Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
File: AJJn8-O54eu5eZaQgLDfqyTDYBo.mft (raw, json)
Hash identifier: h/qJy/cQmHSuaXTJ8SPdk5NQFRg/7JG5pduQ7JUwjW4=
Subject key identifier: 17:9E:01:63:B0:F1:A5:04:7E:CB:D1:43:27:01:21:1A:91:2E:72:7D
Authority key identifier: 00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
Certificate issuer: /CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Certificate serial: 019D38D2B312F11B90A4E3C1D0110069CF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
Manifest number: 0462
Signing time: Sun 29 Mar 2026 09:00:25 +0000
Manifest this update: Sun 29 Mar 2026 09:00:25 +0000
Manifest next update: Mon 30 Mar 2026 09:00:25 +0000
Files and hashes: 1: AJJn8-O54eu5eZaQgLDfqyTDYBo.crl (hash: 0fXH/UfOnyblkFG/iILCVfTSLAgd4TZMSIqsVoLBlpc=)
2: d9OmlBe2GpKLvl3u0mUGOFIDWgo.roa (hash: Ba/7rGgRRFa7/HkHrFHCRps9ypeyWifGgSmqxh5y+b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:b3:12:f1:1b:90:a4:e3:c1:d0:11:00:69:cf:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Validity
Not Before: Mar 29 09:00:25 2026 GMT
Not After : Mar 30 09:00:25 2026 GMT
Subject: CN=179e0163b0f1a5047ecbd1432701211a912e727d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:59:5c:aa:db:dd:e4:4a:d2:0b:40:3b:62:6a:
14:50:6c:79:f5:25:c6:76:e3:c3:e2:a9:18:96:26:
44:01:4b:6e:77:e2:28:05:61:68:bb:0d:d2:94:e4:
10:85:8c:a5:a1:a7:06:c4:8a:67:62:b0:4a:d3:f0:
31:1b:c7:bc:ef:9d:e2:a9:01:fc:ea:58:af:1a:5c:
9c:64:9b:33:5c:b0:dd:13:02:d0:70:2a:73:10:87:
02:4a:63:2f:4f:a9:08:19:02:d5:d6:fb:bd:c8:9c:
d3:bc:8b:04:8d:1b:df:02:9e:8e:15:55:cb:e6:a9:
9f:96:5f:23:c3:d4:16:05:f3:57:a1:4a:e2:48:09:
65:2f:61:77:99:74:7a:01:c5:1c:b2:ef:8c:54:76:
67:c5:52:dc:89:1d:c4:88:51:5d:aa:36:bf:31:15:
82:ff:39:26:5e:ac:0e:07:e8:55:ce:10:28:a4:66:
02:ac:83:09:80:a4:db:e8:e1:9c:7b:9e:03:f5:ab:
8e:b3:06:a2:3d:8e:95:e8:25:a5:a3:2f:23:93:bb:
2d:f8:9c:17:52:a8:55:ce:04:bc:39:3b:ce:9d:48:
73:ab:b5:cc:a5:ac:f6:90:b9:f9:45:63:83:d2:b5:
ee:d6:23:d0:8c:27:9b:d5:fd:d4:f2:d5:77:e6:99:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9E:01:63:B0:F1:A5:04:7E:CB:D1:43:27:01:21:1A:91:2E:72:7D
X509v3 Authority Key Identifier:
keyid:00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6a:d9:a1:0c:1c:3f:06:23:f3:38:13:85:0d:84:8c:80:ad:
dd:e2:c2:c0:a7:62:c9:30:5e:ae:61:56:42:06:42:24:88:8c:
