Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
File: aNogbIPVBeJUs-88dlD5-5NFNDU.mft (raw, json)
Hash identifier: pPT2NngWVDFlh1m4ude6FKX6aM7+LGxMFPE0EaR7Lc4=
Subject key identifier: 6B:24:0C:88:73:D6:0F:97:96:75:41:41:C8:CA:45:77:50:B8:81:9A
Authority key identifier: 68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35
Certificate issuer: /CN=68da206c83d505e254b3ef3c7650f9fb93453435
Certificate serial: 019F9391930B44B2EAD2A494EA9C95FA1753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
Manifest number: 0CB7
Signing time: Fri 24 Jul 2026 10:00:18 +0000
Manifest this update: Fri 24 Jul 2026 10:00:18 +0000
Manifest next update: Sat 25 Jul 2026 10:00:18 +0000
Files and hashes: 1: aNogbIPVBeJUs-88dlD5-5NFNDU.crl (hash: oSyKFf7+3TPIhTOCF7w/1GUkbAyA7n6ub2aZf2eaFFo=)
2: tI5e6iAaAZ4nNbkpCHsMqp1-ktQ.roa (hash: A9GN5Q7BwonPYBSN1TVcg69kmzmTkS/zhmBwNF2zRqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:93:0b:44:b2:ea:d2:a4:94:ea:9c:95:fa:17:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68da206c83d505e254b3ef3c7650f9fb93453435
Validity
Not Before: Jul 24 10:00:18 2026 GMT
Not After : Jul 25 10:00:18 2026 GMT
Subject: CN=6b240c8873d60f9796754141c8ca457750b8819a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:b9:4e:ee:bc:9a:c4:34:27:44:68:51:39:
2c:d6:08:0c:7e:f2:13:56:8f:66:d5:0a:0d:31:a8:
d1:0f:e0:80:ce:cc:b6:63:7d:64:4c:18:a7:0b:25:
4e:05:2c:84:90:ec:01:45:82:54:aa:71:9e:14:4e:
5d:11:d9:79:b1:4d:df:8e:e6:fc:7a:ba:ec:d7:fb:
23:1c:64:8d:69:ea:03:27:5f:eb:22:08:fd:83:a5:
e0:76:6c:32:52:5b:1d:b6:f3:ae:5f:af:1c:2b:27:
a3:18:61:69:f6:47:7a:21:7c:dd:67:c1:c4:16:e2:
d1:53:75:70:70:c9:82:98:ae:31:d9:20:be:91:7f:
a9:65:be:ca:c5:4b:44:e7:87:c0:e4:1e:00:91:bc:
1b:6c:3c:e5:37:22:23:62:ed:9c:10:c0:48:b4:b6:
50:cf:9f:df:8c:3e:ce:7b:12:23:29:09:3e:f2:3d:
98:cb:61:76:27:a4:2f:ad:42:b1:9f:ba:f5:aa:66:
f8:0d:cd:cb:d1:f5:f0:d8:bf:1d:52:05:f4:c8:e2:
06:f3:d6:9e:89:01:8f:c3:cc:a5:86:2f:f8:92:cf:
f4:bf:bd:11:d7:c9:7f:3f:0f:79:31:50:91:b3:f0:
b7:21:70:01:63:bf:ba:0f:17:08:bb:b7:08:9a:06:
3b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:24:0C:88:73:D6:0F:97:96:75:41:41:C8:CA:45:77:50:B8:81:9A
X509v3 Authority Key Identifier:
keyid:68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:89:79:cd:bc:98:85:30:1f:f4:90:2e:9b:9b:0b:f4:f0:ac:
ca:f2:5c:7b:b2:fb:11:fa:83:b1:d5:d0:28:0f:b4:9f:44:73:
99:61:23:4c:83:e5:f9:08:8b:3b:6c:12:31:6e:c7:13:23:c8:
26:d0:87:b5:92:c5:5a:51:eb:70:19:c4:d5:e7:a8:7f:07:b7:
c7:28:41:89:04:38:e7:33:3e:3e:48:50:fc:a4:7d:e8:86:de:
49:79:08:71:d8:fc:e5:70:67:11:ca:f9:ee:f3:1d:1e:4d:cf:
93:45:18:9e:41:dd:24:e6:9c:89:0f:eb:57:51:99:16:dd:aa:
1f:f8:5d:d5:57:d5:25:8e:a1:ef:83:3c:e7:91:77:ec:4a:3e:
e7:47:f0:e5:bd:ac:3d:e2:72:2b:00:d2:bd:90:33:40:f3:a7:
0e:a1:39:b1:f3:17:01:c4:e9:0a:20:5a:b2:a2:4f:5d:a2:79:
8d:d7:cd:6b:0e:86:1a:46:c7:20:61:54:de:7c:0e:e4:c8:51:
0a:f4:8d:15:23:2f:ed:95:b8:c5:15:f6:ae:39:9c:10:b3:8d:
2e:22:14:8e:df:11:3a:65:ab:30:a3:1c:df:c0:09:d5:3d:81:
d2:ac:89:fb:e2:30:d9:4d:d3:53:b5:ed:70:2b:4f:db:ab:b9:
ec:bc:4d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:28 2026 by rpki-client