Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
File: aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft (raw, json)
Hash identifier: rIJSX8EX4gfNgjL+k9dw2JvRbVeSoqxc++WvCl6U/tA=
Subject key identifier: B2:2D:BC:3F:A7:71:50:A6:AE:E0:A4:87:4D:60:19:DD:5A:FC:11:A7
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Certificate issuer: /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial: 019EE82048E0442A08296B0A7CBEA9300F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
Manifest number: 1902
Signing time: Sun 21 Jun 2026 03:01:30 +0000
Manifest this update: Sun 21 Jun 2026 03:01:30 +0000
Manifest next update: Mon 22 Jun 2026 03:01:30 +0000
Files and hashes: 1: aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl (hash: PKZ9VG0VuJARiNvv+Sq903l08UwJGgHWaJLzJGHGN1A=)
2: pwbWCuGOLTFOrJupg71uoibxjHU.roa (hash: AW3hofHwJcZNnJFiGJ8uTdZk7az4nc9IpPWU/+dKm48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:20:48:e0:44:2a:08:29:6b:0a:7c:be:a9:30:0f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Validity
Not Before: Jun 21 03:01:30 2026 GMT
Not After : Jun 22 03:01:30 2026 GMT
Subject: CN=b22dbc3fa77150a6aee0a4874d6019dd5afc11a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:88:23:75:12:5f:12:59:f6:fe:37:8b:15:
8c:ef:46:2a:ec:68:c6:d1:49:a7:9b:3b:01:b8:be:
c3:ed:a1:ae:5a:00:18:2a:22:2e:84:85:ed:7c:ba:
bb:58:1f:f2:a6:e4:20:58:5e:7b:8d:63:c8:3c:74:
f2:b0:fd:c5:58:4f:17:ed:0a:dd:9e:9b:ab:2c:38:
c0:02:c1:f3:dd:af:e5:02:39:9d:33:73:47:5f:ef:
a6:8f:9b:d1:43:ba:cf:41:c1:2f:8a:a5:33:ad:3e:
c7:6c:c8:42:ce:8b:a9:fd:ee:4a:ab:9c:34:0e:45:
9a:00:da:77:02:77:89:a5:3f:b5:eb:57:70:63:a1:
27:71:a9:5f:0e:13:ab:49:8a:4a:b2:d4:a5:68:e9:
4e:f0:f5:79:4f:96:c2:65:ed:ca:50:00:64:12:34:
1d:1a:75:4a:07:e8:09:ba:a2:55:9e:13:74:98:41:
78:3a:d4:54:08:96:65:b5:42:8b:90:2c:4a:37:21:
46:d4:01:cc:ca:23:00:62:94:78:a6:5c:91:1d:1d:
e3:23:a2:d2:24:59:0b:85:0f:c0:bb:88:ff:89:16:
0f:9a:a5:5b:ef:b7:68:ac:d7:d6:55:d8:fa:6e:49:
95:42:0c:63:9f:b5:be:ee:02:41:13:21:7d:51:d5:
9b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:2D:BC:3F:A7:71:50:A6:AE:E0:A4:87:4D:60:19:DD:5A:FC:11:A7
X509v3 Authority Key Identifier:
keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3b:da:83:b0:88:60:f5:85:d2:30:bb:e9:1c:56:55:48:45:
30:8b:09:f6:fe:96:09:33:61:b0:0e:16:47:5e:50:0b:64:a2:
e0:ac:6f:30:a4:16:3a:fc:de:8d:f0:6f:e4:4e:f8:bd:d4:5d:
b9:0d:93:de:b1:28:a0:2e:68:68:66:73:e7:1b:79:39:37:12:
22:34:2b:89:32:fb:04:50:b7:fc:b2:66:d4:64:d2:85:3f:51:
75:fb:a9:79:e9:13:fc:4b:c8:3d:cc:67:c3:0a:c5:6b:be:c6:
2c:31:d5:e1:cf:5e:37:13:91:90:52:af:cf:0a:29:25:40:78:
a1:0c:50:ae:7f:09:39:c8:26:68:7b:df:31:af:59:7a:67:84:
50:13:4b:b5:29:0a:83:fc:13:3b:c3:c6:a2:12:15:e6:82:44:
42:c3:38:65:02:6a:7c:71:df:89:0f:1d:89:7e:f4:e2:8f:ce:
9d:e6:e9:60:84:9a:98:35:83:14:a6:90:25:76:71:3c:de:c8:
7a:f2:16:0d:0a:a3:64:cf:c4:e0:c1:9b:dd:3e:ba:08:bd:8a:
df:33:29:38:66:f1:d7:2f:b2:dc:a4:48:cf:c4:38:a2:ed:e5:
26:65:f1:db:6a:f6:29:bc:f9:90:93:4c:55:8e:47:00:63:45:
15:89:6c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 11:24:50 2026 by rpki-client