Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier: b/eHdTCgeU9HFQFp6j4OoET3BpUQhku3gsuSIjr3BEM=
Subject key identifier: 83:31:BE:94:B9:80:83:FB:B8:F6:00:D1:CD:F8:AD:38:35:20:0E:CB
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial: 019D2929A1A6E8A2DE804EEB2F17D87BBAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number: 0745
Signing time: Thu 26 Mar 2026 08:01:27 +0000
Manifest this update: Thu 26 Mar 2026 08:01:27 +0000
Manifest next update: Fri 27 Mar 2026 08:01:27 +0000
Files and hashes: 1: 5JP3EEY5bnKcvSQg_d_0jzLOuso.roa (hash: nHWCClQokNNDpIYjG0ERFvivPbSmCZ+n7ir/zAxywpM=)
2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: kFJsEW2ySZTXyFsiwviXeM87kw54kZPB+9HpHtR3sQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a1:a6:e8:a2:de:80:4e:eb:2f:17:d8:7b:ba:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Validity
Not Before: Mar 26 08:01:27 2026 GMT
Not After : Mar 27 08:01:27 2026 GMT
Subject: CN=8331be94b98083fbb8f600d1cdf8ad3835200ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:0d:e0:54:65:e6:ce:b6:d3:14:10:17:e0:
d9:ad:e3:1d:33:e8:19:6d:aa:08:08:90:50:d1:9d:
2d:91:07:a1:a1:dd:38:2d:ce:fc:c7:5a:b9:c7:f2:
72:c4:ac:96:6a:02:f3:31:6c:1f:95:bc:05:32:a4:
d9:9e:ff:aa:33:b2:0c:42:5d:cc:e0:3b:39:38:1f:
89:17:39:14:66:2c:eb:6a:37:0c:d6:5a:e5:c6:80:
a0:68:a3:77:04:ee:56:82:a0:7d:54:e2:f1:04:b1:
f3:35:a0:f3:5a:44:3d:99:f9:b6:ac:8b:a7:91:b2:
be:1e:73:ae:40:06:ea:b3:44:16:5e:7f:29:d3:b6:
da:4b:32:b7:8a:a5:21:a3:94:b2:f4:f4:06:39:9b:
ad:97:07:73:3b:34:13:36:43:3b:81:32:7a:58:79:
1a:99:36:24:f9:d8:d3:99:af:86:e7:5d:3c:39:0c:
99:8f:4c:da:2a:a7:96:20:4c:9e:71:5b:83:84:6f:
27:e8:87:be:d4:23:3b:2b:58:6a:77:55:91:bf:aa:
04:30:9e:6a:a0:ca:b3:57:18:02:75:a0:74:91:1e:
97:8b:bd:74:09:5e:6d:11:17:14:dd:be:59:2c:2c:
b8:e1:b5:35:fd:07:cf:ae:48:08:9c:8b:66:de:e3:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:31:BE:94:B9:80:83:FB:B8:F6:00:D1:CD:F8:AD:38:35:20:0E:CB
X509v3 Authority Key Identifier:
keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:87:7d:15:f5:4d:9c:1b:5c:67:b2:94:b0:24:e3:61:0f:3a:
d8:b1:1a:0a:39:21:50:19:db:df:ac:65:54:66:bf:95:4f:79:
6d:c9:8f:ce:50:83:5a:1e:4b:3b:d1:bb:65:4a:57:63:53:a6:
43:92:ff:78:3e:c1:16:62:ba:b7:8b:a9:38:aa:df:27:f5:50:
12:82:20:f1:f9:b6:b4:84:b5:d9:af:ee:39:26:eb:3e:6b:58:
de:96:28:e7:d0:93:fc:97:7d:53:10:89:cd:87:f8:88:03:87:
2e:02:33:ea:ab:dc:26:90:16:cf:a1:d0:f5:cb:34:f9:de:90:
0d:a9:3d:7a:e1:c0:aa:81:9c:7d:22:bb:4f:8c:5b:5f:36:3d:
36:7c:f1:f8:a5:77:7e:c8:51:91:f5:f0:00:c4:00:fb:3e:48:
35:47:f4:2f:59:e7:a8:3f:a8:7f:21:e7:10:7c:04:24:d3:89:
da:f4:0f:64:54:e3:68:77:1b:f9:82:da:fd:3f:20:90:c8:a8:
bd:50:86:0e:45:60:0f:f5:ff:12:26:13:1e:d9:87:e0:46:69:
41:d9:e6:31:70:5a:e4:b1:a3:cb:98:8c:a9:53:e4:6d:b0:30:
3c:ed:40:d1:e1:20:74:95:08:50:36:5c:61:81:2c:82:4d:1b:
d6:fc:d7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:01:55 2026 by rpki-client