Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
File: aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft (raw, json)
Hash identifier: LFJI0b/40iIx+209zL/Een2Ikime7BbAS3R7gQTCTXs=
Subject key identifier: 2B:1D:1D:05:30:AA:CD:CB:37:63:82:54:7A:8C:DC:63:E0:77:9F:C2
Authority key identifier: 68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
Certificate issuer: /CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Certificate serial: 019FAC3EED4998ECEBD525CB7F3263642264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
Manifest number: 18D3
Signing time: Wed 29 Jul 2026 05:00:32 +0000
Manifest this update: Wed 29 Jul 2026 05:00:32 +0000
Manifest next update: Thu 30 Jul 2026 05:00:32 +0000
Files and hashes: 1: aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl (hash: tU44SI2NxVpkvjsvMFcyJwu03rngquoN+1ErCNySLVE=)
2: gNhszUNFjUvnmp6uYZywKw0VK4Q.roa (hash: OoYbjhXKEH09k93nIljEgaEwB00MnQM3qMLjic/Ifxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:ed:49:98:ec:eb:d5:25:cb:7f:32:63:64:22:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Validity
Not Before: Jul 29 05:00:32 2026 GMT
Not After : Jul 30 05:00:32 2026 GMT
Subject: CN=2b1d1d0530aacdcb376382547a8cdc63e0779fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:fa:9d:3b:2e:ec:4f:8c:34:41:a6:89:ce:
cf:68:20:b7:b8:10:98:3c:87:9b:28:01:fe:60:97:
7f:af:4c:59:a1:1d:93:27:ca:39:9e:c5:cc:1f:c7:
04:81:38:c8:5c:a1:08:cb:72:ca:d6:58:ef:8b:2c:
f6:6e:80:7e:6c:0e:0e:2f:32:d0:dd:cf:ac:2b:1e:
00:d7:40:e2:c1:95:fc:66:41:f0:c9:e6:cb:81:4e:
e1:e6:c6:07:eb:a0:eb:f1:33:87:0f:68:b6:15:33:
f2:b8:26:19:8a:60:b6:06:25:7e:84:aa:e8:5a:51:
aa:b7:b2:27:44:06:22:54:87:0f:f3:10:9c:40:0e:
3f:df:36:43:60:a6:89:f4:20:a0:6a:6d:1d:44:08:
05:de:48:7d:29:5f:60:24:ea:73:56:dd:21:d1:9c:
01:98:5d:eb:fe:6f:4b:b8:50:1c:fb:08:8d:40:70:
73:36:63:7b:1f:24:8a:0c:08:19:c9:c1:fe:e6:48:
3c:7a:90:e2:21:30:55:2a:52:fa:e5:ee:9d:ee:23:
3e:cc:a8:3d:5d:53:d1:5e:a8:5d:d1:a8:b2:ea:60:
b1:90:2b:75:f2:70:e6:3d:42:2d:eb:c9:02:b6:e5:
74:37:72:44:3d:4d:14:52:8e:51:c4:86:2c:a5:bd:
e2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1D:1D:05:30:AA:CD:CB:37:63:82:54:7A:8C:DC:63:E0:77:9F:C2
X509v3 Authority Key Identifier:
keyid:68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e3:9d:a6:a4:cc:c8:88:5c:8e:ee:50:96:a7:50:2a:5a:f7:
56:a8:3f:06:d4:39:bb:57:e6:06:d8:77:55:f1:3e:6e:4d:40:
9d:78:d7:8a:2d:3f:3a:af:80:2f:fe:f2:de:34:38:45:dd:cd:
00:27:39:d5:45:61:cf:4c:41:05:fb:c2:26:d6:5f:8d:41:93:
d8:15:0e:ef:35:34:5c:bb:d8:cc:60:70:28:5c:e3:08:53:b0:
2e:89:ed:20:1d:5d:7c:16:e2:92:a5:21:00:ac:1e:90:18:63:
b6:d2:e5:1e:f0:0a:27:f9:5e:cd:61:fe:73:62:06:aa:e1:94:
5c:44:bc:f0:1c:d9:03:53:79:e4:7a:96:0e:87:0c:82:85:70:
5c:4d:fc:52:42:e1:2f:18:24:7b:3c:70:cf:be:15:15:71:81:
65:be:d5:af:63:f6:9e:32:77:f0:1d:15:1c:5e:74:b0:d3:8e:
7b:a5:55:37:ee:08:6b:fc:60:b7:5e:48:c3:6b:5a:b9:de:6f:
62:68:fd:cd:25:32:4d:34:92:19:50:0b:5c:01:7f:19:b8:8e:
be:a6:7e:49:13:8e:78:20:ac:ab:39:cf:7c:18:a8:fd:8d:b9:
ac:6d:6d:66:7a:b5:62:52:aa:0c:08:9c:24:8c:fe:a1:95:3c:
77:7c:d3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:43:26 2026 by rpki-client