Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
File: aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft (raw, json)
Hash identifier: DG4ht2EYS5mIwoKb6B+vsgMJXNlhWB3s4/L4dtXX1U4=
Subject key identifier: 35:23:DF:89:25:5D:77:CF:1B:0C:0D:B7:44:2B:C9:90:36:A4:27:D0
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Certificate issuer: /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial: 019F95802295801AC760984704E0A3433C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 19:00:30 +0000
Manifest this update: Fri 24 Jul 2026 19:00:30 +0000
Manifest next update: Sat 25 Jul 2026 19:00:30 +0000
Files and hashes: 1: BtcmHuwetapblyi9s6FZkxvndTA.roa (hash: dnt6NY9Mo4FrwsWIa33YjdrYdhY3bDry7NAo/6vLCVQ=)
2: aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl (hash: m9i0/FgHPsDWdabFzD/9K7uvLd4NYVOVS5nw5Y83rz8=)
3: vQys_ba_SRbDMdjvkJJ4d_e1bnU.roa (hash: OV/ynpbxba/2j5Cpj7v9gb2kcDvJcgfm005X97a5zrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:22:95:80:1a:c7:60:98:47:04:e0:a3:43:3c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Validity
Not Before: Jul 24 19:00:30 2026 GMT
Not After : Jul 25 19:00:30 2026 GMT
Subject: CN=3523df89255d77cf1b0c0db7442bc99036a427d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e8:12:98:e7:7c:cf:a2:fe:b8:4c:d7:5d:5b:
4f:2a:90:e8:5c:50:b1:c7:83:04:0a:71:e2:d1:dc:
96:44:ec:5d:f7:f7:2f:af:d5:72:75:dc:fa:0c:ab:
6d:32:99:3c:f3:f5:36:a0:81:88:48:db:a2:09:e9:
3d:02:4a:c8:a4:8c:00:06:36:c6:b3:ae:fc:5c:c9:
7b:52:8c:02:0b:0a:7c:1b:f6:3a:ec:af:3a:79:52:
2e:7e:48:20:8f:d0:e4:54:27:70:bf:77:b5:80:cb:
0a:7d:d5:64:47:72:83:ed:21:de:f8:84:a3:a9:90:
03:ef:33:89:00:59:9c:63:99:ca:4c:54:e2:b2:f7:
9b:ad:93:ab:8e:64:fb:2f:08:45:89:1b:3e:7f:79:
82:bd:5d:10:7f:07:25:99:fe:0a:a6:e6:6e:61:3d:
50:da:5f:a7:cc:9d:bf:d3:a9:68:c2:64:f2:45:de:
de:d2:a4:c6:c2:89:d0:87:3f:84:2b:02:83:ec:02:
61:6f:77:98:65:9f:ae:3b:d2:83:d3:19:6f:a9:65:
ed:19:69:b9:a5:84:f8:94:48:5e:c8:6b:ff:45:34:
7d:69:e3:9a:fe:8e:52:a2:e1:97:e6:e8:f8:c9:ba:
04:dd:3a:63:48:76:d4:64:13:6d:20:ea:c4:69:28:
ab:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:23:DF:89:25:5D:77:CF:1B:0C:0D:B7:44:2B:C9:90:36:A4:27:D0
X509v3 Authority Key Identifier:
keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b6:ee:d8:2a:67:a6:86:7f:ea:15:94:e2:bc:84:69:5a:13:
84:2c:75:43:34:e8:97:43:ea:f3:7c:74:3a:fc:96:0d:e4:63:
17:bf:23:a2:e7:75:e4:84:32:ef:d1:16:0e:5f:71:b4:9a:aa:
8a:16:6a:15:eb:4d:eb:80:31:0e:1d:d7:fc:8b:12:8a:e7:87:
a2:6d:d9:a7:7e:cf:c1:0c:ee:55:b9:d6:df:ee:76:d1:bb:45:
f0:d2:cf:8f:2e:cc:0d:23:2f:13:4e:e1:83:b5:04:6a:1a:6b:
5f:5e:58:65:66:02:74:32:ba:fc:21:e6:07:71:8d:5f:ec:f8:
35:ce:e7:7f:a7:c7:e2:d2:79:64:a6:3a:3e:4f:87:ca:c2:93:
eb:9f:e6:30:2b:d2:a1:ee:ee:86:95:ee:0f:32:de:4e:f5:f2:
23:05:44:03:36:30:63:22:17:c5:4d:29:e2:b7:10:21:37:29:
91:60:01:e5:29:57:7c:ff:a0:cc:ca:d0:21:7f:02:9b:cf:44:
2a:af:cb:57:ad:08:24:37:b7:61:d8:ba:f8:40:d2:31:d8:09:
02:a8:38:57:9d:c1:2d:0c:5a:64:e9:80:6b:69:61:2b:dc:e6:
af:24:0e:6b:bf:2a:80:5b:fc:ff:20:23:04:11:7e:f9:00:90:
dc:6f:25:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:04 2026 by rpki-client