Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: x0i/DDuVvYCPo7ckPQFs2SM2iZHLvzKTl/2tGQDLexA=
Subject key identifier: 3C:0F:93:F4:1B:81:A0:4C:E0:DA:B9:C7:5F:EB:D6:37:B5:A8:16:E9
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 019FAD51570BCC1A6AABC5B69390DA7A92EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 145F
Signing time: Wed 29 Jul 2026 10:00:16 +0000
Manifest this update: Wed 29 Jul 2026 10:00:16 +0000
Manifest next update: Thu 30 Jul 2026 10:00:16 +0000
Files and hashes: 1: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: bFFc18JqfpEg4VAWOz3oILNBT3UxCOxn4Z7oYqBhT0Y=)
2: o8qWJ1qmv3YFlhdAYdwIJZaPBT4.roa (hash: xT316B0rPdGhWCFpIdcczgFppcvC9/tzakj3ZEzfe3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:57:0b:cc:1a:6a:ab:c5:b6:93:90:da:7a:92:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Jul 29 10:00:16 2026 GMT
Not After : Jul 30 10:00:16 2026 GMT
Subject: CN=3c0f93f41b81a04ce0dab9c75febd637b5a816e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:81:e9:8c:3b:d2:c4:17:f4:bd:47:ec:bd:
96:1b:5a:0e:f1:d2:d1:76:9d:16:91:77:a5:f1:71:
bf:94:a7:aa:58:33:f6:5f:3f:d8:37:2a:1d:bc:32:
ee:7c:20:2b:d2:a4:e1:15:ab:41:dc:f9:a4:fa:8e:
ab:bb:7c:df:ca:72:2b:9b:36:62:12:a2:68:1b:78:
49:84:b6:67:7d:7e:48:e0:d0:a3:23:ae:8f:1e:64:
8b:b4:e4:52:1b:16:54:af:34:b4:c8:52:35:a9:5c:
82:da:e8:02:f4:7c:cc:4a:97:0b:c2:43:0e:f2:60:
92:20:b9:2b:ac:fa:a8:e1:10:07:41:8b:fa:e3:54:
2f:7f:bd:23:31:8f:5b:26:e0:96:2e:de:8b:ef:19:
fd:82:9b:9b:2a:d1:fb:4f:f0:4b:8e:57:30:82:72:
f3:8a:37:73:37:ad:f8:a5:9d:50:a8:a8:93:c6:ed:
11:4f:1d:ac:f7:e0:60:69:3e:b4:c4:f8:c5:11:74:
44:f8:3a:79:48:4d:ba:49:c4:5f:32:cc:9b:de:bc:
e0:b1:8c:23:a8:3d:30:38:0f:48:c5:96:54:78:3d:
b1:9b:a5:d1:ec:08:02:c7:7d:5e:6e:6d:c3:1d:ed:
2c:88:92:7e:e2:43:2a:df:b0:66:83:11:86:2c:f9:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0F:93:F4:1B:81:A0:4C:E0:DA:B9:C7:5F:EB:D6:37:B5:A8:16:E9
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:36:c8:b5:cf:42:2a:64:96:f3:1e:55:2a:1a:c5:96:da:4c:
29:5d:24:24:76:13:c6:24:85:5f:12:40:c4:a5:2c:d7:3d:5f:
0f:d5:d9:e9:eb:c0:e6:74:fa:4f:11:93:30:34:e4:0a:29:40:
c9:3d:b0:35:10:f6:3d:7d:52:d0:04:84:f3:bc:af:c4:fa:e5:
7b:92:32:a9:1a:47:0a:e5:7d:eb:ad:c4:9a:16:4e:a2:37:d7:
45:b4:22:bd:af:a1:e4:d2:0e:15:76:0f:32:ce:0f:1e:3d:4d:
54:42:d9:db:4e:88:bf:8d:4e:5c:0e:88:f8:af:af:f6:f6:11:
67:e9:55:48:40:9b:ac:79:92:0e:52:23:7d:34:d1:b1:d7:59:
f5:b0:bf:16:5d:d1:d6:52:a8:ce:88:bd:06:c8:ac:c0:82:1f:
4e:fe:ff:15:dd:eb:cc:2c:7b:ab:92:c2:24:0d:32:55:86:8e:
27:7d:78:56:9d:8b:b2:4c:08:82:82:0e:1b:5d:f9:04:2c:50:
76:20:d2:23:19:43:0b:04:29:ee:e2:75:8e:c0:df:8d:cd:12:
4b:b0:a6:ff:18:0c:fe:1d:29:4a:36:43:c4:0a:07:a6:62:ca:
c2:7d:90:8f:22:75:6e:c9:e7:cd:fd:18:27:3f:57:1c:3d:39:
0f:4c:0f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:55:47 2026 by rpki-client