Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier: 32zXdf58ZRwqfGuX1jIvRAjcllpYwY6rnxLe/NU5g98=
Subject key identifier: 05:62:9D:9F:FF:65:32:97:85:A3:3F:B7:C2:6A:29:AB:4B:62:AC:7D
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial: 01A0DD601803E528404232D86E5D999165CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number: 0930
Signing time: Sat 26 Sep 2026 11:00:57 +0000
Manifest this update: Sat 26 Sep 2026 11:00:57 +0000
Manifest next update: Sun 27 Sep 2026 11:00:57 +0000
Files and hashes: 1: 5JP3EEY5bnKcvSQg_d_0jzLOuso.roa (hash: nHWCClQokNNDpIYjG0ERFvivPbSmCZ+n7ir/zAxywpM=)
2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: RBZDYI62rYOENvDp3NqEoNtLlvv7AQo/mNtiENl5vtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:60:18:03:e5:28:40:42:32:d8:6e:5d:99:91:65:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Validity
Not Before: Sep 26 11:00:57 2026 GMT
Not After : Sep 27 11:00:57 2026 GMT
Subject: CN=05629d9fff65329785a33fb7c26a29ab4b62ac7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:19:47:65:80:7c:1a:59:e6:ae:c5:04:fe:a5:
6c:ed:28:3c:e7:25:10:4d:1e:89:cb:dc:e8:90:77:
16:fd:7c:28:00:8f:02:c7:38:7f:f5:98:ce:ff:c1:
bd:1c:64:fe:77:41:de:4e:fd:4c:c0:3c:0d:df:da:
1c:b3:3d:b9:ed:7b:58:7d:ef:a3:93:b2:29:10:67:
48:68:25:48:f6:81:5a:7a:3a:18:d4:2f:bd:e9:6a:
7a:62:a8:bd:49:53:f7:fe:b0:f3:9c:5d:02:72:19:
5e:50:7a:e1:1a:89:51:5d:0e:9b:a1:52:40:6a:93:
50:ee:78:a0:6e:b9:bb:d9:95:5d:55:10:55:3f:ed:
fd:82:c4:ae:e3:6b:d7:45:0d:d8:7e:aa:d1:c8:e9:
e4:f3:b8:fb:67:bd:f9:a2:14:62:47:42:af:e4:c7:
50:64:17:42:8c:bd:f7:e1:8b:60:ff:3c:05:6a:40:
21:4e:aa:ea:3c:0a:54:58:e0:3d:ae:b1:4d:cf:b3:
51:6e:37:d0:c8:63:91:1e:2a:d6:77:fa:34:3e:11:
ec:bd:af:53:70:65:59:28:e4:61:74:ed:83:4a:d2:
b8:32:69:b2:12:ba:0b:e6:a0:b0:7b:81:2f:79:c2:
0f:82:32:97:0d:93:db:3d:64:4a:bf:c1:b7:d5:ef:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:62:9D:9F:FF:65:32:97:85:A3:3F:B7:C2:6A:29:AB:4B:62:AC:7D
X509v3 Authority Key Identifier:
keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:76:62:f6:3d:8a:80:ef:8a:45:68:6f:6e:90:8b:e3:9a:4d:
be:84:5e:d9:bc:4b:a9:2e:ad:f5:8b:b0:98:45:12:82:92:5b:
a7:ae:0f:ef:79:0f:83:0b:8e:48:49:fe:5f:f7:ba:16:4c:98:
12:9c:b7:44:01:a9:85:77:45:ba:55:fe:a4:51:e0:7e:54:8e:
d7:0f:e3:a1:d8:39:fa:69:02:c5:f0:9e:65:4e:83:c8:ed:c0:
29:a2:11:83:3c:46:6d:8f:2e:23:d5:1d:86:e7:c7:55:45:d4:
ec:dd:04:c3:67:0a:3e:e0:24:22:d9:4f:41:c0:28:24:49:85:
f4:1b:d7:40:07:96:61:5c:e8:8d:82:5c:de:c2:0e:d8:dc:44:
38:ee:ae:0e:ea:4e:e8:af:60:40:ff:4d:36:ed:21:13:77:07:
5c:16:d3:87:f2:d0:4f:27:e4:f0:9f:7b:4a:f2:43:59:e8:e0:
b6:af:fd:59:7d:98:e6:d8:a3:fa:ab:32:b1:df:d7:d0:22:f6:
59:86:a9:9b:4a:9c:17:68:7a:af:7a:24:12:33:b8:e7:f8:62:
58:2a:e4:04:41:1a:af:35:77:85:d0:4c:0a:b7:41:f4:e1:f4:
08:32:ea:63:9d:91:cb:22:87:ff:6c:7d:ea:f7:76:e6:08:9e:
c9:da:26:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdYBgD5ShAQjLYbl2ZkWXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZjgzZTJhMzQxNDVhZDQ3ZTBjYzJiM2M3OWZjNjMxMmJh
ZTJjNzEwHhcNMjYwOTI2MTEwMDU3WhcNMjYwOTI3MTEwMDU3WjAzMTEwLwYDVQQD
EygwNTYyOWQ5ZmZmNjUzMjk3ODVhMzNmYjdjMjZhMjlhYjRiNjJhYzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BlHZYB8GlnmrsUE/qVs7Sg85yUQ
TR6Jy9zokHcW/XwoAI8Cxzh/9ZjO/8G9HGT+d0HeTv1MwDwN39ocsz257XtYfe+j
k7IpEGdIaCVI9oFaejoY1C+96Wp6Yqi9SVP3/rDznF0CchleUHrhGolRXQ6boVJA
apNQ7nigbrm72ZVdVRBVP+39gsSu42vXRQ3YfqrRyOnk87j7Z735ohRiR0Kv5MdQ
ZBdCjL334Ytg/zwFakAhTqrqPApUWOA9rrFNz7NRbjfQyGORHirWd/o0PhHsva9T
cGVZKORhdO2DStK4MmmyEroL5qCwe4EvecIPgjKXDZPbPWRKv8G31e/pEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVinZ//ZTKXhaM/t8JqKatLYqx9MB8GA1UdIwQY
MBaAFGj4Pio0FFrUfgzCs8efxjErrixxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQt
NzkyODAyYzQzOTI1LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQtNzkyODAyYzQzOTI1
LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXZi9j2K
gO+KRWhvbpCL45pNvoRe2bxLqS6t9YuwmEUSgpJbp64P73kPgwuOSEn+X/e6FkyY
Epy3RAGphXdFulX+pFHgflSO1w/jodg5+mkCxfCeZU6DyO3AKaIRgzxGbY8uI9Ud
hufHVUXU7N0Ew2cKPuAkItlPQcAoJEmF9BvXQAeWYVzojYJc3sIO2NxEOO6uDupO
6K9gQP9NNu0hE3cHXBbTh/LQTyfk8J97SvJDWejgtq/9WX2Y5tij+qsysd/X0CL2
WYapm0qcF2h6r3okEjO45/hiWCrkBEEarzV3hdBMCrdB9OH0CDLqY52RyyKH/2x9
6vd25gieydomaA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:49:59 2026 by rpki-client