Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
File: aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft (raw, json)
Hash identifier: DTSiU8yha1NTnQMiZUMew45FuxElLCmq43+Yfs9Df54=
Subject key identifier: 6E:43:8A:35:8A:96:98:98:EA:BB:B6:38:FC:22:77:95:A5:44:67:EF
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Certificate issuer: /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial: 019CAC7E49CC118B1E739BDCCC9359D250E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 03:01:23 +0000
Manifest this update: Mon 02 Mar 2026 03:01:23 +0000
Manifest next update: Tue 03 Mar 2026 03:01:23 +0000
Files and hashes: 1: aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl (hash: l2H2h8uP8f3sRS/sLiX7uZsdh2YxVL0SgFnSqjbwVGo=)
2: pwbWCuGOLTFOrJupg71uoibxjHU.roa (hash: AW3hofHwJcZNnJFiGJ8uTdZk7az4nc9IpPWU/+dKm48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:49:cc:11:8b:1e:73:9b:dc:cc:93:59:d2:50:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Validity
Not Before: Mar 2 03:01:23 2026 GMT
Not After : Mar 3 03:01:23 2026 GMT
Subject: CN=6e438a358a969898eabbb638fc227795a54467ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:53:6e:33:0f:c8:56:a7:a0:e3:57:07:f2:
c8:9a:7e:74:99:59:96:fa:41:27:ca:72:12:4d:36:
5d:66:ca:4e:13:d2:71:3b:06:c8:4b:0c:77:5f:3a:
e6:b0:1b:4a:a6:19:1b:f1:96:c3:95:8f:ae:fc:47:
cb:5f:e3:1b:54:6a:63:b2:c1:e6:2a:ce:dd:fe:ca:
b2:00:83:d0:35:a1:c5:6e:8c:67:f3:69:88:9e:ba:
94:4c:dd:86:3e:d2:50:1f:b8:e9:b0:58:1d:94:d4:
41:30:d3:7c:51:9f:88:5f:c3:44:55:92:c7:8b:a5:
f0:5d:c3:47:0b:29:2e:46:57:70:f4:92:c7:f2:9b:
a3:ef:b1:00:f0:d2:90:84:f6:33:fa:2b:9d:49:62:
1a:f5:92:4e:53:b4:b0:a7:a2:3c:f1:fe:fc:7f:fb:
9b:11:c5:55:26:4e:8b:10:2d:a9:f6:8b:d4:3f:06:
28:d7:be:62:3b:03:ef:84:c1:18:59:8a:26:2a:08:
b1:92:6d:fc:b9:81:4d:e7:89:5a:4d:48:e1:42:72:
16:2c:ef:cc:51:5a:12:9c:29:4f:14:b7:86:ec:de:
c6:fa:8b:59:4c:f2:5b:fc:dc:ad:00:08:dd:17:02:
dd:52:62:1d:cf:6d:6b:61:cf:ad:e1:8a:5f:3b:20:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:43:8A:35:8A:96:98:98:EA:BB:B6:38:FC:22:77:95:A5:44:67:EF
X509v3 Authority Key Identifier:
keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bb:7e:28:3c:54:e4:6f:96:d1:55:9c:cc:80:a4:b0:14:dd:
81:42:95:ad:37:26:d7:c6:54:e2:80:ad:ed:91:59:0b:2a:ac:
8d:df:c6:06:c2:e9:7f:5a:7f:58:7f:2f:8b:78:e1:45:77:4e:
c9:c5:ce:08:bd:04:9a:ff:e4:0d:56:9f:72:8c:03:81:3b:be:
2f:2f:6b:d9:48:05:76:d0:e5:66:b5:2c:58:6e:e0:bd:50:0f:
67:7d:c1:c4:00:6b:69:80:2f:3b:31:bc:19:38:ac:3e:b6:a9:
e9:63:95:f9:2e:bf:bc:10:df:65:7d:0c:6c:7d:dd:94:50:0f:
d3:97:ef:5a:40:ec:57:e8:a1:08:2b:a3:fd:db:b5:30:2c:f0:
c0:1d:86:ba:ac:b6:c5:12:02:c4:13:9e:4a:14:7a:b7:a8:14:
57:7e:9f:9a:88:72:3c:f3:bf:18:3d:2c:92:33:52:11:28:52:
c2:73:63:7d:fe:bb:68:c9:4c:94:9c:92:35:60:e7:d0:c1:40:
79:21:64:8c:19:c3:3d:b2:7b:b7:7b:d7:68:b3:51:a9:7a:57:
1f:fc:bc:d2:80:2a:a1:6f:30:8e:36:2d:b3:8d:31:15:cd:f2:
a8:3e:6f:31:f2:1c:dd:c3:ce:1f:ba:6a:8d:43:7c:94:df:6c:
ec:3b:e7:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfknMEYsec5vczJNZ0lDgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTZlNzYzZjg5YzcyMGU4N2NlNGQ3OWY4YzA5ZDA3ZjJm
YTYzOTIwHhcNMjYwMzAyMDMwMTIzWhcNMjYwMzAzMDMwMTIzWjAzMTEwLwYDVQQD
Eyg2ZTQzOGEzNThhOTY5ODk4ZWFiYmI2MzhmYzIyNzc5NWE1NDQ2N2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrhTbjMPyFanoONXB/LImn50mVmW
+kEnynISTTZdZspOE9JxOwbISwx3XzrmsBtKphkb8ZbDlY+u/EfLX+MbVGpjssHm
Ks7d/sqyAIPQNaHFboxn82mInrqUTN2GPtJQH7jpsFgdlNRBMNN8UZ+IX8NEVZLH
i6XwXcNHCykuRldw9JLH8puj77EA8NKQhPYz+iudSWIa9ZJOU7Swp6I88f78f/ub
EcVVJk6LEC2p9ovUPwYo175iOwPvhMEYWYomKgixkm38uYFN54laTUjhQnIWLO/M
UVoSnClPFLeG7N7G+otZTPJb/NytAAjdFwLdUmIdz21rYc+t4YpfOyAaxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5DijWKlpiY6ru2OPwid5WlRGfvMB8GA1UdIwQY
MBaAFGiW52P4nHIOh85NefjAnQfy+mOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNDA4ZDctMDEyYy00OGMzLWE3ZWEt
Yzg4NDBmYTg1MTQxLzEvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iNDA4ZDctMDEyYy00OGMzLWE3ZWEtYzg4NDBmYTg1MTQx
LzEvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILt+KDxU
5G+W0VWczICksBTdgUKVrTcm18ZU4oCt7ZFZCyqsjd/GBsLpf1p/WH8vi3jhRXdO
ycXOCL0Emv/kDVafcowDgTu+Ly9r2UgFdtDlZrUsWG7gvVAPZ33BxABraYAvOzG8
GTisPrap6WOV+S6/vBDfZX0MbH3dlFAP05fvWkDsV+ihCCuj/du1MCzwwB2Guqy2
xRICxBOeShR6t6gUV36fmohyPPO/GD0skjNSEShSwnNjff67aMlMlJySNWDn0MFA
eSFkjBnDPbJ7t3vXaLNRqXpXH/y80oAqoW8wjjYts40xFc3yqD5vMfIc3cPOH7pq
jUN8lN9s7Dvnew==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:38:46 2026 by rpki-client