Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
File: aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft (raw, json)
Hash identifier: +kO24GRa5s+rUa6g7tq8/U+YBvn0/+Z9MKLnYPTGogs=
Subject key identifier: 35:4E:CD:8C:02:65:72:A1:B6:F3:2F:3E:93:D4:F1:76:2E:59:E4:CB
Authority key identifier: 68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
Certificate issuer: /CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Certificate serial: 01A13C00D0601CC74EB02F774BAFEAC83796
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
Manifest number: 19A2
Signing time: Wed 14 Oct 2026 20:00:48 +0000
Manifest this update: Wed 14 Oct 2026 20:00:48 +0000
Manifest next update: Thu 15 Oct 2026 20:00:48 +0000
Files and hashes: 1: aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl (hash: uQsBRshrRS0bc9Uy/m+3DixZ2YDqnLf/AtJwd77QupU=)
2: gNhszUNFjUvnmp6uYZywKw0VK4Q.roa (hash: OoYbjhXKEH09k93nIljEgaEwB00MnQM3qMLjic/Ifxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:00:d0:60:1c:c7:4e:b0:2f:77:4b:af:ea:c8:37:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Validity
Not Before: Oct 14 20:00:48 2026 GMT
Not After : Oct 15 20:00:48 2026 GMT
Subject: CN=354ecd8c026572a1b6f32f3e93d4f1762e59e4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:4c:a2:65:98:1c:2a:d2:58:ed:8b:2c:85:
26:4c:16:29:c7:5e:0e:5f:39:b3:d4:15:2c:47:6d:
d5:c0:f8:80:aa:f0:e0:15:28:76:02:42:bc:51:2a:
8e:9c:9d:88:b6:32:61:8c:db:db:5d:c4:ed:0c:f6:
99:e5:a4:a1:08:3d:e3:e0:e4:42:a0:4c:3a:28:41:
cf:3d:eb:63:8c:10:5e:30:f2:0a:cd:48:05:eb:03:
82:e5:28:7e:20:f9:03:26:c2:d5:68:32:c9:21:7d:
41:1e:ac:37:8b:f5:8c:46:d1:75:97:71:aa:65:fb:
5f:de:0d:49:7c:ec:80:cc:cc:a8:72:3c:16:07:34:
d5:68:35:b4:0e:2c:46:a6:51:09:52:21:64:f5:8e:
37:51:55:b3:c5:cf:4d:c5:3d:d7:30:8f:9b:dc:3c:
1c:72:ea:36:24:45:d4:26:6a:55:1a:8a:fe:23:aa:
01:8b:4b:9f:8e:51:ad:04:89:62:f7:d9:07:c2:1f:
c8:9c:69:df:a5:dd:38:02:75:a4:ef:67:b4:e8:90:
77:88:fe:66:05:b9:45:7d:43:92:70:5e:8a:ad:d6:
7f:90:ef:fd:53:6b:de:f6:62:9b:98:43:7a:b1:0b:
06:88:c5:5f:44:14:86:24:8b:bc:43:62:8c:23:c0:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4E:CD:8C:02:65:72:A1:B6:F3:2F:3E:93:D4:F1:76:2E:59:E4:CB
X509v3 Authority Key Identifier:
keyid:68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:88:0d:49:7a:dc:eb:a5:11:e5:06:1b:af:1c:f7:1b:62:8f:
44:a1:bc:f0:f0:41:e8:ce:47:d5:e8:45:07:97:8b:36:bf:5a:
13:65:2e:e5:5c:5f:a4:3c:33:a2:e6:b1:f4:85:81:be:91:40:
38:1d:63:90:0f:ed:96:14:fe:31:52:5c:2f:9f:77:c9:6b:ef:
3e:a9:0e:75:86:e1:dd:f6:e3:62:6b:f1:a4:57:9c:e6:41:63:
58:f5:29:18:c7:8d:69:f1:a7:97:86:7a:6c:92:2c:21:28:13:
c9:e3:40:b3:29:98:24:9a:0c:8c:74:b9:e6:1a:e2:b5:fa:90:
ca:e4:9b:44:c4:15:80:2a:39:fc:3e:93:55:c3:10:ce:b4:ec:
ed:f4:5d:74:25:ab:a5:66:c8:9b:f1:39:20:fc:a9:10:82:65:
ca:5f:a6:2e:dc:43:87:6f:60:79:c8:da:27:a2:00:08:4a:d9:
dc:58:94:a1:15:c8:db:fb:c4:cc:a6:08:bb:84:a4:41:43:f5:
63:d1:76:72:a8:e3:98:52:5a:05:8c:0f:a3:76:5f:fe:c3:e8:
18:7c:07:55:73:0c:79:ae:e4:db:f2:51:2d:b0:29:b5:f7:cd:
07:92:96:88:0d:59:cc:c9:d6:ad:eb:70:93:48:30:03:70:b8:
65:6b:14:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:23:22 2026 by rpki-client