Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json)
Hash identifier: XmIqnUpCsM7bYbjSbzC2qeQCr3SK+pf992sit22NUCY=
Subject key identifier: F8:B7:0D:AA:E8:14:AC:67:12:45:2F:0D:54:92:D2:9A:32:F7:89:AF
Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Certificate serial: 019FAA510D8319C6A7A83517DAD63552F72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
Manifest number: 0406
Signing time: Tue 28 Jul 2026 20:01:06 +0000
Manifest this update: Tue 28 Jul 2026 20:01:06 +0000
Manifest next update: Wed 29 Jul 2026 20:01:06 +0000
Files and hashes: 1: A5tB2m_AKkFH2MRYLSZP1qj6r7Y.roa (hash: JU4CZpqlBacShwjyBoLo9X21T9K67+NvyzH3SwXTo+Y=)
2: XHzhckAnu87gDfunEM3sM2fHJc4.roa (hash: J4SR1s2pClNQQ3/S6LW+95K5vqFvopp0j499gt2QsWY=)
3: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: erL2z8hh/ickO44MTxvV4GLQElmfqsnxRKTsA7IXfV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:51:0d:83:19:c6:a7:a8:35:17:da:d6:35:52:f7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Validity
Not Before: Jul 28 20:01:06 2026 GMT
Not After : Jul 29 20:01:06 2026 GMT
Subject: CN=f8b70daae814ac6712452f0d5492d29a32f789af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:36:a3:dc:b6:20:9b:42:c0:db:84:33:75:06:
8e:d5:03:fc:a5:92:49:5b:7e:df:d1:b4:5d:25:e2:
a9:80:c6:08:b6:e8:9b:d1:ac:7f:a6:92:79:59:6a:
20:a4:64:b1:a9:5f:86:c7:02:4b:d0:6b:c6:fb:3a:
c3:d0:45:fe:04:bd:da:50:e1:a9:b3:96:04:e0:6b:
a4:98:a8:27:33:22:d5:4f:d9:6b:ed:ff:ed:a8:cb:
df:9c:03:c7:16:6c:89:60:24:b1:8a:61:78:d0:9b:
9a:1d:fa:86:84:bc:3f:a4:db:82:d8:7c:2d:74:17:
09:ee:86:a1:48:31:38:de:60:3e:3c:98:68:ce:fa:
cd:bd:9b:d1:18:01:5b:41:06:15:9a:a7:33:04:79:
81:5f:31:ad:4e:1f:d2:e4:89:7a:de:31:98:00:c9:
17:87:30:47:27:b7:c6:fd:30:c4:e5:c7:63:29:f0:
f3:0a:85:8e:71:53:f7:95:25:f4:26:70:a1:22:e1:
11:71:35:18:04:ee:1b:e2:5f:90:aa:3a:ff:4c:41:
66:65:4b:8a:aa:59:39:0b:de:e6:98:3f:61:55:d9:
08:8d:df:cc:10:02:49:78:fc:fb:80:b6:9d:36:a6:
f6:79:71:d0:05:08:f0:86:a0:22:0e:f4:92:cc:f4:
4c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B7:0D:AA:E8:14:AC:67:12:45:2F:0D:54:92:D2:9A:32:F7:89:AF
X509v3 Authority Key Identifier:
keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4c:26:59:46:7c:44:a1:21:69:64:bc:6c:17:87:17:a8:cf:
bc:2f:e7:08:81:85:79:86:b9:7f:20:05:0f:3a:45:a1:2c:9f:
e0:77:61:5f:1d:8e:a1:f7:10:ae:14:1e:c2:7f:bb:0f:57:4d:
47:05:d7:c3:9f:38:75:87:5a:e1:55:97:2c:14:93:18:63:8d:
bd:6c:8b:23:7d:69:21:28:e4:fd:cd:b6:02:a5:78:ac:b9:e1:
42:88:c9:67:ed:45:c7:a1:3b:eb:a4:10:6e:a1:24:21:64:af:
32:93:ce:b3:68:db:d9:b5:9d:08:5a:81:a4:a0:80:ff:3b:38:
d5:e4:e0:e5:fd:28:d4:ea:87:f9:73:92:00:be:f4:1c:a7:07:
69:42:b0:77:01:74:31:83:ae:f9:07:8f:64:35:4d:5d:46:28:
a5:5a:55:56:f1:eb:70:c4:66:9e:1f:8d:09:95:63:3a:26:a5:
fc:a0:5e:7c:8b:8e:35:a0:35:4a:84:52:a8:b6:9c:04:f5:64:
e2:d4:6a:7d:78:0c:60:5e:37:f5:a9:65:ac:c0:b1:27:3d:1e:
82:9a:ff:d4:4f:27:67:fd:8f:f6:0f:2c:70:e4:3d:2b:1f:9e:
97:df:49:4d:68:8f:04:6d:c9:de:6c:d4:6b:c3:87:90:e9:7e:
d9:d0:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:01:29 2026 by rpki-client