Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: LJR7poK/xL6EPuA5s4x2S94okcXqODB2awA9wK6XjNI=
Subject key identifier: AF:92:8A:E6:26:8D:92:02:EF:43:7B:8E:85:D6:BF:0D:C8:3A:48:E3
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 01A182995000E3AD8CFA3CE6226A2F01C04A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 1552
Signing time: Wed 28 Oct 2026 13:00:47 +0000
Manifest this update: Wed 28 Oct 2026 13:00:47 +0000
Manifest next update: Thu 29 Oct 2026 13:00:47 +0000
Files and hashes: 1: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: zLLLd6UgXNgqz543Hv9LDBgibtNeAUg+Z67H7Km58rw=)
2: o8qWJ1qmv3YFlhdAYdwIJZaPBT4.roa (hash: xT316B0rPdGhWCFpIdcczgFppcvC9/tzakj3ZEzfe3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:50:00:e3:ad:8c:fa:3c:e6:22:6a:2f:01:c0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Oct 28 13:00:47 2026 GMT
Not After : Oct 29 13:00:47 2026 GMT
Subject: CN=af928ae6268d9202ef437b8e85d6bf0dc83a48e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:59:56:4e:04:d1:09:b3:c6:38:d7:c5:b5:9c:
c8:7f:49:31:78:1f:87:f4:7b:f9:53:67:a8:c0:e8:
e3:9c:f3:6d:28:3b:20:2b:67:19:07:9d:30:8a:62:
21:c1:20:20:5c:d5:f4:f2:14:60:ab:6a:12:de:1d:
57:25:15:46:60:ea:78:b4:98:68:e1:58:02:b8:cf:
03:24:d1:51:ae:5b:e9:55:76:5c:d0:2b:78:58:d4:
f8:f4:fb:a3:e3:c9:ee:92:77:75:b8:42:96:e7:b7:
e8:8d:6f:ac:28:4a:78:59:e1:73:93:0d:af:40:4f:
16:d2:95:0c:58:b9:5c:89:5c:6a:45:8d:76:1c:64:
f0:8f:78:fe:21:b9:ee:35:ab:0b:33:9c:3e:53:29:
75:12:10:28:57:20:3b:71:e6:0b:a0:98:89:85:4c:
40:1f:9d:59:b1:7b:da:2c:dc:dc:a7:95:80:be:8b:
ae:e6:e8:a2:18:c9:6b:32:15:38:86:95:69:69:7a:
dc:90:f3:f1:7f:66:d9:82:6a:b5:28:63:19:f2:12:
c0:6d:9a:09:c6:bd:0d:e8:a4:f1:73:04:bc:c2:25:
66:cc:5c:4f:86:95:75:de:e9:77:34:ac:f4:45:39:
59:ee:03:ec:4f:8b:de:97:f6:16:6d:93:47:cb:a1:
ea:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:92:8A:E6:26:8D:92:02:EF:43:7B:8E:85:D6:BF:0D:C8:3A:48:E3
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c4:9f:43:ff:b2:6d:0d:66:70:d8:14:23:dc:b9:ff:a1:8a:
2b:f4:7a:4b:a7:07:8e:52:e7:a9:92:dc:75:31:e6:70:f5:71:
22:af:98:5f:e7:6e:04:9c:cf:2c:f8:28:81:49:76:d2:0c:42:
5b:46:e7:2b:dc:79:45:20:20:65:e2:72:95:61:74:64:32:fc:
39:54:08:57:96:9e:8b:a7:36:d4:2d:a0:98:6d:6b:55:31:a0:
be:27:d2:4a:d5:37:f7:d4:0f:44:a4:99:ec:8c:e6:f3:a6:99:
6f:ea:bc:56:0b:ee:bc:d4:60:05:1e:54:0a:2f:90:e6:99:aa:
13:61:48:90:43:43:bb:c4:01:0b:f3:ec:77:fc:93:f5:25:06:
0e:d5:81:96:af:d6:e7:2c:33:12:cb:29:0e:e0:c5:eb:ad:e0:
8d:57:fc:3e:85:7e:5b:7a:89:27:43:19:c8:22:6b:be:d7:ea:
6d:54:cd:c3:24:ab:fb:9d:1e:b8:c5:23:fb:57:22:98:27:94:
95:c6:ec:a6:3f:89:50:b0:8e:5e:df:61:26:76:37:7b:3f:f8:
b6:aa:85:7f:1e:a6:fe:f5:a5:f2:25:db:7a:e1:8f:c6:c7:dd:
26:9f:26:80:80:9d:19:f7:9c:f0:85:a5:1b:66:31:6b:3a:40:
2d:10:11:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:26:48 2026 by rpki-client