Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
File: aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft (raw, json)
Hash identifier: PH7ADNHNCY5AbxTrQ4RUYqzK76kHJmdmDUWCcrgRekQ=
Subject key identifier: CC:D4:16:36:CE:06:9E:E4:13:7F:08:5D:46:44:0F:46:1C:A4:1F:9A
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Certificate issuer: /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial: 019FACAD381E71E6DD9B5B45A928F16EE8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 07:01:00 +0000
Manifest this update: Wed 29 Jul 2026 07:01:00 +0000
Manifest next update: Thu 30 Jul 2026 07:01:00 +0000
Files and hashes: 1: BtcmHuwetapblyi9s6FZkxvndTA.roa (hash: dnt6NY9Mo4FrwsWIa33YjdrYdhY3bDry7NAo/6vLCVQ=)
2: aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl (hash: vDE5zgu31SW9VrhC0tu3oTf8/z1XrL4kXNb1JkC0bN0=)
3: vQys_ba_SRbDMdjvkJJ4d_e1bnU.roa (hash: OV/ynpbxba/2j5Cpj7v9gb2kcDvJcgfm005X97a5zrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:38:1e:71:e6:dd:9b:5b:45:a9:28:f1:6e:e8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Validity
Not Before: Jul 29 07:01:00 2026 GMT
Not After : Jul 30 07:01:00 2026 GMT
Subject: CN=ccd41636ce069ee4137f085d46440f461ca41f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e0:a2:5f:64:81:09:f5:ce:99:15:c8:01:5a:
ca:f7:45:aa:78:55:73:58:de:7a:64:3e:ec:01:d4:
cb:c7:11:91:5c:34:a4:b7:cf:01:6d:65:c6:c1:48:
c6:57:d2:2c:4c:61:62:38:91:7f:a8:34:c5:be:69:
a0:bc:66:23:10:91:da:55:61:52:bc:95:c3:21:19:
e3:b7:f7:4d:f7:2d:28:e9:14:53:c2:fe:1d:46:20:
e8:26:f6:aa:b4:b9:e2:7f:9a:11:4d:66:f7:df:0e:
da:87:ce:7b:2a:54:48:82:3f:99:b9:89:e2:76:9e:
7f:f5:de:05:22:75:ef:24:82:b7:27:6f:b5:2e:6d:
6f:f3:89:11:80:68:6d:a9:3b:c3:ee:10:88:a8:ed:
f9:00:99:58:4b:e7:c2:f7:42:85:4e:06:a6:27:98:
25:b0:76:ec:56:8e:9b:a0:2c:65:ce:1d:7c:3d:e5:
ce:49:80:45:07:2f:5b:d2:f3:89:0c:0e:e4:7c:3f:
0a:1a:5d:e2:7d:9c:4a:02:5b:20:93:46:cc:74:91:
a6:65:4f:c3:c4:98:e1:0a:96:4f:74:b6:c1:92:d4:
17:d9:3c:db:86:34:d0:30:8d:33:d3:dc:11:1f:85:
fe:1b:fa:c8:ad:85:a4:16:5b:9d:86:c4:e2:6a:ef:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D4:16:36:CE:06:9E:E4:13:7F:08:5D:46:44:0F:46:1C:A4:1F:9A
X509v3 Authority Key Identifier:
keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:42:a4:4c:fe:7c:70:a7:de:df:f7:69:f1:13:22:6a:35:5e:
78:c9:52:03:de:c2:33:43:46:69:24:64:65:75:d0:da:e5:fe:
6b:eb:49:6f:78:59:b2:2f:77:eb:c8:97:6e:7c:ae:cd:42:0b:
66:f7:ee:48:90:57:6f:f6:39:f0:da:4b:39:ad:0d:eb:c3:5b:
cc:e5:a8:2c:f4:a2:15:e0:04:c6:81:78:41:96:e5:ea:1a:59:
d2:12:4c:51:a8:ee:63:82:a4:40:30:32:05:70:f3:11:e8:1c:
27:fe:05:24:66:f0:59:74:e4:8a:a0:7f:fc:2f:5c:6f:c2:16:
66:bb:6e:4a:ec:d0:1b:a3:35:ad:67:4c:8b:f9:2c:66:fc:94:
ca:c2:d0:d6:d6:e7:99:8b:3c:a2:c4:bf:9d:cf:51:ac:82:05:
19:df:cb:db:ee:e5:f4:11:b6:46:4e:e6:9a:59:8d:be:31:9e:
61:7f:49:94:90:f3:9b:99:00:89:60:b2:bd:af:34:37:ac:48:
c0:51:21:f2:17:45:61:90:a4:fc:db:e4:18:b1:a3:f4:43:92:
1b:16:c3:4c:1f:2b:4c:f2:1a:f0:66:43:69:c4:e2:fa:ed:30:
37:4c:51:bf:4a:59:f7:1a:f9:15:37:38:34:bd:07:92:28:83:
d7:3f:9e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:43 2026 by rpki-client