Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json)
Hash identifier: fHd0gGwS7li9aGeZjKBrlBBYx/AtfSORwzrymrgAUqs=
Subject key identifier: B1:AD:FB:D5:29:C7:7B:34:D2:E9:CC:A8:3D:28:43:0F:5C:AB:03:18
Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Certificate serial: 01A1DEDE627833B21E74E6F68DAE556A53E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
Manifest number: 052B
Signing time: Sun 15 Nov 2026 11:01:18 +0000
Manifest this update: Sun 15 Nov 2026 11:01:18 +0000
Manifest next update: Mon 16 Nov 2026 11:01:18 +0000
Files and hashes: 1: IEEGCXxK9NZZAyvgooGe_0krRwA.roa (hash: ufaDl8VQDgum3aim68/T7UN4n3wx+m74Tx5ctK6jZmk=)
2: XHzhckAnu87gDfunEM3sM2fHJc4.roa (hash: J4SR1s2pClNQQ3/S6LW+95K5vqFvopp0j499gt2QsWY=)
3: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: 7gua5Er/I4XRaw4xXM+RNKP8/GMJ8RO3/csMd304bPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:62:78:33:b2:1e:74:e6:f6:8d:ae:55:6a:53:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Validity
Not Before: Nov 15 11:01:18 2026 GMT
Not After : Nov 16 11:01:18 2026 GMT
Subject: CN=b1adfbd529c77b34d2e9cca83d28430f5cab0318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:23:45:43:94:f1:03:ed:45:62:94:94:e9:
17:22:01:1a:7a:78:a8:36:ea:e4:6a:28:e9:12:cf:
18:f6:a4:f5:b5:cb:e3:37:a1:f4:8b:cd:e5:43:0d:
80:62:30:7d:c1:68:0b:9b:3d:df:3a:07:a8:17:a4:
44:9c:c3:e2:5e:25:fd:39:1d:60:23:8e:b7:64:4e:
b5:a2:fc:55:fc:2a:6f:c0:4d:e6:5e:4c:ef:39:26:
e4:bb:b8:d9:48:a1:27:09:1c:96:b1:cc:df:60:e0:
62:c3:86:63:81:59:c6:61:c8:01:a4:37:9d:eb:13:
97:98:d7:ab:a1:b8:93:00:fe:4d:53:18:9f:40:cb:
2f:08:28:32:a3:86:1f:b9:be:35:6b:8c:3c:be:0d:
99:c2:7a:a0:00:ae:6d:78:4f:20:fc:69:91:93:23:
c8:2b:73:7c:b7:ed:68:7d:6c:2e:e7:47:53:d0:96:
b2:46:07:2f:6b:f9:13:95:77:24:75:d4:09:98:c2:
5d:b9:a4:f6:71:6f:ee:c8:3e:49:2d:30:92:ab:03:
45:5f:d9:4d:7d:ff:74:6f:b6:38:43:11:4c:50:10:
8d:ae:ac:d8:dd:2d:90:3f:c6:b7:6a:cb:13:19:cd:
a3:10:83:d5:6c:d6:37:db:67:4a:05:42:87:cf:1c:
e0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AD:FB:D5:29:C7:7B:34:D2:E9:CC:A8:3D:28:43:0F:5C:AB:03:18
X509v3 Authority Key Identifier:
keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:76:c5:fa:5b:56:76:6a:d8:d5:6a:9b:cb:86:c5:a5:69:c1:
7f:43:f3:cb:38:c8:fc:db:fe:9d:36:ed:8f:a4:07:b3:b6:7a:
8b:5c:ee:01:d5:48:26:a5:9f:a5:6f:e1:ef:ba:66:9e:5c:f0:
99:d7:ca:66:2a:53:d4:85:db:b5:27:74:5d:66:ec:c3:bd:14:
80:70:0d:6c:3f:fc:29:0f:62:bf:4a:1a:35:e2:cb:a2:23:6d:
a7:63:af:05:55:0f:9e:82:39:41:ea:c2:0a:13:68:65:51:3a:
01:ab:09:0b:69:ca:70:e8:23:e7:50:d8:3a:35:3c:69:4e:86:
7e:9c:b6:2d:21:05:a5:d6:35:41:ce:50:d7:35:d6:d3:ab:d3:
6c:09:49:b8:8e:43:4d:61:7e:80:56:d8:84:3d:23:d8:1a:ee:
4e:a1:0c:03:63:1f:3d:7e:3e:43:5b:7f:31:83:54:b9:20:af:
50:b6:48:a0:55:19:a7:76:90:ec:1e:e7:22:81:5e:79:0e:f9:
0b:3d:8a:91:df:3a:ee:09:76:49:f1:0e:90:d0:65:ce:a2:d4:
26:b4:d0:16:3d:a8:4e:27:c6:fa:11:cb:6b:d9:83:c5:c0:37:
0d:38:22:19:74:e1:47:0d:09:29:9c:9f:0f:73:bb:2f:61:b1:
5b:98:37:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:20:34 2026 by rpki-client