Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
File: aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft (raw, json)
Hash identifier: V4YiGN9LjGoFtJdg8TE6GCyShV4TZWOxttWc8Df964M=
Subject key identifier: C8:BA:C6:BC:CD:00:BE:33:21:6F:B8:FB:5C:45:36:EC:04:84:05:EC
Authority key identifier: 68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
Certificate issuer: /CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Certificate serial: 019F93FFE98D72D49BF59089C28670A935F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
Manifest number: 195B
Signing time: Fri 24 Jul 2026 12:00:49 +0000
Manifest this update: Fri 24 Jul 2026 12:00:49 +0000
Manifest next update: Sat 25 Jul 2026 12:00:49 +0000
Files and hashes: 1: aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl (hash: rYaWz73cHlonbbH1P+UHr8ZMPjlfHhdpy60NouzL/f0=)
2: pwbWCuGOLTFOrJupg71uoibxjHU.roa (hash: AW3hofHwJcZNnJFiGJ8uTdZk7az4nc9IpPWU/+dKm48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:e9:8d:72:d4:9b:f5:90:89:c2:86:70:a9:35:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6896e763f89c720e87ce4d79f8c09d07f2fa6392
Validity
Not Before: Jul 24 12:00:49 2026 GMT
Not After : Jul 25 12:00:49 2026 GMT
Subject: CN=c8bac6bccd00be33216fb8fb5c4536ec048405ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e5:be:48:b1:5e:5f:c9:93:d8:d2:86:0b:d1:
e8:2c:98:81:b6:02:d2:7b:2f:5f:97:a1:c9:d7:ba:
f2:86:06:f8:07:33:c8:07:6a:49:dd:d3:f8:e5:34:
4f:b0:b2:79:77:f3:2c:dc:f7:e8:e1:5e:41:43:8b:
53:ec:84:65:9b:74:8d:8a:c2:d3:e6:70:af:50:0e:
af:c9:84:2f:e8:6b:d1:f3:af:1d:aa:de:93:d7:18:
ef:f3:55:26:82:c4:56:1e:10:35:15:b7:56:4d:99:
87:c5:57:ee:0f:1d:05:ac:33:1e:93:89:d2:4f:a6:
46:e7:06:02:76:e2:45:90:04:56:6e:38:cb:bb:c4:
61:07:21:d1:03:a9:a7:12:ed:50:a1:a9:e8:17:b4:
22:3d:13:f9:fb:69:15:f3:9c:91:f6:ac:c8:a0:e1:
39:2c:73:41:89:45:0f:32:58:13:59:52:73:4a:01:
d5:ff:5b:e7:f8:99:00:da:a3:e3:58:28:de:44:47:
4a:8b:39:84:87:f7:e1:24:89:ce:3b:03:14:4a:19:
16:a7:4c:21:df:f5:85:d8:58:56:ba:4f:b6:1c:c2:
71:3a:f8:42:b9:3b:20:d5:4f:eb:b6:de:1a:a7:fe:
bb:71:97:78:79:ee:6d:79:07:a6:b3:f6:7a:a1:b3:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BA:C6:BC:CD:00:BE:33:21:6F:B8:FB:5C:45:36:EC:04:84:05:EC
X509v3 Authority Key Identifier:
keyid:68:96:E7:63:F8:9C:72:0E:87:CE:4D:79:F8:C0:9D:07:F2:FA:63:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbnY_iccg6Hzk15-MCdB_L6Y5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b408d7-012c-48c3-a7ea-c8840fa85141/1/aJbnY_iccg6Hzk15-MCdB_L6Y5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:99:10:18:15:f2:63:47:38:c7:13:6b:82:38:6b:81:1e:19:
20:ec:e1:96:64:f7:da:b9:03:88:3c:af:be:81:53:60:87:24:
bc:65:cb:80:4f:01:b5:a6:6d:99:4a:04:ba:ba:71:b8:73:bd:
7c:1d:d4:a3:ce:28:11:7e:6e:45:d1:05:44:15:32:fa:1b:ac:
9c:a6:13:e4:50:b8:26:0e:40:70:ad:d7:d8:0d:68:e7:69:af:
6c:a8:97:e1:09:dd:c2:0c:c9:40:03:de:01:bc:a6:f1:01:91:
d3:71:7a:7d:bd:82:ca:60:cb:03:c9:d9:57:4a:63:f0:f2:8d:
b6:51:15:f3:60:0f:42:97:c4:c4:15:15:78:e5:00:e3:f2:3d:
47:56:4e:31:ed:91:f5:17:0f:b4:56:28:83:ae:e1:b9:06:b0:
45:7d:b4:dd:2f:f2:a3:c4:8d:01:41:ab:ae:35:d5:2b:59:0d:
e0:fc:26:81:42:30:2c:f2:aa:15:a3:60:74:10:78:0f:15:47:
6a:86:10:f7:05:f2:36:67:05:6e:30:a7:e7:2e:6d:a3:40:0e:
07:2b:c6:e3:74:b8:7b:24:00:a1:18:7a:9a:ce:88:88:2c:2b:
24:3a:37:07:93:c8:a4:da:12:f2:b1:74:cc:43:16:48:da:bc:
d1:7c:11:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:22 2026 by rpki-client