Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
File: aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft (raw, json)
Hash identifier: OXSmIHaIV2wM8LdL6IPzhxD9nO7AV1ytGEakJKZXDsM=
Subject key identifier: 7B:4D:A9:29:15:55:0F:6A:BC:74:CC:59:17:16:86:C9:D6:C8:94:68
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Certificate issuer: /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial: 01A0D23757EF63AACD86247DADDB357AE220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 07:00:37 +0000
Manifest this update: Thu 24 Sep 2026 07:00:37 +0000
Manifest next update: Fri 25 Sep 2026 07:00:37 +0000
Files and hashes: 1: BtcmHuwetapblyi9s6FZkxvndTA.roa (hash: dnt6NY9Mo4FrwsWIa33YjdrYdhY3bDry7NAo/6vLCVQ=)
2: aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl (hash: 1pilAG5DnpqIsF9Psz+yI3RzNK1uM2FLL7BunftbLI0=)
3: vQys_ba_SRbDMdjvkJJ4d_e1bnU.roa (hash: OV/ynpbxba/2j5Cpj7v9gb2kcDvJcgfm005X97a5zrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:57:ef:63:aa:cd:86:24:7d:ad:db:35:7a:e2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Validity
Not Before: Sep 24 07:00:37 2026 GMT
Not After : Sep 25 07:00:37 2026 GMT
Subject: CN=7b4da92915550f6abc74cc59171686c9d6c89468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:f0:e9:46:6d:8a:41:69:68:46:79:9c:58:
e9:f4:9a:d3:f9:00:83:00:d4:cf:bb:e2:36:ff:8a:
1e:a0:47:f6:47:87:75:85:c1:18:8c:0f:4f:96:d4:
e5:00:bd:4e:9e:a7:66:8d:de:52:87:c0:6c:5d:7a:
ff:33:76:fd:87:85:90:b8:c2:be:43:8f:03:a9:75:
f5:cb:db:37:b4:77:64:fb:75:72:66:a7:4d:91:78:
a2:a0:80:10:bc:b2:5e:f5:54:47:98:c4:be:92:d5:
00:29:cc:ff:b0:10:e4:5f:b4:00:83:0b:b1:c1:fc:
f5:c1:b4:4b:8b:7c:15:fd:a1:95:52:f9:4d:a0:68:
ca:b0:1d:50:15:d1:a1:cb:06:73:a3:73:c9:36:3f:
60:58:bb:40:67:e9:e0:b7:e5:5a:86:dc:af:9b:18:
89:1d:43:1f:fd:c5:13:6e:13:19:98:84:78:1b:40:
2f:e6:c1:39:01:de:39:3d:f0:7b:7e:be:d5:6e:d9:
2d:c2:a3:d4:10:38:ef:6f:2c:55:8a:16:fd:bc:e8:
60:28:b7:45:65:e8:d8:19:0e:e1:e9:92:40:09:69:
b3:2d:81:9f:49:54:ac:73:00:7a:4a:6b:c5:78:bc:
e5:c3:42:14:9b:e5:e6:67:cb:a5:8b:00:55:9d:ae:
7f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4D:A9:29:15:55:0F:6A:BC:74:CC:59:17:16:86:C9:D6:C8:94:68
X509v3 Authority Key Identifier:
keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ac:7c:d1:8a:f3:91:e4:af:39:63:ec:6a:07:f1:fa:c6:95:
b4:8f:9f:8b:21:03:bd:0e:ea:ec:3f:86:2d:b3:19:c4:84:e3:
ba:14:3a:ec:a7:9d:26:01:f1:37:99:21:d2:74:ad:0a:56:53:
16:88:dd:00:9a:c0:9f:12:16:c3:7d:59:7d:d7:b2:8f:ae:a7:
6f:b9:a9:71:52:1f:f3:04:89:b2:ef:ef:48:6d:9b:97:3b:60:
25:a0:a5:23:7e:6c:ba:39:81:d8:f9:60:99:15:a5:50:ae:2a:
4a:e5:d8:18:10:8d:fd:87:94:b9:9d:0f:5d:bb:20:7e:86:c6:
0b:58:55:d5:94:c2:cc:99:60:9b:21:1c:4e:bc:97:e5:66:95:
50:4a:a9:3f:ab:4a:d1:91:ca:15:05:20:0c:79:56:35:cb:40:
b7:de:5e:21:f1:87:0c:bf:69:0a:05:66:e1:79:d1:1b:0c:cc:
df:8c:0e:82:1d:c7:98:45:2c:c7:fa:9a:c5:27:d0:0e:b9:2a:
b6:46:af:59:96:7b:7c:c4:e4:87:8d:0f:c8:be:91:25:fa:c5:
e0:f7:c7:ed:65:77:44:4b:c9:b5:d9:d9:97:32:e5:a1:22:7e:
07:6d:e5:5d:45:64:3a:e7:60:8c:3f:a8:25:20:40:a0:9b:28:
24:f2:e4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:23:22 2026 by rpki-client