Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier: WOeTyd4MyLwptx+Okt+fyRVDJttkTCzfTewuv9bY4oA=
Subject key identifier: 4A:7D:36:32:F2:D6:DE:54:AA:1C:CE:B8:D7:AD:4E:48:7E:23:52:C4
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial: 019E1E6C11454BC4485005C1138B5BA1501E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number: 07C4
Signing time: Tue 12 May 2026 23:00:59 +0000
Manifest this update: Tue 12 May 2026 23:00:59 +0000
Manifest next update: Wed 13 May 2026 23:00:59 +0000
Files and hashes: 1: 5JP3EEY5bnKcvSQg_d_0jzLOuso.roa (hash: nHWCClQokNNDpIYjG0ERFvivPbSmCZ+n7ir/zAxywpM=)
2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: 4KFqLqV1O7F9oYBTv+Yc28FMpti+DpUPiJ8Ht/jq+bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:11:45:4b:c4:48:50:05:c1:13:8b:5b:a1:50:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Validity
Not Before: May 12 23:00:59 2026 GMT
Not After : May 13 23:00:59 2026 GMT
Subject: CN=4a7d3632f2d6de54aa1cceb8d7ad4e487e2352c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:eb:9a:0e:7b:68:d3:2a:c8:44:fc:b3:e0:
cd:a8:af:63:85:9e:12:52:fb:c9:97:ee:10:a5:55:
11:16:21:7c:cb:c8:0b:b9:66:b5:bd:d6:55:44:a4:
bb:6a:f7:cf:69:0a:57:c2:18:86:2f:a2:b8:0d:e5:
78:09:a1:04:cf:71:3f:08:65:07:1f:78:3f:90:02:
6c:e7:dd:c3:4d:71:f2:65:3a:43:7e:6d:bf:0d:f2:
08:de:4f:0c:62:b9:b6:87:0b:43:e8:1a:b2:ae:07:
5d:14:56:97:c5:b7:33:76:44:c0:a3:ee:c9:3b:af:
f4:a7:84:2f:5f:d9:67:7d:1f:42:24:67:0e:5e:d8:
7b:3a:a3:d8:c8:73:1a:b7:0d:2b:2e:15:f9:5d:3c:
3a:34:18:58:9a:23:78:14:b0:f2:26:e5:74:d5:b0:
8b:28:9d:ad:40:75:7c:c5:10:8d:67:bc:9c:91:99:
c4:85:d2:1d:f7:10:91:5e:14:b6:99:30:ab:a0:17:
d5:1f:d0:e6:ed:50:86:48:9b:55:6d:01:8c:36:18:
93:e8:c1:fc:64:bc:1b:39:0d:70:60:29:f3:c9:f3:
21:50:62:88:ac:76:16:8e:d4:8f:c3:63:43:47:45:
d1:3b:46:43:10:7b:66:69:ac:25:07:a4:ac:c7:dd:
93:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7D:36:32:F2:D6:DE:54:AA:1C:CE:B8:D7:AD:4E:48:7E:23:52:C4
X509v3 Authority Key Identifier:
keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a9:dd:d5:97:e4:39:91:d0:30:fc:d1:93:06:65:49:8d:8a:
ca:9a:fe:bf:7b:93:6f:f9:02:96:98:37:1f:70:51:69:e7:0c:
91:ca:cf:20:83:bf:7d:8c:88:20:46:c6:89:cd:5e:ed:f6:b0:
ba:2f:c0:56:79:a9:63:48:c8:0d:35:77:e0:2d:fc:3c:1d:20:
ff:1e:07:1d:af:33:58:d6:be:e2:51:67:05:46:d2:93:b2:54:
cd:08:d1:8e:cc:94:80:f3:f2:45:dd:91:dc:c8:41:d4:44:61:
c2:96:c1:fc:f3:ec:52:c9:31:1e:d3:06:c8:76:ee:2b:d1:29:
98:83:97:3c:6a:ad:68:05:cf:41:ec:53:53:ac:8f:1e:b9:fd:
80:ed:d8:a2:41:c2:d3:c2:7c:04:26:d5:12:e7:1d:95:f6:ec:
b2:3b:25:8c:37:fd:1d:5b:df:9c:45:c4:8d:4f:89:d3:73:b9:
68:26:d3:d3:0a:91:72:78:f3:3c:eb:34:70:33:1e:f6:9c:f7:
37:95:a9:bc:6c:20:81:fd:81:e0:8f:af:7f:06:7e:d3:0b:85:
fa:9a:e8:4a:fd:38:5f:72:25:df:9b:24:c2:bf:94:7a:b4:35:
9a:2d:49:c1:3a:5f:0d:2d:01:73:9a:00:08:ea:f9:d2:67:19:
dd:d0:be:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:57 2026 by rpki-client