Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
File: aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft (raw, json)
Hash identifier: REUVzTMBCfci0w6DbGMxGnwtNa4T2p241WPyhyWmOdM=
Subject key identifier: 8A:3F:74:DA:B8:B0:3E:3A:48:54:1C:D4:2D:38:B6:41:74:CF:A6:9F
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Certificate issuer: /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial: 01A17E85D3D78D7CB0CBED14404699BC2254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
Manifest number: 1A59
Signing time: Tue 27 Oct 2026 18:01:02 +0000
Manifest this update: Tue 27 Oct 2026 18:01:02 +0000
Manifest next update: Wed 28 Oct 2026 18:01:02 +0000
Files and hashes: 1: aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl (hash: CRJwQuau6975UmcqkBnX2fv9N3mnp6+noLwMxJb7BWc=)
2: pwbWCuGOLTFOrJupg71uoibxjHU.roa (hash: AW3hofHwJcZNnJFiGJ8uTdZk7az4nc9IpPWU/+dKm48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 18:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:d3:d7:8d:7c:b0:cb:ed:14:40:46:99:bc:22:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Validity
Not Before: Oct 27 18:01:02 2026 GMT
Not After : Oct 28 18:01:02 2026 GMT
Subject: CN=8a3f74dab8b03e3a48541cd42d38b64174cfa69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:70:e0:13:e8:15:9f:6e:e4:2a:ee:52:a1:
e8:6c:fa:cb:ff:61:09:42:70:4e:5e:3e:a0:5f:0e:
70:2b:d1:93:a6:5b:87:56:36:15:8d:fe:7a:d1:ae:
52:78:bb:8f:1b:b9:51:7c:35:13:6c:4b:ac:a0:96:
63:31:a7:94:a4:68:a8:ab:01:1e:36:92:79:44:4b:
2d:ec:33:f5:1c:9a:b5:2b:33:c1:f3:20:23:b1:5b:
2a:75:9c:d4:5c:cf:78:4b:9c:57:0c:21:78:b7:54:
f9:04:3a:ac:17:ed:63:83:44:5b:a4:f8:8d:0d:cf:
4c:8b:ef:f5:d2:5c:01:76:ef:eb:c6:eb:d9:ea:06:
af:20:c6:ca:33:24:58:ec:3f:1e:61:60:44:25:92:
00:ae:9e:8f:2d:11:db:55:7b:db:52:13:42:78:83:
cd:08:9e:a5:cf:27:22:55:49:72:c8:9f:5b:d1:bf:
80:30:b7:41:46:0b:b8:28:f1:7a:f5:7a:f7:84:ea:
9c:5a:ba:87:95:02:03:16:ab:78:bd:ad:70:d9:fc:
40:29:00:2e:a0:a2:6c:a0:8b:27:4c:de:51:fa:a3:
ac:94:7e:9d:d6:1d:b5:af:db:db:3b:9c:65:93:cc:
5e:4c:86:e6:29:a1:9c:df:65:86:7d:01:28:30:c5:
f7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3F:74:DA:B8:B0:3E:3A:48:54:1C:D4:2D:38:B6:41:74:CF:A6:9F
X509v3 Authority Key Identifier:
keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:60:bc:2e:3f:23:fe:13:a9:f6:50:83:84:dd:60:68:36:7c:
93:a4:be:4d:65:cb:ca:77:34:b5:aa:6d:37:0b:b9:c4:af:95:
18:ba:14:9d:2b:18:3d:0a:3f:ac:bd:3c:ee:bb:c8:d5:1e:dd:
08:d4:f8:2f:6a:60:3b:01:08:5f:e6:59:8b:89:e9:81:68:62:
14:43:28:dd:6b:31:c0:17:28:78:f4:68:13:ac:c0:8e:f8:d0:
65:77:2a:e3:c2:e3:e3:c0:a3:6e:c1:64:4a:e4:af:87:6e:e9:
98:b6:28:72:78:59:f1:72:de:5c:8a:7e:cf:b7:aa:90:20:53:
ea:d0:a4:b2:40:cf:25:02:76:a6:40:ee:60:6a:c3:bf:ef:76:
7a:db:5d:ee:6a:53:63:a7:af:de:6c:78:cc:7e:0f:94:73:37:
41:80:e0:96:4c:f0:f7:be:fc:21:1e:34:d6:df:f9:65:cd:9e:
23:ed:74:d8:54:70:c9:e4:5f:96:22:34:14:66:dd:42:ab:fd:
41:20:af:84:28:80:0e:d3:03:b1:e7:52:ea:f7:a6:f2:b5:5e:
b2:9a:b2:ab:30:ea:07:0b:99:86:ed:56:e8:3b:66:e6:10:01:
ef:f5:1a:3f:bf:5c:1a:b9:ce:27:c5:2c:a8:86:61:3c:f9:08:
c2:d2:07:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:47:07 2026 by rpki-client