Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json)
Hash identifier: +/5jf1IYt/JgXBzpWYXSJ3s3axpxAJRjKC4Pn0V6Iys=
Subject key identifier: 31:0C:AA:57:B9:95:CE:99:D6:04:46:0D:27:9D:FF:DF:FD:CF:65:9F
Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Certificate serial: 019D992B0B283E2962F9C7B568089860B4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
Manifest number: 02F4
Signing time: Fri 17 Apr 2026 02:00:28 +0000
Manifest this update: Fri 17 Apr 2026 02:00:28 +0000
Manifest next update: Sat 18 Apr 2026 02:00:28 +0000
Files and hashes: 1: A5tB2m_AKkFH2MRYLSZP1qj6r7Y.roa (hash: JU4CZpqlBacShwjyBoLo9X21T9K67+NvyzH3SwXTo+Y=)
2: XHzhckAnu87gDfunEM3sM2fHJc4.roa (hash: J4SR1s2pClNQQ3/S6LW+95K5vqFvopp0j499gt2QsWY=)
3: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: DuuM8BRo3QVBlyVQrvzRujBK8NZoHeA9KZPZUFxah3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:0b:28:3e:29:62:f9:c7:b5:68:08:98:60:b4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Validity
Not Before: Apr 17 02:00:28 2026 GMT
Not After : Apr 18 02:00:28 2026 GMT
Subject: CN=310caa57b995ce99d604460d279dffdffdcf659f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:09:7e:79:97:53:0e:80:17:e7:c3:e4:89:82:
25:48:4c:fd:a6:3a:54:8b:5c:e3:9e:7c:6c:01:55:
2f:d8:06:ad:b6:18:d8:9f:a2:ff:5a:de:ef:b1:34:
fe:2d:27:54:b6:0e:2c:68:bb:70:26:3b:e5:a4:32:
4f:fc:0d:28:84:4a:51:52:67:26:60:b6:60:cc:05:
39:06:4f:16:43:de:cb:53:97:a4:a9:99:3d:7f:91:
f5:a8:a1:fb:ea:84:ef:79:68:8f:8d:39:31:52:c9:
b8:c1:a8:53:6b:9b:a3:d5:ce:66:5e:a1:6c:b8:7b:
9b:7c:ab:ce:76:b9:b9:eb:3a:5a:d7:df:60:40:11:
d0:b1:ac:f5:b1:41:df:80:34:43:68:95:d0:ed:51:
f7:4a:ea:1d:23:3b:5e:f2:54:72:ee:0b:48:ae:e7:
30:f2:68:e1:a4:39:cc:b6:6f:04:58:00:3a:aa:fc:
c2:fa:65:d5:3b:0a:8c:10:d1:43:17:19:7b:9a:f3:
7c:6d:c1:3c:e0:11:98:4f:8e:12:da:e4:36:d7:e9:
6e:31:96:f9:ed:95:7c:bf:46:c0:3a:69:32:c7:50:
a7:61:7b:c7:fb:dd:3f:97:8e:63:bb:e9:26:0b:4b:
8e:9c:9a:df:03:a7:25:c2:cd:1a:d2:80:b2:5b:81:
ae:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0C:AA:57:B9:95:CE:99:D6:04:46:0D:27:9D:FF:DF:FD:CF:65:9F
X509v3 Authority Key Identifier:
keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1d:a2:02:07:4b:6a:14:3c:0f:a0:b3:de:6e:84:5e:9e:ef:
6a:60:9b:fa:91:08:e2:42:ae:cd:be:89:84:f7:23:60:d7:28:
d5:da:ee:7b:ed:c1:73:35:b1:30:8e:53:61:f3:eb:b1:31:5b:
c2:08:02:b2:0c:f6:fe:f2:d5:bf:84:e6:97:bd:9f:a1:47:60:
30:2a:db:c1:ae:dc:d8:c7:8b:a0:56:07:ee:6a:92:de:56:99:
ee:31:e4:49:11:c6:2c:ae:dc:7a:72:a2:16:59:10:59:6e:3b:
2f:1d:f9:59:99:e3:7b:f9:3c:72:6d:d0:00:3d:0d:97:b8:a4:
cb:ee:45:b7:9e:2c:d9:20:b9:a8:af:d7:85:41:e0:ca:d4:db:
69:09:f1:bc:ce:ce:e6:7b:ea:13:11:11:92:12:df:23:a9:e9:
2c:d9:94:ca:c0:79:f0:75:d0:8d:3f:42:64:cf:fd:b8:52:d4:
ff:2b:34:d6:96:8c:70:7e:6a:1a:cb:79:fa:99:1c:73:fe:63:
d7:1d:81:3c:cf:47:6b:f9:e3:5e:9a:e6:d8:99:78:96:55:12:
09:85:43:86:71:97:4c:82:c0:0a:e6:58:ea:49:48:4b:c3:91:
72:05:35:92:4f:b6:f3:7c:92:0a:35:86:e7:07:45:bb:77:6a:
5f:1e:93:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKwsoPili+ce1aAiYYLTjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZjQzYjViYmNjNDk2MjgwNmVhOTMyMmVjMjkyZTliNjZk
ZGNjYzUwHhcNMjYwNDE3MDIwMDI4WhcNMjYwNDE4MDIwMDI4WjAzMTEwLwYDVQQD
EygzMTBjYWE1N2I5OTVjZTk5ZDYwNDQ2MGQyNzlkZmZkZmZkY2Y2NTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wl+eZdTDoAX58PkiYIlSEz9pjpU
i1zjnnxsAVUv2AatthjYn6L/Wt7vsTT+LSdUtg4saLtwJjvlpDJP/A0ohEpRUmcm
YLZgzAU5Bk8WQ97LU5ekqZk9f5H1qKH76oTveWiPjTkxUsm4wahTa5uj1c5mXqFs
uHubfKvOdrm56zpa199gQBHQsaz1sUHfgDRDaJXQ7VH3SuodIzte8lRy7gtIrucw
8mjhpDnMtm8EWAA6qvzC+mXVOwqMENFDFxl7mvN8bcE84BGYT44S2uQ21+luMZb5
7ZV8v0bAOmkyx1CnYXvH+90/l45ju+kmC0uOnJrfA6clws0a0oCyW4GuBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEMqle5lc6Z1gRGDSed/9/9z2WfMB8GA1UdIwQY
MBaAFGj0O1u8xJYoBuqTIuwpLptm3czFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wNDZmZmUtMDVlYi00YzhjLTg1NDUt
MDI0ODNlNjQ4MmNiLzEvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wNDZmZmUtMDVlYi00YzhjLTg1NDUtMDI0ODNlNjQ4MmNi
LzEvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfx2iAgdL
ahQ8D6Cz3m6EXp7vamCb+pEI4kKuzb6JhPcjYNco1drue+3BczWxMI5TYfPrsTFb
wggCsgz2/vLVv4Tml72foUdgMCrbwa7c2MeLoFYH7mqS3laZ7jHkSRHGLK7cenKi
FlkQWW47Lx35WZnje/k8cm3QAD0Nl7iky+5Ft54s2SC5qK/XhUHgytTbaQnxvM7O
5nvqExERkhLfI6npLNmUysB58HXQjT9CZM/9uFLU/ys01paMcH5qGst5+pkcc/5j
1x2BPM9Ha/njXprm2Jl4llUSCYVDhnGXTILACuZY6klIS8ORcgU1kk+283ySCjWG
5wdFu3dqXx6T/w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:12:46 2026 by rpki-client