Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
File: aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft (raw, json)
Hash identifier: JRZgmWXiQf76rEvmKicwpjVPlA1Wivs3bxtYOBD8wy0=
Subject key identifier: A9:A4:DF:88:F1:C1:76:F5:41:3A:44:1A:8F:41:29:56:59:F4:AA:2E
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Certificate issuer: /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial: 019CE66D11878F37FEB6635D8B906F5A3AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
Manifest number: 17F8
Signing time: Fri 13 Mar 2026 09:00:33 +0000
Manifest this update: Fri 13 Mar 2026 09:00:33 +0000
Manifest next update: Sat 14 Mar 2026 09:00:33 +0000
Files and hashes: 1: aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl (hash: EjRCO515DnN8Nu/6wJvWlwi2e7yc1ToQNvJIqQWy128=)
2: pwbWCuGOLTFOrJupg71uoibxjHU.roa (hash: AW3hofHwJcZNnJFiGJ8uTdZk7az4nc9IpPWU/+dKm48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:11:87:8f:37:fe:b6:63:5d:8b:90:6f:5a:3a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Validity
Not Before: Mar 13 09:00:33 2026 GMT
Not After : Mar 14 09:00:33 2026 GMT
Subject: CN=a9a4df88f1c176f5413a441a8f41295659f4aa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:c2:80:6e:35:c0:eb:36:1b:14:c7:6f:e2:
57:68:e0:51:6e:52:a9:73:b8:7f:01:38:81:47:5e:
13:c8:3a:c9:91:7a:90:aa:42:5d:92:15:ba:d2:f2:
59:3b:c0:a3:be:ba:f0:89:24:a8:e0:f4:fd:8e:d8:
6e:47:96:f8:7d:89:76:c7:14:9e:ec:c6:db:aa:7e:
b3:4c:21:0e:a4:4d:18:fc:7d:74:8d:73:66:fa:9b:
75:db:4b:71:23:d7:d0:43:bf:a8:2c:8a:47:bd:78:
ad:7b:85:73:ce:dc:c8:10:9a:60:36:e7:08:3c:e0:
63:d1:52:f6:48:c2:2e:1e:31:fe:c1:79:52:67:fd:
e5:4f:77:e8:9f:cd:42:2f:b5:54:ea:4d:9e:92:10:
92:55:65:a0:2b:0e:53:6a:d9:de:0e:54:e0:15:1a:
02:e2:79:19:0d:41:01:02:33:53:f4:9f:fd:02:f8:
b7:7b:a1:c1:39:87:b2:7f:35:8d:c3:8c:cb:72:1e:
d6:b2:ed:a6:b9:ec:51:5d:af:d8:ad:86:45:67:0b:
fd:fe:ab:f9:6d:fa:0c:08:a3:e4:80:3b:22:bf:b5:
fb:98:4c:e2:3d:86:97:d2:4b:d4:92:f8:d7:a7:08:
05:96:b5:f3:73:dd:fb:95:61:27:47:d0:aa:01:c5:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A4:DF:88:F1:C1:76:F5:41:3A:44:1A:8F:41:29:56:59:F4:AA:2E
X509v3 Authority Key Identifier:
keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bd:b9:92:22:25:03:5f:44:9d:89:81:df:11:b5:0e:82:1a:
3a:29:4f:c1:5d:65:9d:a3:fa:8c:f0:3f:3f:15:71:2a:12:d3:
37:16:4f:35:d9:bf:42:60:1f:d9:ea:90:52:ec:93:1c:cc:17:
c5:4d:d5:7a:ae:c5:7b:f0:83:7f:63:48:0e:10:4b:b3:6d:0b:
5a:3c:c4:e2:61:38:45:53:4e:c5:80:4c:9e:0a:23:6b:61:82:
c9:cb:12:b0:7e:32:20:be:0a:e1:f3:e5:81:f9:06:ee:31:aa:
6f:7e:1e:8e:e4:a5:2e:88:3f:53:22:64:11:04:f7:eb:f3:59:
84:5f:72:87:a9:b2:f0:33:67:02:70:89:11:5f:d9:a5:4a:e2:
ee:46:ee:8e:fc:70:e2:e1:56:e8:84:77:08:a0:02:29:7d:e3:
f5:d4:c6:2a:0c:62:21:e0:a2:ed:b7:9b:42:25:9c:88:14:be:
11:65:38:11:2d:97:9e:c1:b2:3b:c5:ab:6f:c8:d4:ea:89:41:
d8:d0:86:9d:5e:5a:37:c5:12:7f:84:d2:49:cd:89:91:9a:26:
38:d7:dc:fe:63:a0:8b:eb:29:79:9a:1a:5c:20:3b:bc:00:da:
8f:8b:8c:bc:3e:32:98:ab:5f:f0:74:84:de:4c:f7:a1:c2:6a:
20:78:a0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:48:00 2026 by rpki-client