Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
File: aPYGg7N3JXQn279uzjXixYWjsB0.mft (raw, json)
Hash identifier: TcKgCOrkFNoX1JnK2rJUa+W/f6fcCPnN5Bldq6WDqbQ=
Subject key identifier: 63:0A:90:6C:E4:FE:1B:81:B0:E9:14:FA:1E:4B:6B:19:DC:34:EF:41
Authority key identifier: 68:F6:06:83:B3:77:25:74:27:DB:BF:6E:CE:35:E2:C5:85:A3:B0:1D
Certificate issuer: /CN=68f60683b377257427dbbf6ece35e2c585a3b01d
Certificate serial: 01A0DBE051EA9C77FB815DAA43A6ED745B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 04:01:46 +0000
Manifest this update: Sat 26 Sep 2026 04:01:46 +0000
Manifest next update: Sun 27 Sep 2026 04:01:46 +0000
Files and hashes: 1: aPYGg7N3JXQn279uzjXixYWjsB0.crl (hash: lGKOfVDRCpvBNIoAyqTgBoMFbBrmmAJDa9BThv9C3Zo=)
2: eJ3f1i44Rqh5dEICPulbHl4WkkI.roa (hash: kZed20xL2+OJp4rVcGTuqnAX+7hPge7JicJ6LEk/ItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:51:ea:9c:77:fb:81:5d:aa:43:a6:ed:74:5b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f60683b377257427dbbf6ece35e2c585a3b01d
Validity
Not Before: Sep 26 04:01:46 2026 GMT
Not After : Sep 27 04:01:46 2026 GMT
Subject: CN=630a906ce4fe1b81b0e914fa1e4b6b19dc34ef41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:76:36:59:e7:60:5f:95:9c:24:df:2b:db:65:
71:40:ee:9d:91:96:c7:6d:9a:17:91:80:03:f0:cb:
87:ee:70:2a:ff:fe:6e:78:da:90:5d:fa:a1:78:b6:
6f:7d:c4:fe:05:e6:12:1e:00:fa:d7:2d:89:bf:20:
1c:93:96:2a:56:56:78:0b:0a:32:00:ff:6d:c9:22:
7a:cb:a5:0f:84:a1:c3:da:ab:f9:89:7c:9b:06:b9:
a5:db:1c:91:3b:95:82:87:23:58:30:3e:2d:06:35:
85:3d:98:be:c9:15:7a:68:8b:6a:a3:4a:a9:0b:3a:
6e:aa:3e:0c:5e:9c:d5:39:ce:51:8c:1b:11:02:1e:
53:1b:50:11:42:9a:7b:be:c2:f5:57:40:73:84:45:
1d:e1:f9:98:bb:72:d5:a6:d5:eb:96:dd:1d:e6:91:
f4:53:cb:5e:25:ea:70:42:d9:6d:d6:17:bd:0c:66:
15:6b:f4:b5:27:53:5c:8b:77:25:05:cb:97:90:28:
12:ca:ce:1f:bb:00:b4:07:eb:aa:26:40:af:b5:61:
15:b3:b8:d8:82:e5:3d:e3:73:99:0c:48:c6:35:2a:
e3:ea:0f:08:9c:c9:7f:7e:fc:3e:15:ca:55:80:53:
c2:a4:5b:61:ea:12:55:81:88:21:3e:73:be:a5:38:
aa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:90:6C:E4:FE:1B:81:B0:E9:14:FA:1E:4B:6B:19:DC:34:EF:41
X509v3 Authority Key Identifier:
keyid:68:F6:06:83:B3:77:25:74:27:DB:BF:6E:CE:35:E2:C5:85:A3:B0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e6:e3:17:20:57:eb:00:41:da:cc:09:7b:9c:f0:07:db:73:
c7:e5:e8:7c:e1:7f:1c:34:d5:8b:d3:41:07:94:e1:66:da:ef:
ee:47:ce:94:5a:95:b9:45:66:5e:9b:b9:4c:b4:3b:55:17:e1:
af:14:85:68:af:7f:ba:ff:83:eb:20:97:0d:22:0e:61:a4:38:
e7:83:3c:87:4e:05:02:67:c3:47:0d:4b:3e:9a:80:1c:4a:dc:
bd:df:28:c4:e8:fb:d2:b3:33:9e:eb:ea:ac:83:5e:9a:a7:18:
9e:f9:4d:19:e7:08:ed:ae:51:0a:a0:ab:52:9d:63:ce:df:db:
76:fa:81:60:05:f4:7c:89:53:ce:71:10:4a:b9:56:22:4e:b9:
e9:08:5e:ca:5a:ad:72:d8:7a:5c:c5:d0:f0:ca:c5:15:98:23:
0d:a3:6b:a3:6b:4f:33:b2:7c:89:52:dd:1f:fe:de:20:d7:a6:
fb:36:54:72:2f:22:eb:0e:e8:7c:40:d4:67:58:b7:d9:e6:db:
a0:98:4d:5c:e6:ff:b7:44:3e:44:a7:6f:24:16:0d:06:41:c2:
15:c8:30:be:de:15:1b:a4:49:d5:d2:08:09:e5:0b:01:39:55:
cb:04:ae:12:f7:b1:ca:84:a4:a9:80:2b:dc:ed:a4:7d:c9:93:
16:ba:a4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:58:36 2026 by rpki-client