Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json)
Hash identifier: 6vPZJnuYhgNfwI70hKL8odIbJ2PAunthyqyxKyxJ6gg=
Subject key identifier: 5A:9F:96:7E:E3:A3:12:3E:65:9C:C7:B5:EF:2C:D9:08:3E:5B:DF:AE
Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Certificate serial: 01A0CE9141DDD2D8BF2E730870F896B90245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
Manifest number: 049E
Signing time: Wed 23 Sep 2026 14:00:20 +0000
Manifest this update: Wed 23 Sep 2026 14:00:20 +0000
Manifest next update: Thu 24 Sep 2026 14:00:20 +0000
Files and hashes: 1: IEEGCXxK9NZZAyvgooGe_0krRwA.roa (hash: ufaDl8VQDgum3aim68/T7UN4n3wx+m74Tx5ctK6jZmk=)
2: XHzhckAnu87gDfunEM3sM2fHJc4.roa (hash: J4SR1s2pClNQQ3/S6LW+95K5vqFvopp0j499gt2QsWY=)
3: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: AxUq3tbbBZo+kYnEkO922SfpTIweDZRIveQakTSbsB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:41:dd:d2:d8:bf:2e:73:08:70:f8:96:b9:02:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Validity
Not Before: Sep 23 14:00:20 2026 GMT
Not After : Sep 24 14:00:20 2026 GMT
Subject: CN=5a9f967ee3a3123e659cc7b5ef2cd9083e5bdfae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:b1:ec:60:91:96:98:95:8b:00:a8:2a:55:
c1:ad:54:46:01:3a:dc:d0:44:61:2e:e1:7e:cb:0a:
13:d6:d3:42:5e:2b:89:12:39:ae:64:f8:4b:65:5f:
f2:fd:f3:b3:cf:06:6a:89:a6:3c:88:5e:d6:04:25:
20:d1:d4:69:1d:98:41:45:5b:1d:dc:3b:76:4a:b0:
e3:15:8f:43:21:fd:8b:0c:27:43:2f:a0:23:b4:4c:
27:81:87:b4:3e:e7:5b:4d:7c:f5:75:b7:4d:cd:d9:
ef:e0:2b:de:30:5b:c1:b9:c2:e8:8e:c2:9a:28:4b:
79:c3:7e:61:1f:03:cc:55:d9:59:9b:19:df:8e:0f:
ee:e1:75:98:70:30:75:c1:77:ec:21:4d:c6:80:88:
bb:59:c8:30:75:cb:e6:66:d6:f6:74:4e:70:a2:1d:
f1:ec:28:cc:29:b0:32:fa:ca:b6:64:b9:80:f3:0c:
43:39:9d:3d:20:2d:3f:dd:29:09:f0:b9:29:d8:04:
fd:e2:b6:cb:02:eb:13:31:be:12:08:61:a7:96:9b:
04:b5:e8:83:29:af:63:5b:ee:f3:30:65:ac:e1:36:
85:f6:04:a1:2c:bd:10:c2:31:65:19:f3:bb:be:bb:
9c:50:68:6e:93:ee:ce:5f:83:66:98:aa:40:d8:32:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9F:96:7E:E3:A3:12:3E:65:9C:C7:B5:EF:2C:D9:08:3E:5B:DF:AE
X509v3 Authority Key Identifier:
keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:47:ba:c4:39:5d:9e:b2:d2:48:47:96:68:4b:4b:f4:c7:d8:
82:6e:15:a5:37:dd:b9:e0:ef:82:f3:18:49:b0:9d:9e:fe:b3:
53:cc:1e:c5:b9:2a:a0:2a:17:7d:df:f3:94:48:66:0a:40:38:
37:e9:a7:40:02:01:13:8d:05:ef:a4:10:9a:a5:c2:db:a9:73:
14:ee:6c:e8:ff:a1:de:7b:e7:79:65:35:db:7d:cd:2a:d7:b5:
4e:d3:05:c2:17:c8:80:d8:a7:85:98:70:8a:9a:0b:5a:cf:c4:
d3:29:6a:61:f5:e2:dd:c5:cb:c7:63:05:75:55:ce:d5:b6:00:
52:04:a5:67:b2:bf:68:3d:e8:fe:ef:37:3e:e9:1b:be:75:4a:
2c:9a:a1:c0:6d:ae:eb:0c:22:e2:aa:1c:30:57:7d:f8:ae:c0:
24:29:74:9f:9f:6a:94:94:91:d9:e6:e9:fa:75:8c:97:60:3e:
4f:f7:3d:c4:58:7b:15:82:fb:38:ae:57:8b:ee:1b:0e:69:74:
fc:36:e5:43:d9:a7:b3:8a:6e:12:9a:57:df:f8:8a:55:3c:d3:
76:78:95:94:0f:fd:8f:2b:89:19:c9:6b:20:cb:36:79:ce:17:
a4:70:94:94:38:49:62:67:74:50:8e:d3:81:3a:ef:5c:e5:13:
5f:12:eb:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkUHd0ti/LnMIcPiWuQJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZjQzYjViYmNjNDk2MjgwNmVhOTMyMmVjMjkyZTliNjZk
ZGNjYzUwHhcNMjYwOTIzMTQwMDIwWhcNMjYwOTI0MTQwMDIwWjAzMTEwLwYDVQQD
Eyg1YTlmOTY3ZWUzYTMxMjNlNjU5Y2M3YjVlZjJjZDkwODNlNWJkZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKax7GCRlpiViwCoKlXBrVRGATrc
0ERhLuF+ywoT1tNCXiuJEjmuZPhLZV/y/fOzzwZqiaY8iF7WBCUg0dRpHZhBRVsd
3Dt2SrDjFY9DIf2LDCdDL6AjtEwngYe0PudbTXz1dbdNzdnv4CveMFvBucLojsKa
KEt5w35hHwPMVdlZmxnfjg/u4XWYcDB1wXfsIU3GgIi7WcgwdcvmZtb2dE5woh3x
7CjMKbAy+sq2ZLmA8wxDOZ09IC0/3SkJ8Lkp2AT94rbLAusTMb4SCGGnlpsEteiD
Ka9jW+7zMGWs4TaF9gShLL0QwjFlGfO7vrucUGhuk+7OX4NmmKpA2DIJsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqfln7joxI+ZZzHte8s2Qg+W9+uMB8GA1UdIwQY
MBaAFGj0O1u8xJYoBuqTIuwpLptm3czFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wNDZmZmUtMDVlYi00YzhjLTg1NDUt
MDI0ODNlNjQ4MmNiLzEvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wNDZmZmUtMDVlYi00YzhjLTg1NDUtMDI0ODNlNjQ4MmNi
LzEvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANke6xDld
nrLSSEeWaEtL9MfYgm4VpTfdueDvgvMYSbCdnv6zU8wexbkqoCoXfd/zlEhmCkA4
N+mnQAIBE40F76QQmqXC26lzFO5s6P+h3nvneWU1233NKte1TtMFwhfIgNinhZhw
ipoLWs/E0ylqYfXi3cXLx2MFdVXO1bYAUgSlZ7K/aD3o/u83PukbvnVKLJqhwG2u
6wwi4qocMFd9+K7AJCl0n59qlJSR2ebp+nWMl2A+T/c9xFh7FYL7OK5Xi+4bDml0
/DblQ9mns4puEppX3/iKVTzTdniVlA/9jyuJGclrIMs2ec4XpHCUlDhJYmd0UI7T
gTrvXOUTXxLrKw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:57:58 2026 by rpki-client