:3b:90:13:ec:86:fd:
1d:02:52:d2:b8:bc:c0:7a:9a:4a:bd:c9:a9:50:1d:79:cb:30:
8d:c4:93:de:d7:e1:69:18:29:e8:65:e8:45:ed:5e:34:5e:58:
25:f2:d0:0f:9b:fe:35:ec:bc:6e:06:83:da:eb:c9:b1:c1:00:
93:44:f2:cd:e2:c9:af:34:01:0e:2c:e8:49:38:2d:8b:42:52:
c3:ae:93:80:6c:e7:fa:34:4f:a2:b0:9a:b0:c7:44:dc:ea:e1:
fc:03:81:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:32:40 2026 by rpki-client