73:32:c6:61:c9:37:a2:74:c6:74:67:ec:1a:db:1c:98:d6:e0:
7a:7c:60:39:64:80:a7:eb:be:30:f3:c3:2c:89:61:26:bb:01:
7a:f9:b8:b1:00:87:38:3d:af:81:2c:33:ce:9a:f3:75:d4:01:
c1:1c:9e:c4:90:03:44:14:14:f0:ea:a5:13:1e:2c:89:8c:e7:
b1:3a:0c:e3:8f:a5:43:c2:cd:8b:9e:40:a9:da:72:a0:92:95:
b2:e5:c8:28:9f:f0:66:88:38:67:41:3e:6e:11:17:db:f0:d0:
26:77:29:97:5f:1c:f8:a9:32:d4:b9:23:e7:4a:09:c3:ad:4e:
7d:cb:11:cf:a1:36:f5:f3:1b:a7:6d:54:46:cc:ea:6b:3e:48:
c8:dd:de:8b:3e:11:2c:92:b6:82:76:59:ad:68:03:ed:61:69:
65:92:49:ac:b0:12:1f:2c:68:39:11:a6:ef:d8:6a:21:e4:ee:
c7:00:ec:7b:4b:87:dc:fd:c7:45:16:af:87:0b:23:61:dd:d9:
88:c4:3e:0b:19:17:76:6c:ec:5a:42:5f:34:cb:bc:23:39:f8:
22:e2:a2:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040rMS8RuQpOPB0BEAac88MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTI2N2YzZTNiOWUxZWJiOTc5OTY5MDgwYjBkZmFiMjRj
MzYwMWEwHhcNMjYwMzI5MDkwMDI1WhcNMjYwMzMwMDkwMDI1WjAzMTEwLwYDVQQD
EygxNzllMDE2M2IwZjFhNTA0N2VjYmQxNDMyNzAxMjExYTkxMmU3MjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1lcqtvd5ErSC0A7YmoUUGx59SXG
duPD4qkYliZEAUtud+IoBWFouw3SlOQQhYyloacGxIpnYrBK0/AxG8e8753iqQH8
6livGlycZJszXLDdEwLQcCpzEIcCSmMvT6kIGQLV1vu9yJzTvIsEjRvfAp6OFVXL
5qmfll8jw9QWBfNXoUriSAllL2F3mXR6AcUcsu+MVHZnxVLciR3EiFFdqja/MRWC
/zkmXqwOB+hVzhAopGYCrIMJgKTb6OGce54D9auOswaiPY6V6CWloy8jk7st+JwX
UqhVzgS8OTvOnUhzq7XMpaz2kLn5RWOD0rXu1iPQjCeb1f3U8tV35pl4rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeeAWOw8aUEfsvRQycBIRqRLnJ9MB8GA1UdIwQY
MBaAFACSZ/PjueHruXmWkICw36skw2AaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpKbjgtTzU0ZXU1ZVphUWdMRGZxeVREWUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNGRiYTYtNmQ5NC00MTBmLTliZTIt
ZDY5MDM4MjUwMThjLzEvQUpKbjgtTzU0ZXU1ZVphUWdMRGZxeVREWUJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9mNGRiYTYtNmQ5NC00MTBmLTliZTItZDY5MDM4MjUwMThj
LzEvQUpKbjgtTzU0ZXU1ZVphUWdMRGZxeVREWUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGrZoQwc
PwYj8zgThQ2EjICt3eLCwKdiyTBermFWQgZCJIiMczLGYck3onTGdGfsGtscmNbg
enxgOWSAp+u+MPPDLIlhJrsBevm4sQCHOD2vgSwzzprzddQBwRyexJADRBQU8Oql
Ex4siYznsToM44+lQ8LNi55AqdpyoJKVsuXIKJ/wZog4Z0E+bhEX2/DQJncpl18c
+Kky1Lkj50oJw61OfcsRz6E29fMbp21URszqaz5IyN3eiz4RLJK2gnZZrWgD7WFp
ZZJJrLASHyxoORGm79hqIeTuxwDse0uH3P3HRRavhwsjYd3ZiMQ+CxkXdmzsWkJf
NMu8Izn4IuKibg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:18 2026 by rpki-client