Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier: nQ7K0GSNP4BlYAwnMqaxbt3+IwwB77aLb0l95UCQqMA=
Subject key identifier: 8E:BA:AF:E0:7E:80:33:95:CB:66:32:2E:59:01:5C:EA:47:FE:3C:A1
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial: 01A0E709657A310C7C00C7FC9A90A3C550B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number: 0935
Signing time: Mon 28 Sep 2026 08:02:27 +0000
Manifest this update: Mon 28 Sep 2026 08:02:27 +0000
Manifest next update: Tue 29 Sep 2026 08:02:27 +0000
Files and hashes: 1: 5JP3EEY5bnKcvSQg_d_0jzLOuso.roa (hash: nHWCClQokNNDpIYjG0ERFvivPbSmCZ+n7ir/zAxywpM=)
2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: lE+y4w3T8hkCridiOlRmpvO2cb4s0/yA6NqJrR6kNp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:09:65:7a:31:0c:7c:00:c7:fc:9a:90:a3:c5:50:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Validity
Not Before: Sep 28 08:02:27 2026 GMT
Not After : Sep 29 08:02:27 2026 GMT
Subject: CN=8ebaafe07e803395cb66322e59015cea47fe3ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:87:6b:9d:68:4b:b6:f9:20:ef:a9:f7:a0:
01:0b:00:a0:ec:0e:8f:90:3d:68:d5:2b:73:75:5c:
59:c5:b9:31:fd:7e:09:9b:81:42:0c:dc:4b:5b:9a:
06:c7:b2:99:c1:38:91:72:80:27:4f:cc:43:88:7e:
5a:57:eb:49:09:5c:b3:f6:3e:dc:a4:5a:46:f2:25:
0f:70:e6:e9:d8:33:eb:96:58:a6:5f:93:19:b0:59:
96:ae:21:86:bd:5a:6b:6c:87:b7:d0:12:73:61:a1:
c6:bf:a1:d2:db:ac:90:c7:4b:79:e9:8f:68:9b:1a:
22:ed:b5:73:a7:b4:2f:eb:1b:e5:44:73:b8:ea:9f:
56:04:9d:3b:16:15:58:f2:4d:7d:ea:1e:49:ff:83:
2f:85:20:5e:c4:8d:44:9e:08:69:0a:cb:5d:35:b4:
c1:82:dd:7a:bb:2a:e1:77:0a:15:4d:a8:d6:e1:71:
fa:81:73:19:f4:a4:38:f3:01:c2:ed:81:a5:95:8a:
a5:87:c9:ed:a7:ac:aa:a5:83:98:1e:ab:e9:76:85:
45:22:fa:82:25:0a:53:80:83:db:ea:57:0f:4f:45:
f1:3c:52:eb:8e:09:a7:4e:17:b7:31:c2:57:30:60:
25:2b:2c:40:32:e8:22:9e:b5:51:fe:22:d4:5d:6f:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BA:AF:E0:7E:80:33:95:CB:66:32:2E:59:01:5C:EA:47:FE:3C:A1
X509v3 Authority Key Identifier:
keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7f:ac:bc:4a:1e:9b:d1:82:ea:5b:a6:14:ee:45:ca:c7:2d:
43:a9:7b:a0:ed:f1:66:90:81:1b:7a:14:de:c0:1c:a0:14:04:
e9:ce:bb:56:47:f9:ec:f0:1e:ed:50:2d:ca:5c:f1:3f:17:36:
25:38:86:fd:bb:53:3f:f0:eb:42:9c:17:16:c0:fd:c4:af:60:
8b:17:4a:ef:6b:83:c5:15:0f:fd:f3:d7:5a:37:e0:aa:4f:b4:
34:37:0f:6d:c6:e4:70:df:e5:91:40:ea:13:39:a0:74:5b:70:
bc:1a:66:94:3f:c3:dc:f0:ba:41:e8:12:94:98:66:2f:ec:f1:
29:86:f8:02:e3:15:8f:4a:17:69:0c:14:c3:41:fc:1e:50:6b:
47:a2:d7:50:20:a8:7c:26:a4:17:4c:8d:5b:00:20:43:4c:d7:
a5:16:72:3b:7f:3e:8a:ce:df:2e:c6:a1:f1:11:63:c6:ca:9e:
2a:c8:db:e5:e3:a9:50:b6:81:22:ce:75:90:f0:5c:ee:9c:96:
8b:6b:4c:f0:20:47:cc:2b:8d:74:35:16:95:6f:4f:a3:c8:4f:
f5:3f:17:69:91:35:66:3d:90:1d:a1:b8:f8:a2:dd:56:e9:13:
1f:75:2f:af:cb:7c:25:2a:3a:4b:5b:5e:4d:f0:41:de:2f:5b:
5a:75:ad:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:35:07 2026 by rpki-client