Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json)
Hash identifier: xvQESavIZ9MiOqqK5n0Qbf1hY6A8e4QfSboCIjQu/cQ=
Subject key identifier: 1F:41:E8:B7:16:CA:B7:E8:79:F6:84:EB:16:35:F9:D3:4C:74:DA:0A
Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Certificate serial: 019F9136070A9214F73B244084D4FA89265C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
Manifest number: 03F9
Signing time: Thu 23 Jul 2026 23:01:04 +0000
Manifest this update: Thu 23 Jul 2026 23:01:04 +0000
Manifest next update: Fri 24 Jul 2026 23:01:04 +0000
Files and hashes: 1: A5tB2m_AKkFH2MRYLSZP1qj6r7Y.roa (hash: JU4CZpqlBacShwjyBoLo9X21T9K67+NvyzH3SwXTo+Y=)
2: XHzhckAnu87gDfunEM3sM2fHJc4.roa (hash: J4SR1s2pClNQQ3/S6LW+95K5vqFvopp0j499gt2QsWY=)
3: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: x87P8ExK7LgEjV1No8meVpPPsxEbQBpySiBW1EzmHKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:36:07:0a:92:14:f7:3b:24:40:84:d4:fa:89:26:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Validity
Not Before: Jul 23 23:01:04 2026 GMT
Not After : Jul 24 23:01:04 2026 GMT
Subject: CN=1f41e8b716cab7e879f684eb1635f9d34c74da0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2d:27:94:6e:12:de:56:2c:7e:be:53:c7:16:
a0:10:85:10:a5:20:94:d3:d2:f5:86:04:6f:a4:58:
ef:5a:41:8e:23:8d:8a:e1:2c:36:67:6e:9d:bf:d8:
41:28:c2:53:2a:c4:0a:2c:3a:3d:b1:45:19:eb:de:
9e:8a:9e:ec:5d:87:19:5d:d0:32:de:db:2d:1d:c5:
a7:ff:9e:4c:41:04:9c:6d:af:6e:ea:a6:e4:06:01:
de:d3:b8:0c:cb:e6:ac:24:5b:e3:ad:a6:a6:62:08:
00:03:7e:93:47:2e:34:56:00:e6:5f:ba:0b:8a:42:
a6:42:90:5b:90:b0:cd:09:6e:f7:ed:89:90:cb:5e:
5d:85:e4:9e:c2:75:5b:dc:4c:a6:c4:8d:f4:fe:b7:
64:51:db:a1:73:1d:fe:8e:cf:b2:35:a9:45:97:3f:
33:2f:be:38:95:60:23:b5:8b:be:5b:a9:8a:28:46:
b1:ea:6a:52:8a:41:bd:07:b2:a7:61:e8:b6:5c:0d:
08:72:fe:71:18:b9:7f:60:38:cd:dd:0b:df:46:91:
30:5a:a0:40:42:d3:f1:8a:7e:54:a7:a5:41:79:29:
fa:82:29:ea:bc:34:03:48:2f:e7:7b:0d:88:5b:d9:
30:b6:76:13:4b:ae:8e:cd:36:71:c0:24:2d:2e:e3:
3e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:41:E8:B7:16:CA:B7:E8:79:F6:84:EB:16:35:F9:D3:4C:74:DA:0A
X509v3 Authority Key Identifier:
keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8f:ef:79:25:3b:e8:73:c2:3d:66:5a:f5:1f:58:99:8a:05:
5e:f3:18:50:41:ca:2c:cc:e3:b9:e5:0a:99:34:6b:56:cd:62:
4a:c8:01:b7:fb:3f:20:72:62:ee:07:65:9b:cc:ef:b6:f4:6c:
2e:b5:ec:f6:dd:4e:34:82:b0:c3:7e:f9:8e:d0:97:5d:36:52:
7f:1e:66:8c:26:db:01:f5:9d:2e:26:80:56:0a:b6:60:97:8c:
4b:ff:55:76:cc:04:27:de:4c:41:1a:3a:75:e1:53:dd:a4:87:
0e:3e:6f:6c:3d:a9:b7:52:a9:eb:39:d2:f1:73:ba:fe:31:63:
de:ad:5d:ef:ef:9c:97:04:d3:cb:4e:27:24:1c:b8:fa:74:bd:
4a:0e:4c:ea:9d:54:3f:d4:50:88:56:16:26:47:e0:24:97:82:
01:36:9f:77:b0:4c:08:25:25:82:45:06:c3:59:2e:05:c7:e1:
87:32:c0:b7:49:03:f9:62:ea:64:7b:0b:1b:d4:df:69:54:85:
08:52:51:0a:aa:82:9a:63:3d:87:88:48:7c:fb:aa:fd:92:c6:
2a:ac:51:5d:13:52:b9:f8:48:47:65:82:d4:6a:37:c0:8c:3d:
b8:67:c0:fc:28:65:27:5d:c2:ba:17:53:d3:c4:1b:bc:61:ae:
b3:fb:19:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:26:03 2026 by rpki-client