Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
File: aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft (raw, json)
Hash identifier: eA8Yo05230fFgDsMrSd5Gpaz9Arfq6W7YzQa1EdonUI=
Subject key identifier: D0:00:B2:94:13:B8:13:5E:52:DD:D8:FF:3D:F9:78:1A:42:11:EE:D6
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Certificate issuer: /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial: 01A0D87243E6B71480F6A7A068E311CC224F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
Manifest number: 1A03
Signing time: Fri 25 Sep 2026 12:02:42 +0000
Manifest this update: Fri 25 Sep 2026 12:02:42 +0000
Manifest next update: Sat 26 Sep 2026 12:02:42 +0000
Files and hashes: 1: aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl (hash: l1d1ssve32DoAv3ZQHbYINyaUDPI0Ccd7JPxtZkTjYM=)
2: pwbWCuGOLTFOrJupg71uoibxjHU.roa (hash: AW3hofHwJcZNnJFiGJ8uTdZk7az4nc9IpPWU/+dKm48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:43:e6:b7:14:80:f6:a7:a0:68:e3:11:cc:22:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Validity
Not Before: Sep 25 12:02:42 2026 GMT
Not After : Sep 26 12:02:42 2026 GMT
Subject: CN=d000b29413b8135e52ddd8ff3df9781a4211eed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:e0:73:02:3a:16:a3:37:69:20:46:5e:2b:
93:46:0e:3d:03:43:fc:78:ea:15:32:ea:cc:81:ba:
54:f6:e2:58:19:db:ac:15:ed:2b:d9:81:bd:b8:d2:
c1:21:5c:a9:d4:0d:26:4b:e5:c2:49:ce:ae:06:07:
58:2e:d4:07:8e:36:7e:25:12:16:0e:40:f4:90:ae:
d0:d8:8d:18:ed:73:2c:98:25:d6:d3:f4:35:38:2b:
3c:c2:15:06:0b:9d:71:43:65:11:78:63:52:3b:32:
41:11:f7:6f:7c:da:6c:5a:0d:49:24:92:95:03:e7:
51:55:bd:31:da:ab:69:44:a7:9e:e8:84:a0:38:3c:
34:1b:96:f4:3a:32:5c:9f:e6:99:fe:e5:29:27:52:
ab:68:8b:01:01:59:4d:a6:0b:28:42:4b:6c:cb:bf:
a9:47:b5:54:dc:85:78:18:c9:9b:eb:ca:bb:ef:17:
e0:c7:0d:55:d1:93:fa:ed:f3:f7:11:24:ef:a9:45:
e8:f3:41:54:1a:18:66:5f:34:df:80:46:64:be:fe:
52:28:56:3e:83:a8:74:79:c0:ac:44:c1:63:bf:ba:
0c:73:66:a8:9b:8f:db:3d:67:05:1b:fc:59:d8:60:
7e:03:ec:bc:da:9c:b1:a7:33:48:8d:e9:b3:6e:64:
e9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:00:B2:94:13:B8:13:5E:52:DD:D8:FF:3D:F9:78:1A:42:11:EE:D6
X509v3 Authority Key Identifier:
keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:25:d7:b1:67:ce:81:1d:2a:4f:de:b6:1c:5b:c8:1f:5b:76:
66:72:48:c7:a5:b8:f6:8e:df:ea:3f:46:a5:df:c3:61:1c:ec:
da:bc:e7:1d:a9:8b:41:39:5a:04:87:f2:b1:f8:f6:ab:43:87:
e7:86:bd:bf:15:dc:54:b9:a7:dc:8d:05:6a:ff:98:e7:e8:a4:
9d:ea:37:af:62:1b:3b:58:12:41:1b:1f:a7:57:0c:60:fe:54:
58:9c:2a:06:7f:5f:1e:11:95:d3:63:b4:2d:89:bc:a5:81:e7:
00:ab:69:89:f1:e0:2b:ab:2f:c4:ff:28:8b:72:79:12:e5:9d:
c8:20:1a:88:a6:45:c6:9c:dd:e7:2d:a6:ad:2f:e4:4d:51:5d:
1f:50:63:e0:4a:40:cd:e4:f0:d6:b2:37:e0:d3:61:8c:93:f9:
5e:80:82:0b:2d:37:1e:aa:54:ce:4f:75:b2:5c:6f:f2:ac:33:
93:93:04:22:65:c2:f6:6a:9e:f8:69:90:fb:a5:74:00:98:cb:
c0:a3:b1:88:55:96:ab:4d:e2:26:1e:ab:00:8e:4a:8b:43:22:
41:c3:05:f9:06:8b:1e:27:9a:f2:41:9b:a2:0e:0e:dd:b5:be:
29:57:a2:c4:32:90:a0:a4:1a:d8:08:bb:03:f4:27:01:cb:7c:
a9:64:c7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:30:58 2026 by rpki-client