Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json)
Hash identifier: S4Z4I1wuRuE1scrzdUla4fDOmkOJJDXoxacp590I1G4=
Subject key identifier: A5:9D:EE:96:99:5A:CC:44:C3:9B:C8:89:F8:BD:0B:AB:9C:A7:35:19
Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Certificate serial: 019CABA2687484FC16737BDF8E47557DCF44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
Manifest number: 0279
Signing time: Sun 01 Mar 2026 23:01:13 +0000
Manifest this update: Sun 01 Mar 2026 23:01:13 +0000
Manifest next update: Mon 02 Mar 2026 23:01:13 +0000
Files and hashes: 1: A5tB2m_AKkFH2MRYLSZP1qj6r7Y.roa (hash: JU4CZpqlBacShwjyBoLo9X21T9K67+NvyzH3SwXTo+Y=)
2: XHzhckAnu87gDfunEM3sM2fHJc4.roa (hash: J4SR1s2pClNQQ3/S6LW+95K5vqFvopp0j499gt2QsWY=)
3: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: zc74XJVQP5ThjS7YkYPchnrJA6+3wJfG/wjGFzpPco8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:68:74:84:fc:16:73:7b:df:8e:47:55:7d:cf:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Validity
Not Before: Mar 1 23:01:13 2026 GMT
Not After : Mar 2 23:01:13 2026 GMT
Subject: CN=a59dee96995acc44c39bc889f8bd0bab9ca73519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6b:9a:c0:61:6f:59:a1:b9:17:f0:94:eb:35:
10:ce:08:05:32:99:35:ad:93:91:20:35:a4:9c:da:
01:f2:89:b8:4b:90:61:b2:e0:05:26:5f:da:b6:fd:
2c:5a:e4:23:05:f3:e2:11:d0:6f:70:4d:8b:f0:5b:
70:20:7c:ef:70:27:f1:3f:1a:63:25:ba:3f:46:55:
d9:58:43:4b:7a:52:41:8e:d2:a5:9a:bb:99:87:23:
4e:a8:fa:19:3f:fd:c8:60:11:a1:a4:60:24:62:f4:
0c:62:1c:2f:ab:b6:a4:e9:6d:44:68:d0:89:9b:fd:
03:ac:90:e6:f6:12:70:74:04:c7:7d:3b:71:57:1f:
25:1f:bb:25:13:a5:be:59:41:65:e1:c3:6f:3b:a2:
2e:7c:b7:6d:33:be:ca:3a:98:73:28:da:76:97:fa:
fc:ff:e2:5b:41:bd:4a:06:81:92:e0:4f:6f:28:93:
39:80:8f:a7:c8:e0:ad:a8:33:6c:f3:6e:e4:7d:92:
75:70:8d:37:dc:e6:a4:37:65:43:17:cc:2f:51:c9:
23:e8:c4:07:e9:c2:30:3e:99:8f:65:4e:93:61:c2:
bf:46:1b:6e:d7:a3:62:72:46:29:3c:7a:d3:bd:76:
a4:a1:6a:ea:d4:da:25:d4:72:15:79:29:d6:93:9d:
64:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9D:EE:96:99:5A:CC:44:C3:9B:C8:89:F8:BD:0B:AB:9C:A7:35:19
X509v3 Authority Key Identifier:
keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c5:c5:ee:7b:0b:57:a8:1b:5a:ac:e7:e3:ef:af:09:22:74:
69:52:8a:92:03:bd:76:74:5d:b3:56:cb:00:74:97:1f:0a:7a:
da:4b:17:09:6f:81:75:40:5d:66:14:a6:61:c9:4d:73:36:06:
d2:43:13:fa:5f:50:d9:3b:05:79:65:8a:e0:10:73:df:88:bb:
1d:84:10:e8:09:d7:ab:55:ff:3c:f5:40:9d:2d:ae:e0:8f:96:
dd:1c:d4:6a:12:ce:35:e8:a6:81:43:3e:dd:1f:38:55:04:db:
5c:ca:0f:0a:0c:14:50:64:52:5a:26:41:ae:c7:05:16:da:44:
56:47:72:71:05:3c:15:dd:24:06:2c:26:89:88:fb:c5:c5:c3:
b9:38:a0:ec:0b:bc:f2:5f:a4:34:e9:44:fe:5a:92:03:e9:21:
21:45:b4:a9:ab:ab:28:4e:6f:23:67:ac:bd:53:fd:f2:ca:68:
4d:27:9c:b6:ca:f7:a8:b5:43:34:57:30:83:36:6d:ab:0d:34:
84:d1:5a:5b:69:d6:6e:67:cf:fb:cd:40:1c:04:42:94:73:55:
66:7b:c4:e1:56:45:4d:dd:56:56:10:32:63:1f:df:60:02:63:
79:be:a9:8a:78:55:7b:c9:34:2a:92:f5:21:0b:6e:db:93:81:
9a:f5:17:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:41 2026 by rpki-client