Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: ZWGtni23ym7Ne+WpRKqd4xXB9A6lz08CGySr7fchSPU=
Subject key identifier: D7:21:CF:91:32:DE:00:E9:01:A5:3E:A6:B6:38:E5:EA:1D:2D:DA:FB
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 01A10ADDEBB103555ECE51CB10073600E178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 1514
Signing time: Mon 05 Oct 2026 07:01:18 +0000
Manifest this update: Mon 05 Oct 2026 07:01:18 +0000
Manifest next update: Tue 06 Oct 2026 07:01:18 +0000
Files and hashes: 1: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: H4wRUvkdNtMRmOrQH6ujxS5QZlHSu43zZa+23OVtiV8=)
2: o8qWJ1qmv3YFlhdAYdwIJZaPBT4.roa (hash: xT316B0rPdGhWCFpIdcczgFppcvC9/tzakj3ZEzfe3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:dd:eb:b1:03:55:5e:ce:51:cb:10:07:36:00:e1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Oct 5 07:01:18 2026 GMT
Not After : Oct 6 07:01:18 2026 GMT
Subject: CN=d721cf9132de00e901a53ea6b638e5ea1d2ddafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:77:49:a4:33:86:30:c3:db:03:77:8a:4a:d5:
b6:b3:92:5b:c3:f6:e2:fb:80:2f:fc:a2:1e:a5:76:
78:c9:68:4b:b0:22:9f:f4:43:aa:98:d0:81:66:78:
fb:1a:c0:03:83:b2:aa:b2:17:62:f7:5d:5d:d8:13:
42:f2:c3:05:35:8c:c5:d7:2d:48:a8:10:1c:c5:1a:
82:de:55:06:b3:79:2c:93:93:48:c0:5f:6b:08:dd:
c7:e7:bc:41:f9:30:f3:df:ab:bb:ed:16:5c:f0:1b:
36:37:ae:c8:93:09:3c:77:28:e3:ff:24:c7:7c:08:
e7:96:1f:b5:c1:fe:ad:c4:d2:a5:76:10:17:6f:de:
e6:c1:78:ea:08:4d:cd:33:4b:6e:9c:29:e3:7b:af:
90:95:ac:37:7f:0b:2c:16:5a:3a:81:6e:69:a4:1c:
cf:05:7e:f6:2f:b6:7e:1f:2d:12:28:65:ea:33:a8:
7d:0f:4d:0c:29:ac:c1:f3:ac:9c:8e:b0:80:80:0a:
59:32:07:a9:8e:87:4c:d2:55:b3:31:e2:10:29:9f:
11:2c:59:b5:9b:78:4e:0c:78:a7:30:83:cc:5e:41:
1a:2b:15:4d:00:fe:86:5e:dc:88:29:e9:27:eb:a7:
e0:93:ed:14:36:4c:b4:70:8e:0c:2a:7f:cf:18:47:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:21:CF:91:32:DE:00:E9:01:A5:3E:A6:B6:38:E5:EA:1D:2D:DA:FB
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1c:e8:41:6a:3e:d5:c3:1f:ee:40:6b:a4:fa:78:8f:17:e3:
15:6b:7d:4d:32:a3:d3:ef:fb:35:b0:f9:35:f8:8b:c4:0f:a5:
b4:a3:2d:f4:80:e8:86:c2:ff:a6:f2:ff:5d:81:87:32:e5:db:
f9:bd:e5:d6:4e:e3:2f:25:2a:a0:a3:5f:ea:ff:f5:33:80:5a:
59:73:70:b2:98:64:db:a4:fd:8d:30:a6:9a:69:31:3f:fd:24:
61:4d:a6:8f:8b:ed:e9:e7:7d:55:f5:1e:31:70:e8:93:79:33:
44:58:76:ac:4c:11:52:76:db:0b:4e:d1:22:12:94:d6:f2:7e:
35:e9:02:c8:a8:d1:20:a8:63:6f:52:b4:d6:2c:7a:ff:bd:5a:
b9:90:cd:ee:15:89:c1:19:62:ce:95:42:3c:45:e7:6e:29:38:
8e:74:5a:36:e8:23:8c:8d:b5:fc:1a:0f:a0:da:b1:a7:22:54:
fe:cd:ba:c8:1a:2d:bb:d5:73:bd:64:2f:08:08:00:b4:95:ff:
00:4e:7c:5c:31:00:64:a3:31:b0:f5:79:f6:88:04:ee:dd:53:
2f:54:18:0d:49:27:5a:c0:3b:0a:38:ae:35:f5:e0:7a:44:05:
3a:c4:b2:e1:76:ea:0e:35:8a:7a:97:a9:5d:84:50:bf:bb:82:
81:3a:b3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 11:18:08 2026 by rpki-client