Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json)
Hash identifier: FFKL5A3LYl1+69UfaciLU2iTklDXmtKcKqed+CD99t8=
Subject key identifier: 14:BA:13:EC:19:A4:64:5A:B0:DB:72:1C:2E:22:63:F4:BE:1A:1A:9E
Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Certificate serial: 01A17EBCC65D805E0FDEE6AE02B8173F227C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
Manifest number: 1550
Signing time: Tue 27 Oct 2026 19:01:02 +0000
Manifest this update: Tue 27 Oct 2026 19:01:02 +0000
Manifest next update: Wed 28 Oct 2026 19:01:02 +0000
Files and hashes: 1: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: iRAYNcBr/2ghS8JsZg5cndzsM7OUxy+1+iBLau6PfSg=)
2: o8qWJ1qmv3YFlhdAYdwIJZaPBT4.roa (hash: xT316B0rPdGhWCFpIdcczgFppcvC9/tzakj3ZEzfe3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bc:c6:5d:80:5e:0f:de:e6:ae:02:b8:17:3f:22:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c
Validity
Not Before: Oct 27 19:01:02 2026 GMT
Not After : Oct 28 19:01:02 2026 GMT
Subject: CN=14ba13ec19a4645ab0db721c2e2263f4be1a1a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:32:e3:61:12:02:43:69:81:c0:27:f4:6c:
f8:92:4f:1b:45:57:88:ef:f6:10:c5:00:62:9c:fc:
e5:d7:8b:ab:4a:a7:82:53:50:8d:bc:b8:22:67:a1:
12:fd:fb:59:dc:87:4f:c5:e6:57:b4:ba:1b:fe:fa:
66:7d:6b:01:5d:a5:15:32:72:1d:16:fb:bd:6e:8a:
20:35:d5:71:5d:99:91:d9:22:59:df:16:22:2f:59:
2c:32:d9:4c:bd:26:76:66:d9:17:3e:1d:d2:01:4b:
b4:12:78:7e:75:3e:89:a1:e7:05:47:0c:94:df:f6:
bb:f5:ec:9b:37:71:2a:8b:7c:a2:33:a2:32:d7:a9:
10:c9:5e:25:4b:2e:5f:22:f8:53:db:67:db:3b:c3:
fb:5c:1c:88:7b:ae:55:bf:ea:dd:f8:dc:10:28:6b:
94:0f:97:39:53:96:da:58:52:d8:df:51:06:5a:1a:
ec:30:01:30:dc:a4:1d:34:34:57:e1:e4:67:57:77:
41:85:0f:fb:c6:d5:3c:41:6a:e6:f2:3d:e1:42:b1:
77:9e:49:55:c4:fa:e3:39:83:45:06:61:6c:c6:30:
84:70:8d:9a:b3:2c:d1:9f:74:13:e4:19:48:6c:11:
f3:10:94:5a:20:84:27:06:cc:24:04:4d:3b:ae:7c:
d0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BA:13:EC:19:A4:64:5A:B0:DB:72:1C:2E:22:63:F4:BE:1A:1A:9E
X509v3 Authority Key Identifier:
keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:fc:3d:f1:57:36:e2:95:61:ae:79:75:b0:9a:7d:72:66:f2:
c1:cb:11:3f:eb:74:39:20:33:3b:30:18:c8:bd:9a:b0:7d:c5:
28:17:dc:12:7f:ff:44:bf:14:83:b4:3e:cc:d7:39:90:ba:de:
b5:c0:f9:14:f1:e0:a2:3b:31:de:bc:a3:b2:e2:4a:85:e0:7b:
9a:7c:a0:9b:47:f3:d9:a8:07:77:05:26:e8:2c:7f:68:a8:57:
a9:ff:9b:f8:d1:5e:74:0a:9b:58:48:90:2b:28:d5:bd:5b:e5:
93:a2:f6:a2:44:e0:86:ac:d3:d4:83:97:d2:21:14:e7:22:0a:
46:f6:70:0d:49:94:7f:12:33:15:b6:b3:07:b5:99:90:14:71:
45:5a:a9:89:6f:ec:fe:51:b0:ac:b2:94:40:50:f1:8f:96:3d:
14:61:5e:3b:24:66:e3:79:0d:5a:6c:fd:4a:ec:6e:02:c1:57:
32:66:76:65:66:02:9c:3e:e3:a0:a2:46:e7:85:d0:e8:84:ee:
8f:29:10:f0:fa:5c:ac:e6:34:0c:e7:41:a3:6d:c0:99:2a:f1:
27:cd:60:f1:95:32:4d:f5:93:78:92:c0:d4:43:e2:b3:ef:a0:
21:91:d7:45:54:0c:0b:f3:3e:40:61:51:79:9c:62:b0:44:cf:
de:ef:34:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:51:32 2026 by rpki-client