Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: mgjmuq6JZ9U0SAkOWiCw1P4csbOQK78f/FSMfou4CmM=
Subject key identifier: 21:8C:77:FE:3E:91:22:41:B1:93:CA:85:71:3B:6A:32:58:0C:48:2E
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 019FA1BB148B7B8CA44C022B9E390E3D9D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 1459
Signing time: Mon 27 Jul 2026 04:00:19 +0000
Manifest this update: Mon 27 Jul 2026 04:00:19 +0000
Manifest next update: Tue 28 Jul 2026 04:00:19 +0000
Files and hashes: 1: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: niutxUcpOwOduedUsGS0V7y6K1A9r0Acc+NdlOMKies=)
2: o8qWJ1qmv3YFlhdAYdwIJZaPBT4.roa (hash: xT316B0rPdGhWCFpIdcczgFppcvC9/tzakj3ZEzfe3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:14:8b:7b:8c:a4:4c:02:2b:9e:39:0e:3d:9d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Jul 27 04:00:19 2026 GMT
Not After : Jul 28 04:00:19 2026 GMT
Subject: CN=218c77fe3e912241b193ca85713b6a32580c482e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:01:57:55:13:8a:a1:39:48:a3:c4:f1:b0:
70:37:e2:de:f4:92:d3:d1:70:6e:bd:98:9e:2a:03:
cc:8c:db:06:90:53:7a:28:09:ba:cb:b6:36:43:25:
ad:85:f7:e0:29:16:ea:03:98:30:a0:eb:6c:c8:a7:
ee:b1:5d:02:e8:3c:e7:20:18:44:81:0a:62:a8:15:
26:8a:b1:47:25:1d:69:49:46:60:b8:75:c8:69:e0:
5c:3d:07:f3:82:52:bd:e1:a0:40:47:17:1f:84:15:
8d:fd:7a:5e:7d:56:50:6b:d8:9b:41:fe:c0:f3:e2:
c2:0e:a0:f3:9b:10:14:54:dd:62:37:ec:e4:fc:68:
49:c0:5b:d1:2d:dc:e9:c3:6a:0b:69:c9:61:32:a6:
5c:24:3b:88:98:3e:24:e5:9d:c2:32:ec:cf:4f:c9:
3e:86:16:1d:da:f7:b4:f0:0d:ca:6a:42:fb:72:d6:
61:6d:d5:8f:18:e2:c7:72:07:4c:71:43:17:67:9e:
f0:1d:df:49:63:64:fa:d5:ec:7a:c9:ee:b9:cc:7a:
ee:ec:f8:94:bd:6b:82:95:23:bf:28:88:0e:20:76:
73:51:b8:bf:a0:3d:e7:7f:3c:b9:54:2e:24:7a:20:
e7:ac:8e:a9:db:e4:17:c7:35:72:8b:b1:1e:c1:ef:
31:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8C:77:FE:3E:91:22:41:B1:93:CA:85:71:3B:6A:32:58:0C:48:2E
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2f:b8:9c:5f:cc:50:1c:83:58:08:0a:0c:c8:e7:cd:02:fa:
bd:a4:57:ca:df:ae:e8:c2:e5:74:42:2b:35:83:57:a7:5e:ff:
cc:75:ee:70:26:f2:82:48:19:49:5b:a8:65:60:52:7d:82:95:
d3:9d:42:0b:58:5a:37:22:a5:99:46:4a:be:f2:94:15:a4:e5:
59:b0:a6:3b:2c:10:bd:c5:80:c1:2a:65:a5:38:c3:7f:df:17:
f3:34:09:37:4d:1e:7d:9f:91:92:80:fb:89:57:df:9d:8f:20:
5c:21:0b:47:fe:bf:56:eb:95:c4:b8:c7:50:c5:a2:57:f3:f9:
fe:a0:4d:27:04:dc:f9:ef:8a:1d:5a:03:77:9b:4d:82:fd:06:
ec:0b:cb:4f:d3:2a:13:be:6b:c8:c2:6b:31:88:f1:62:7a:f9:
0e:06:58:c5:d4:8d:4a:ef:62:62:5d:58:2a:7a:db:df:83:cd:
c0:b2:e5:fc:b7:ff:2b:83:d2:4f:80:2f:ce:2d:10:37:43:33:
72:c1:a1:48:0c:70:d7:a3:4f:5f:75:ca:b9:75:d7:11:64:94:
f8:f7:21:a8:5a:41:2b:55:8b:73:67:81:bf:4c:65:ef:c9:81:
91:e1:95:cc:5f:ec:5f:96:fd:3d:6e:1b:8a:f2:74:5e:9b:23:
7d:32:0d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:28:46 2026 by rpki-client