Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
File: aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft (raw, json)
Hash identifier: Np9LBKfq1szvcTq6WJskFncRBEkPQXqTAKNst7ZUi5Y=
Subject key identifier: F1:E3:3B:DA:EE:F0:49:78:60:62:17:86:E8:BC:30:F9:31:AB:0A:B2
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Certificate issuer: /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial: 019D9818589D9C9F87F7093219501C943515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
Manifest number: 1854
Signing time: Thu 16 Apr 2026 21:00:25 +0000
Manifest this update: Thu 16 Apr 2026 21:00:25 +0000
Manifest next update: Fri 17 Apr 2026 21:00:25 +0000
Files and hashes: 1: aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl (hash: nXEutdr1GzCK0lqcMcYrTiL4xgzvxExlbDw+D5+Vjfc=)
2: pwbWCuGOLTFOrJupg71uoibxjHU.roa (hash: AW3hofHwJcZNnJFiGJ8uTdZk7az4nc9IpPWU/+dKm48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:58:9d:9c:9f:87:f7:09:32:19:50:1c:94:35:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Validity
Not Before: Apr 16 21:00:25 2026 GMT
Not After : Apr 17 21:00:25 2026 GMT
Subject: CN=f1e33bdaeef0497860621786e8bc30f931ab0ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:3d:52:c8:87:5d:31:c7:b4:5a:bf:ce:63:
50:70:11:0e:1e:a6:00:71:b7:40:ca:44:88:3a:2a:
17:21:fc:da:3a:19:d9:e0:ed:71:e1:fa:7e:ac:f9:
30:30:6b:47:2d:2b:a8:27:57:65:b1:4d:7e:2d:68:
5f:46:8e:6d:23:64:5c:7d:60:f6:96:af:07:36:f6:
ff:69:06:27:84:a6:33:83:f1:2e:9c:0a:05:96:24:
d2:af:9a:8a:0b:10:36:2c:12:f2:d5:68:40:c3:2b:
f3:8e:59:6b:d1:7a:be:b8:9a:6a:9a:8d:65:c7:7d:
64:52:22:57:fb:e3:14:c6:81:53:22:83:07:44:a6:
eb:35:af:8a:f5:5d:24:34:0c:15:1d:db:3e:58:2e:
b0:dc:88:b2:2b:ea:aa:3c:29:55:6b:91:ca:77:90:
ef:c5:03:52:29:6d:6b:d3:c9:cc:fe:f2:ff:19:4d:
5e:7e:af:18:97:b9:8c:22:0e:b0:59:90:2d:59:ed:
2e:9d:18:40:4c:d6:31:67:8c:0f:d2:86:24:1c:47:
e9:09:7d:63:bf:0b:6c:cf:e6:a3:d3:d7:c7:1a:fc:
46:02:9a:5f:b8:0f:56:25:c0:a8:97:22:93:17:66:
8d:49:93:5c:0a:85:44:40:5c:6c:79:f7:da:a6:38:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E3:3B:DA:EE:F0:49:78:60:62:17:86:E8:BC:30:F9:31:AB:0A:B2
X509v3 Authority Key Identifier:
keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:24:36:0a:e6:d3:eb:81:c0:89:be:b2:3e:4a:7a:f4:b3:d7:
0d:02:ed:84:cc:42:14:27:16:50:73:d9:2f:d9:a7:1a:18:02:
47:19:d7:14:af:e1:3f:22:fb:65:18:32:83:f6:7c:ee:2e:d1:
4f:f7:20:c5:15:cc:0e:66:0a:68:f9:ac:3d:ec:71:c9:09:85:
38:e5:bc:a1:c6:26:d3:b2:23:14:6a:ba:78:f5:2d:27:77:1a:
65:cc:65:1a:48:d0:37:7a:9d:77:1a:11:bb:83:a6:b7:d6:c7:
fc:c7:01:fe:94:3a:cd:25:2e:5b:82:5a:16:2d:7c:3d:83:5b:
c7:05:ef:b9:ac:54:b9:17:32:1c:cf:25:b1:e6:29:a2:4e:dd:
e2:f8:db:22:55:d4:7b:cd:93:dd:75:71:36:1d:00:8c:0f:fe:
2c:bb:c9:40:b2:93:b6:ce:e5:f6:b4:31:97:ca:93:86:e4:6b:
6a:cd:d8:07:c8:b6:78:df:e2:d1:4e:5c:38:63:36:64:4d:2f:
fb:4c:50:7e:e7:87:c4:ea:43:40:a4:20:82:29:2c:68:f1:f3:
d0:8e:7c:9b:74:a3:09:e0:0e:24:c3:e3:f2:d9:3c:18:95:bb:
c1:89:37:cc:d0:09:7f:1e:85:11:0a:9b:a8:4f:f6:4a:73:e8:
50:6c:f1:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGFidnJ+H9wkyGVAclDUVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4OTZlNzYzZjg5YzcyMGU4N2NlNGQ3OWY4YzA5ZDA3ZjJm
YTYzOTIwHhcNMjYwNDE2MjEwMDI1WhcNMjYwNDE3MjEwMDI1WjAzMTEwLwYDVQQD
EyhmMWUzM2JkYWVlZjA0OTc4NjA2MjE3ODZlOGJjMzBmOTMxYWIwYWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFg9UsiHXTHHtFq/zmNQcBEOHqYA
cbdAykSIOioXIfzaOhnZ4O1x4fp+rPkwMGtHLSuoJ1dlsU1+LWhfRo5tI2RcfWD2
lq8HNvb/aQYnhKYzg/EunAoFliTSr5qKCxA2LBLy1WhAwyvzjllr0Xq+uJpqmo1l
x31kUiJX++MUxoFTIoMHRKbrNa+K9V0kNAwVHds+WC6w3IiyK+qqPClVa5HKd5Dv
xQNSKW1r08nM/vL/GU1efq8Yl7mMIg6wWZAtWe0unRhATNYxZ4wP0oYkHEfpCX1j
vwtsz+aj09fHGvxGAppfuA9WJcColyKTF2aNSZNcCoVEQFxseffapjhUpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHjO9ru8El4YGIXhui8MPkxqwqyMB8GA1UdIwQY
MBaAFGiW52P4nHIOh85NefjAnQfy+mOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iNDA4ZDctMDEyYy00OGMzLWE3ZWEt
Yzg4NDBmYTg1MTQxLzEvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9iNDA4ZDctMDEyYy00OGMzLWE3ZWEtYzg4NDBmYTg1MTQx
LzEvYUpibllfaWNjZzZIemsxNS1NQ2RCX0w2WTVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCQ2CubT
64HAib6yPkp69LPXDQLthMxCFCcWUHPZL9mnGhgCRxnXFK/hPyL7ZRgyg/Z87i7R
T/cgxRXMDmYKaPmsPexxyQmFOOW8ocYm07IjFGq6ePUtJ3caZcxlGkjQN3qddxoR
u4Omt9bH/McB/pQ6zSUuW4JaFi18PYNbxwXvuaxUuRcyHM8lseYpok7d4vjbIlXU
e82T3XVxNh0AjA/+LLvJQLKTts7l9rQxl8qThuRras3YB8i2eN/i0U5cOGM2ZE0v
+0xQfueHxOpDQKQggiksaPHz0I58m3SjCeAOJMPj8tk8GJW7wYk3zNAJfx6FEQqb
qE/2SnPoUGzxqg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:00 2026 by rpki-client