Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json)
Hash identifier: z0d//Q8M1sG4Oorl8X1g0qedICh0FxAHL1Djv3MJ0TA=
Subject key identifier: C8:31:8C:0E:90:F9:26:DF:C8:1B:E4:02:CA:EA:A3:09:25:73:ED:D6
Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Certificate serial: 019EC0A3B6AD09A073F74817BF6D21E7ACE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
Manifest number: 038D
Signing time: Sat 13 Jun 2026 11:00:15 +0000
Manifest this update: Sat 13 Jun 2026 11:00:15 +0000
Manifest next update: Sun 14 Jun 2026 11:00:15 +0000
Files and hashes: 1: A5tB2m_AKkFH2MRYLSZP1qj6r7Y.roa (hash: JU4CZpqlBacShwjyBoLo9X21T9K67+NvyzH3SwXTo+Y=)
2: XHzhckAnu87gDfunEM3sM2fHJc4.roa (hash: J4SR1s2pClNQQ3/S6LW+95K5vqFvopp0j499gt2QsWY=)
3: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: UR8amajMwV0i+Xbi1vQ0IlKwGeG/otcREvCVZcUUoTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:b6:ad:09:a0:73:f7:48:17:bf:6d:21:e7:ac:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Validity
Not Before: Jun 13 11:00:15 2026 GMT
Not After : Jun 14 11:00:15 2026 GMT
Subject: CN=c8318c0e90f926dfc81be402caeaa3092573edd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c0:5f:0f:a9:2d:d0:d8:d4:2d:8d:34:cb:01:
c4:32:15:ae:09:a2:76:3b:37:b8:a9:01:55:9f:22:
6b:2e:59:2f:e2:cf:20:70:db:56:bf:42:77:1b:08:
0e:b1:c6:5d:14:a9:f3:34:3a:56:22:53:65:f4:b2:
24:0c:37:66:fe:f5:d6:db:e0:ea:fe:b4:0e:fc:48:
4d:cc:9d:80:85:1c:33:de:36:c6:9b:d1:9f:6f:5f:
26:68:41:74:47:ed:83:25:ea:a1:e0:ed:3c:25:cd:
61:10:70:5c:bf:c7:78:6e:19:3c:bd:d5:7c:73:07:
61:14:2f:28:2f:27:d6:10:5c:29:65:66:45:47:2d:
fc:57:ca:df:90:9b:51:87:8d:0e:3f:d3:2b:10:a6:
5a:a7:99:af:fc:fd:f9:1a:af:c3:18:d8:30:a4:8e:
a0:6a:f0:92:6f:02:6e:10:a4:bf:f7:6c:92:06:35:
b7:5f:d7:c8:96:b0:c1:69:3a:fb:df:74:ae:02:37:
22:f2:58:b7:bf:77:3f:02:6a:bd:49:2a:89:74:59:
fe:e3:af:58:ac:d7:ec:d1:1f:17:80:6d:7a:fa:f4:
90:d9:08:ef:a8:65:13:60:77:69:ad:40:71:9e:65:
d1:d8:af:2e:61:c6:04:d5:a9:0f:1b:7e:08:6c:2f:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:31:8C:0E:90:F9:26:DF:C8:1B:E4:02:CA:EA:A3:09:25:73:ED:D6
X509v3 Authority Key Identifier:
keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f1:c3:80:0a:63:80:4d:14:1f:53:63:b1:75:31:e5:02:07:
17:0b:05:86:5b:00:de:81:16:81:e5:1c:21:b0:dc:15:71:d7:
a4:a4:4a:38:e8:e9:c7:bf:26:5f:42:29:b8:e2:0e:2b:17:5c:
4a:31:c2:80:81:9c:e7:11:03:b3:d4:5a:25:0b:2b:dc:af:d4:
cb:f2:00:17:7c:36:17:8e:1c:2d:f2:1d:a2:2f:61:7d:89:9b:
ea:fa:8a:74:6f:09:72:67:4b:65:40:e9:1c:b1:96:8a:7e:92:
a2:bc:4f:80:93:d5:27:81:2a:e6:98:1a:bd:62:06:39:2e:75:
60:ae:0c:8d:f6:8f:11:bd:21:a4:4c:c9:8f:f3:9d:53:05:c7:
4a:0a:ba:cc:b6:ed:d3:60:06:6a:db:8d:05:e7:73:59:13:f1:
ed:7e:66:e2:14:6f:86:1c:fe:b2:14:1d:61:e9:31:3c:76:bc:
e6:d9:d4:61:a9:62:de:69:26:50:93:29:1b:96:af:76:49:20:
cb:9c:97:9e:85:fe:12:1f:a7:43:69:60:ae:7a:90:ff:ec:de:
30:32:e4:8c:56:93:b4:f0:75:13:34:f4:b1:90:0c:6d:c9:27:
d6:b2:a2:ae:b9:86:0f:64:9e:3e:d0:de:4b:92:83:67:56:74:
83:87:18:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:26:29 2026 by rpki-client