Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
File: aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft (raw, json)
Hash identifier: V+ErIfRcF+r5A/0vUAsU5FZMv0kxRu5dTcsR11IbN1w=
Subject key identifier: EB:00:B0:1B:EB:30:6E:59:A5:4F:9C:85:CD:63:FF:B2:D0:B7:7D:2F
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Certificate issuer: /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial: 01A0CCD9CAA44EF1CDA358F21B29EA71B6B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
Manifest number: 19FD
Signing time: Wed 23 Sep 2026 06:00:20 +0000
Manifest this update: Wed 23 Sep 2026 06:00:20 +0000
Manifest next update: Thu 24 Sep 2026 06:00:20 +0000
Files and hashes: 1: aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl (hash: Gp4YyxoIimuveo24K9uFhti7ZTfiGArdni7OWgFH5T8=)
2: pwbWCuGOLTFOrJupg71uoibxjHU.roa (hash: AW3hofHwJcZNnJFiGJ8uTdZk7az4nc9IpPWU/+dKm48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:ca:a4:4e:f1:cd:a3:58:f2:1b:29:ea:71:b6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Validity
Not Before: Sep 23 06:00:20 2026 GMT
Not After : Sep 24 06:00:20 2026 GMT
Subject: CN=eb00b01beb306e59a54f9c85cd63ffb2d0b77d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8c:ce:21:2b:67:36:24:61:b2:05:a8:18:2b:
60:cf:4c:7d:f2:29:4d:77:67:11:c8:b7:e7:f6:d5:
d9:8b:9b:2d:35:7a:17:71:90:b4:43:b3:75:98:3d:
f6:ad:36:bb:2e:49:21:74:d0:49:25:a0:2e:0d:ac:
0c:82:a7:b6:30:2c:7f:32:84:42:ba:bd:f0:9f:4f:
40:56:b6:a4:b5:b2:51:b1:44:0a:29:68:f9:07:3f:
17:3b:86:d9:47:82:31:e6:ba:30:6c:e0:e6:f8:c1:
31:3e:0f:bd:28:ea:e4:7f:74:2d:6b:27:90:c5:85:
b5:8d:df:7a:0e:6a:8e:30:a4:93:09:8c:54:0e:99:
9f:72:9b:1e:dc:7d:c7:14:92:72:e7:fb:b8:b2:45:
8b:57:97:81:fc:40:45:3b:df:e0:cd:b7:5a:d4:85:
fa:52:76:3f:7c:4b:49:c4:94:e3:2b:26:3d:43:f2:
33:95:37:d7:32:91:55:be:4c:df:4c:81:e2:80:76:
c1:c8:c2:dc:e5:6b:6e:43:cc:9c:ba:52:0b:1d:ac:
8a:44:dc:ce:46:b1:9c:17:c6:7c:b2:3b:db:d7:a1:
97:b2:cf:b6:4c:53:3f:85:e1:99:5e:6b:85:76:fb:
9b:82:ab:48:ab:a1:54:b4:80:15:cf:38:4a:ec:42:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:00:B0:1B:EB:30:6E:59:A5:4F:9C:85:CD:63:FF:B2:D0:B7:7D:2F
X509v3 Authority Key Identifier:
keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:64:05:da:6c:0b:7a:66:02:e5:38:b2:96:ff:53:93:2f:d8:
cc:20:eb:ab:8d:c1:fe:3a:96:05:bf:6b:ba:b7:96:4e:a7:86:
ed:aa:92:72:5f:b8:ca:bd:37:f1:ca:aa:cf:7b:5a:3d:31:29:
35:38:ea:bc:5c:99:fb:36:86:4a:15:f1:97:92:b9:3b:6e:11:
b1:98:4e:be:66:79:41:c9:58:0e:d9:1f:25:b4:5d:8f:3a:84:
a3:11:64:0e:19:c5:2d:bb:b2:df:17:38:ac:96:bb:f0:3a:2b:
2a:31:6c:c6:f1:0c:58:cd:88:e9:0e:64:97:0a:bc:83:ac:24:
51:ef:3e:50:fc:07:f0:5f:35:aa:bd:e3:3d:dc:06:8a:32:10:
6c:b7:ad:b8:3f:5c:7b:55:ce:14:cc:23:7d:41:0a:4f:87:b7:
7e:63:e3:97:3f:33:df:76:a1:13:10:ba:84:23:53:ac:80:ef:
98:d3:da:a1:ac:8b:93:41:d9:d0:69:c9:a3:c1:af:af:b8:4a:
92:4c:bb:8e:f6:e6:93:9c:ea:7d:54:48:35:7e:97:a4:c9:95:
c4:48:77:c0:35:72:65:35:9a:bc:ee:b9:f8:6a:75:80:11:76:
a5:f5:db:d3:f9:4e:25:c8:cb:ef:c5:6f:ad:f8:0b:f1:8d:f4:
f5:60:65:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDM2cqkTvHNo1jyGynqcba4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTZlNzYzZjg5YzcyMGU4N2NlNGQ3OWY4YzA5ZDA3ZjJm
YTYzOTIwHhcNMjYwOTIzMDYwMDIwWhcNMjYwOTI0MDYwMDIwWjAzMTEwLwYDVQQD
EyhlYjAwYjAxYmViMzA2ZTU5YTU0ZjljODVjZDYzZmZiMmQwYjc3ZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIzOIStnNiRhsgWoGCtgz0x98ilN
d2cRyLfn9tXZi5stNXoXcZC0Q7N1mD32rTa7LkkhdNBJJaAuDawMgqe2MCx/MoRC
ur3wn09AVraktbJRsUQKKWj5Bz8XO4bZR4Ix5rowbODm+MExPg+9KOrkf3QtayeQ
xYW1jd96DmqOMKSTCYxUDpmfcpse3H3HFJJy5/u4skWLV5eB/EBFO9/gzbda1IX6
UnY/fEtJxJTjKyY9Q/IzlTfXMpFVvkzfTIHigHbByMLc5WtuQ8yculILHayKRNzO
RrGcF8Z8sjvb16GXss+2TFM/heGZXmuFdvubgqtIq6FUtIAVzzhK7EIXeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsAsBvrMG5ZpU+chc1j/7LQt30vMB8GA1UdIwQY
MBaAFGiW52P4nHIOh85NefjAnQfy+mOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNDA4ZDctMDEyYy00OGMzLWE3ZWEt
Yzg4NDBmYTg1MTQxLzEvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iNDA4ZDctMDEyYy00OGMzLWE3ZWEtYzg4NDBmYTg1MTQx
LzEvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2QF2mwL
emYC5Tiylv9Tky/YzCDrq43B/jqWBb9rureWTqeG7aqScl+4yr038cqqz3taPTEp
NTjqvFyZ+zaGShXxl5K5O24RsZhOvmZ5QclYDtkfJbRdjzqEoxFkDhnFLbuy3xc4
rJa78DorKjFsxvEMWM2I6Q5klwq8g6wkUe8+UPwH8F81qr3jPdwGijIQbLetuD9c
e1XOFMwjfUEKT4e3fmPjlz8z33ahExC6hCNTrIDvmNPaoayLk0HZ0GnJo8Gvr7hK
kky7jvbmk5zqfVRINX6XpMmVxEh3wDVyZTWavO65+Gp1gBF2pfXb0/lOJcjL78Vv
rfgL8Y309WBlcw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:57:49 2026 by rpki-client