Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier: J+TRicDr+lcQ95DiU1LvAwjNJRK82UVNMja47jVZCTU=
Subject key identifier: 03:39:C2:30:20:28:FD:C5:CA:2F:B0:39:8A:94:32:B4:F3:36:6D:21
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial: 019FAC3F41BBB05972CBA8BEF759EBAFA8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number: 0892
Signing time: Wed 29 Jul 2026 05:00:54 +0000
Manifest this update: Wed 29 Jul 2026 05:00:54 +0000
Manifest next update: Thu 30 Jul 2026 05:00:54 +0000
Files and hashes: 1: 5JP3EEY5bnKcvSQg_d_0jzLOuso.roa (hash: nHWCClQokNNDpIYjG0ERFvivPbSmCZ+n7ir/zAxywpM=)
2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: LfGJk55+/dRfzUq+ecHtihDI3uqYOQE+6Es5dYjFQYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:41:bb:b0:59:72:cb:a8:be:f7:59:eb:af:a8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Validity
Not Before: Jul 29 05:00:54 2026 GMT
Not After : Jul 30 05:00:54 2026 GMT
Subject: CN=0339c2302028fdc5ca2fb0398a9432b4f3366d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b2:79:60:b4:42:1f:14:e6:57:fd:2d:99:b7:
25:22:98:c0:b1:03:bc:7c:4b:fa:0e:ea:5b:ba:89:
ae:b2:3b:63:d2:39:99:c6:eb:f7:83:1f:f4:e8:36:
0f:05:90:85:a8:a1:e9:14:1b:8b:f6:b9:3a:7f:86:
ce:17:3b:72:92:f3:32:fc:21:24:2d:df:21:54:e2:
13:56:e6:1b:d8:5c:ac:13:f0:fb:c4:af:28:1e:4c:
06:65:ef:22:e3:15:35:78:26:e3:1b:80:5f:77:6c:
80:34:dc:bb:21:7f:4b:7d:5e:4a:33:70:e8:88:23:
bc:0e:a8:25:22:f5:2b:1f:c4:88:73:5c:ee:4e:69:
12:7d:aa:50:ae:0f:3a:f7:bd:01:61:5c:28:de:17:
d7:66:7d:6f:e2:f0:19:ef:75:4f:a5:df:f3:eb:0b:
3e:41:fc:1a:36:45:8b:b4:8f:3a:46:bc:63:df:1f:
4e:b9:26:96:8a:3c:20:c8:e2:42:6d:90:ba:b7:e3:
47:20:ac:2d:3b:90:c0:d4:c5:26:71:31:a9:02:cb:
46:ba:79:be:1d:26:cf:26:40:d3:1e:bf:41:77:38:
53:1e:31:06:ec:be:02:d9:71:ff:d7:fe:29:1d:54:
23:1d:81:30:08:99:22:06:b4:25:de:60:6c:e3:fc:
b1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:39:C2:30:20:28:FD:C5:CA:2F:B0:39:8A:94:32:B4:F3:36:6D:21
X509v3 Authority Key Identifier:
keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e6:58:d7:e1:6f:4d:63:bc:7a:07:e1:e1:e6:05:08:b9:9d:
14:db:80:bd:13:c8:9c:47:e9:4c:ed:2d:c4:64:d6:dc:9f:fa:
7e:fa:7c:e5:4e:2f:17:8f:75:60:3d:61:f2:c6:e4:4c:80:30:
c4:ff:5f:a1:dd:ff:2f:f0:96:d1:73:3c:f6:53:1f:87:66:c2:
0e:c3:9f:a5:d8:ca:88:52:94:e7:ca:af:89:85:bf:4f:a0:3e:
e0:31:63:08:45:ad:88:7b:bb:14:91:11:11:7c:66:30:78:5c:
4a:99:f7:15:21:ff:ad:4c:3d:53:f6:7a:1b:e4:20:bd:cf:46:
b1:03:9c:92:59:44:3e:93:f1:6a:77:0e:92:0b:26:6d:d0:55:
4b:96:45:18:69:94:80:5b:90:6f:f2:8f:0b:f5:26:18:10:05:
44:ea:bf:fa:e7:3c:b0:67:21:4f:68:79:79:46:d5:f6:fb:c0:
44:0d:7b:f3:30:5c:2a:40:5c:3b:f9:af:4e:bc:1e:45:bf:3f:
0a:09:69:a4:c4:63:8b:12:19:aa:a7:f1:53:2b:6f:c6:b0:c2:
bb:84:87:96:ee:1d:86:47:c4:b5:ac:e7:50:2f:40:e1:ae:d2:
d6:cd:30:fa:9e:c2:0b:bd:9b:a2:c3:3b:c2:53:8b:93:4a:6c:
03:3e:f9:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sP0G7sFlyy6i+91nrr6jsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZjgzZTJhMzQxNDVhZDQ3ZTBjYzJiM2M3OWZjNjMxMmJh
ZTJjNzEwHhcNMjYwNzI5MDUwMDU0WhcNMjYwNzMwMDUwMDU0WjAzMTEwLwYDVQQD
EygwMzM5YzIzMDIwMjhmZGM1Y2EyZmIwMzk4YTk0MzJiNGYzMzY2ZDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rJ5YLRCHxTmV/0tmbclIpjAsQO8
fEv6Dupbuomusjtj0jmZxuv3gx/06DYPBZCFqKHpFBuL9rk6f4bOFztykvMy/CEk
Ld8hVOITVuYb2FysE/D7xK8oHkwGZe8i4xU1eCbjG4Bfd2yANNy7IX9LfV5KM3Do
iCO8DqglIvUrH8SIc1zuTmkSfapQrg86970BYVwo3hfXZn1v4vAZ73VPpd/z6ws+
QfwaNkWLtI86Rrxj3x9OuSaWijwgyOJCbZC6t+NHIKwtO5DA1MUmcTGpAstGunm+
HSbPJkDTHr9BdzhTHjEG7L4C2XH/1/4pHVQjHYEwCJkiBrQl3mBs4/yxWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAM5wjAgKP3Fyi+wOYqUMrTzNm0hMB8GA1UdIwQY
MBaAFGj4Pio0FFrUfgzCs8efxjErrixxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQt
NzkyODAyYzQzOTI1LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQtNzkyODAyYzQzOTI1
LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuZY1+Fv
TWO8egfh4eYFCLmdFNuAvRPInEfpTO0txGTW3J/6fvp85U4vF491YD1h8sbkTIAw
xP9fod3/L/CW0XM89lMfh2bCDsOfpdjKiFKU58qviYW/T6A+4DFjCEWtiHu7FJER
EXxmMHhcSpn3FSH/rUw9U/Z6G+Qgvc9GsQOckllEPpPxancOkgsmbdBVS5ZFGGmU
gFuQb/KPC/UmGBAFROq/+uc8sGchT2h5eUbV9vvARA178zBcKkBcO/mvTrweRb8/
CglppMRjixIZqqfxUytvxrDCu4SHlu4dhkfEtaznUC9A4a7S1s0w+p7CC72bosM7
wlOLk0psAz75xw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:05:36 2026 by rpki-client