Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier: +z6Doj0Pd1HiGbiUq2d7J2l/h/Ay2FVdkUYFIp9ypg8=
Subject key identifier: CB:DF:B8:41:4B:87:6F:84:79:73:B7:54:A5:76:A1:4D:43:C4:D8:4E
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial: 019F95123D351B5F851AE819E70D8A583C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number: 0886
Signing time: Fri 24 Jul 2026 17:00:28 +0000
Manifest this update: Fri 24 Jul 2026 17:00:28 +0000
Manifest next update: Sat 25 Jul 2026 17:00:28 +0000
Files and hashes: 1: 5JP3EEY5bnKcvSQg_d_0jzLOuso.roa (hash: nHWCClQokNNDpIYjG0ERFvivPbSmCZ+n7ir/zAxywpM=)
2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: IgTsuuMoKwroii4uiuH1rlnVPiYqzFiQQtiQ5ZSvXVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:3d:35:1b:5f:85:1a:e8:19:e7:0d:8a:58:3c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Validity
Not Before: Jul 24 17:00:28 2026 GMT
Not After : Jul 25 17:00:28 2026 GMT
Subject: CN=cbdfb8414b876f847973b754a576a14d43c4d84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:56:53:f7:4e:93:c1:81:e3:db:58:e4:3e:
f8:1a:74:8a:43:c1:52:59:19:a1:26:82:bd:89:bf:
fb:7f:21:a6:60:e2:7e:3b:3f:ec:23:c7:2d:7f:d2:
76:12:52:da:48:d6:53:54:c1:72:db:9a:30:23:e2:
a1:a5:52:0d:c3:b0:9e:28:c0:83:ba:66:1b:ca:30:
43:4e:bb:c8:c2:ee:e5:b1:35:76:23:e1:9f:9f:fe:
f0:1a:bc:d7:56:71:c9:5d:e2:60:ef:b3:f1:37:12:
5c:42:e1:a1:35:ce:14:b3:59:49:56:05:03:ff:af:
5d:a3:0d:8f:bb:c2:65:4e:7a:ec:71:fa:34:46:d4:
ed:bf:83:94:c7:d6:32:51:e6:a5:88:cf:7e:2a:ae:
b6:1e:ae:35:ee:1b:10:d2:07:56:09:97:fa:7f:11:
4c:38:cb:e4:36:83:a9:a8:c2:e6:fa:63:81:d6:1e:
e8:e2:7b:50:9a:3c:5e:b1:a1:26:3a:0e:c5:78:e7:
30:70:95:13:18:27:09:42:4c:a5:58:18:0d:03:55:
c3:28:35:4d:cd:8c:af:26:bc:b9:75:41:f1:c9:b3:
f4:b7:36:90:b0:ac:b9:28:46:6c:95:8c:2c:79:9a:
1f:6f:43:5a:ad:ef:9b:78:ca:5f:8b:aa:ee:0b:57:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DF:B8:41:4B:87:6F:84:79:73:B7:54:A5:76:A1:4D:43:C4:D8:4E
X509v3 Authority Key Identifier:
keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:fd:69:13:5f:cd:66:46:3c:ba:d6:5e:17:49:a7:30:63:d0:
6e:95:f2:6b:e0:4d:20:9c:de:c7:bc:1d:a6:7c:a1:ad:d2:c0:
cc:8b:fd:88:d3:ac:f4:2d:d3:d9:b8:ce:44:75:0f:9c:4f:e9:
01:d9:3e:29:d4:fa:c5:30:86:bd:ae:11:dd:fb:a4:2e:f1:67:
88:a8:af:23:92:78:9a:cb:8e:98:65:db:de:9d:ad:a0:fb:ec:
d6:92:d5:28:84:fb:56:1c:66:a5:73:c4:95:9d:52:70:d2:e5:
2a:ec:bd:99:39:ec:c9:63:b5:98:81:5b:b6:84:ef:73:7d:65:
08:c0:2e:10:10:3f:b4:7d:d5:e2:0a:02:83:20:b7:cf:33:c6:
77:ac:7a:f4:66:24:e0:87:1b:67:29:62:0e:5b:e5:c0:e9:9e:
0e:0f:2b:4b:43:43:e6:e2:26:a4:81:00:d1:4b:5b:a9:4b:1f:
ec:63:37:8d:33:8a:1c:73:18:89:c6:a3:b0:c7:25:8f:76:f7:
f5:e1:ac:98:83:52:e0:29:83:16:bd:b7:a0:21:ee:f6:85:4e:
11:8e:08:6a:34:66:e1:a8:0d:3c:a9:e7:ec:60:82:d7:34:56:
38:05:1a:6f:c4:6a:02:67:ae:6f:0a:6d:8d:40:e8:11:72:38:
1b:d2:6d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:20 2026 by rpki-client