Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.mft
File: aJcB3urxZgFE8reb0IFyiE8aIT0.mft (raw, json)
Hash identifier: hCbar6ZMOZB4VL9P7wQwnlf+omMhJY5gY1qKJBKf0uY=
Subject key identifier: B7:93:61:70:B4:1C:F0:AC:69:7D:6C:63:F0:34:FA:60:31:00:0A:2D
Authority key identifier: 68:97:01:DE:EA:F1:66:01:44:F2:B7:9B:D0:81:72:88:4F:1A:21:3D
Certificate issuer: /CN=689701deeaf1660144f2b79bd08172884f1a213d
Certificate serial: 01A12EE9ED8B7F4EE1E98ECAAA5A5951C8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJcB3urxZgFE8reb0IFyiE8aIT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.mft
Manifest number: 22
Signing time: Mon 12 Oct 2026 07:00:44 +0000
Manifest this update: Mon 12 Oct 2026 07:00:44 +0000
Manifest next update: Tue 13 Oct 2026 07:00:44 +0000
Files and hashes: 1: 7DUIwilmDr5d02W6GI1qHAXlta4.roa (hash: MCwAkHYqe+E9E6tOIK6u+A6dJHIEtiQJRoXay7j/EDU=)
2: aJcB3urxZgFE8reb0IFyiE8aIT0.crl (hash: DEhfc91xVzRP8cWicuEXy69Lg7flw7jQ7hGmXQ7RPpM=)
3: hCqXIkjbw87o9qfRLbkk1mdWapc.roa (hash: ZY4JgYleWv7cv0Tm1hwdUrWJ73gQ3ixshl4F9GJhYqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJcB3urxZgFE8reb0IFyiE8aIT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:e9:ed:8b:7f:4e:e1:e9:8e:ca:aa:5a:59:51:c8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=689701deeaf1660144f2b79bd08172884f1a213d
Validity
Not Before: Oct 12 07:00:44 2026 GMT
Not After : Oct 13 07:00:44 2026 GMT
Subject: CN=b7936170b41cf0ac697d6c63f034fa6031000a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:8e:71:3e:2a:fb:ea:14:9b:d1:f5:07:eb:
62:15:95:85:88:09:c4:c5:28:df:f4:b2:f5:42:dc:
80:3f:1e:91:f9:ed:28:15:4e:99:5c:5c:c8:ff:f5:
3c:4a:8f:77:be:d5:95:b8:33:60:42:29:e6:11:31:
5f:d5:ab:d5:9b:a5:19:36:3c:f2:6e:a6:1e:ab:05:
17:c6:f3:75:67:03:4c:2a:e2:47:0c:48:c7:d7:ac:
a1:6e:39:c4:5c:8a:65:3c:b1:81:e4:3a:98:8b:a2:
18:b2:d3:7f:28:a2:47:86:97:20:92:97:ef:a9:61:
04:1c:04:81:d3:27:95:4f:10:4a:7e:ff:8c:e4:71:
7b:6b:b5:fc:4d:a0:36:80:93:47:ba:29:33:68:0e:
e0:eb:fb:f2:27:20:7c:b1:ab:cd:cb:48:e0:32:fa:
9f:25:84:0e:b8:41:2c:6a:37:cc:6f:dd:f9:c3:44:
85:f1:ae:bc:4b:41:7a:6d:ce:dd:5d:14:8d:d9:2a:
e8:ab:b2:8d:d4:fb:32:35:e9:c9:8c:89:45:04:eb:
e9:4d:8b:87:86:45:f7:0f:33:b7:50:0f:d8:b4:92:
a3:93:54:d2:15:14:a1:06:60:a5:e0:e4:39:41:fe:
73:d4:92:c4:00:c6:2f:96:4e:ef:98:da:5b:ea:f0:
22:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:93:61:70:B4:1C:F0:AC:69:7D:6C:63:F0:34:FA:60:31:00:0A:2D
X509v3 Authority Key Identifier:
keyid:68:97:01:DE:EA:F1:66:01:44:F2:B7:9B:D0:81:72:88:4F:1A:21:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJcB3urxZgFE8reb0IFyiE8aIT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/05ad8d-01b6-4c72-abe6-1e1ba7bf1fe6/1/aJcB3urxZgFE8reb0IFyiE8aIT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ca:05:cf:8d:fc:78:9b:31:ef:cf:4c:6a:6a:30:79:49:fc:
52:5a:2e:7c:f6:bd:13:e9:60:6d:34:39:e7:60:a9:0b:3b:f2:
81:3e:3d:30:55:0e:c5:4d:a9:8c:eb:e5:d4:38:bd:bc:46:e2:
4a:7d:0a:7d:3b:b8:54:80:a6:ba:de:36:fe:05:9d:5a:b4:67:
d2:0f:92:d3:6f:1d:66:21:a5:9e:3e:cf:68:f3:11:d2:eb:30:
6d:61:da:fc:8a:8c:88:ca:d9:fe:46:8d:45:32:30:25:04:dc:
3b:3c:eb:f6:8b:05:e6:79:84:e2:75:f4:53:6f:19:9a:6a:8a:
3e:f7:37:75:5c:51:cb:0d:db:7f:db:2d:7f:a6:1e:c7:a2:ea:
f0:b5:71:83:92:81:64:52:54:6d:f8:be:ff:23:3c:f6:de:0d:
f5:93:89:23:98:77:96:a9:f7:69:01:b6:68:84:fe:3b:e6:85:
06:31:c1:65:bf:4e:cf:0b:e8:1b:8a:a2:57:70:02:ab:06:77:
ac:e3:82:31:c6:ac:69:1f:0a:07:90:52:94:e2:bb:0a:fc:b9:
c9:b7:18:ea:4f:1d:c1:0b:fe:d7:c0:02:17:39:f4:32:71:8e:
66:ad:89:62:e6:2a:29:bc:5e:d1:d1:ea:9a:09:23:f2:92:8f:
43:0e:7b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 13:08:31 2026 by rpki-client