Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json)
Hash identifier: TeF78B82era77fd/dcWfOLkF28r3N0yZVwMMTejOXF0=
Subject key identifier: 4F:78:24:29:4D:6E:19:6B:E7:4D:BD:14:8F:C7:63:BB:6D:9D:74:36
Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Certificate serial: 01A0D26DF7C57528D1BA22B177B5C0B8C5E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
Manifest number: 04A0
Signing time: Thu 24 Sep 2026 08:00:17 +0000
Manifest this update: Thu 24 Sep 2026 08:00:17 +0000
Manifest next update: Fri 25 Sep 2026 08:00:17 +0000
Files and hashes: 1: IEEGCXxK9NZZAyvgooGe_0krRwA.roa (hash: ufaDl8VQDgum3aim68/T7UN4n3wx+m74Tx5ctK6jZmk=)
2: XHzhckAnu87gDfunEM3sM2fHJc4.roa (hash: J4SR1s2pClNQQ3/S6LW+95K5vqFvopp0j499gt2QsWY=)
3: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: Ip3hLlXZTIX+wiE/v4Lq9LjfyNPGpdQAgB8LXAYj0Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6d:f7:c5:75:28:d1:ba:22:b1:77:b5:c0:b8:c5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Validity
Not Before: Sep 24 08:00:17 2026 GMT
Not After : Sep 25 08:00:17 2026 GMT
Subject: CN=4f7824294d6e196be74dbd148fc763bb6d9d7436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:62:d0:f0:a8:25:1f:3a:bf:9f:fd:a7:f4:
0c:8f:4e:82:39:11:27:58:94:74:02:27:70:20:4d:
f7:9c:82:55:4a:3e:c9:c6:de:3d:96:3c:85:9d:46:
e6:80:12:7b:96:ef:ca:40:c3:88:91:fd:50:2b:8f:
4b:65:b8:8d:5c:42:c2:de:d6:8e:ec:6b:ff:b1:78:
71:84:b0:3f:7b:13:1d:14:6c:9c:07:c9:11:c7:c6:
51:c2:78:d9:20:c4:d2:a8:87:42:39:15:13:aa:92:
9f:2f:cb:6b:34:cc:4e:87:2d:38:8e:f4:31:c5:d3:
bc:fe:1e:a5:c3:cb:5d:ef:21:4d:b0:20:64:82:58:
01:64:a6:36:77:bd:96:35:a8:90:68:f5:49:16:d8:
30:57:e8:13:52:bb:70:d1:0d:bf:04:30:1a:2b:5c:
4c:7e:99:23:15:48:ee:87:de:68:f4:7e:f9:6c:90:
36:ea:0d:ea:36:3a:b0:e4:ba:db:b1:f7:b7:a5:aa:
e4:9a:8a:0f:50:dc:cf:9d:df:9b:19:f6:44:0a:67:
d0:e9:32:72:f7:71:a0:13:c6:b2:06:9b:50:55:6d:
41:cf:09:05:48:dc:67:ae:45:d2:21:58:32:8d:7f:
6e:16:59:c8:a8:1a:21:3c:dd:6e:9a:a7:a0:bb:95:
fe:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:78:24:29:4D:6E:19:6B:E7:4D:BD:14:8F:C7:63:BB:6D:9D:74:36
X509v3 Authority Key Identifier:
keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:26:6b:a5:31:6d:3e:bc:e1:12:52:8f:8a:36:43:cb:f0:7b:
89:bc:27:15:67:4c:4e:22:7a:7d:91:3c:57:b2:0c:01:e2:02:
36:f6:11:3b:af:70:f2:cb:d5:cc:56:93:72:ce:6b:96:f8:5a:
4d:c4:db:dc:50:0e:35:d8:04:fc:5f:68:51:a3:f8:1d:43:bb:
bf:78:8e:50:07:93:49:d0:07:53:d1:8e:73:46:07:3c:f5:c4:
09:c2:ce:8b:d3:b3:7c:71:61:31:09:58:f2:38:4c:8b:43:db:
f3:d6:a9:65:35:12:b5:c2:5a:54:52:02:86:3a:a0:19:5a:b0:
60:5e:45:78:d5:b9:42:30:3a:c4:0e:7b:e5:1e:14:14:4a:73:
47:c8:ba:9a:53:87:d1:13:ae:41:28:82:a0:4d:c9:8f:56:45:
92:19:7f:53:71:98:91:0c:87:58:5c:d2:88:59:ee:f8:48:82:
e3:8b:42:da:c9:0f:c7:0f:1d:f7:91:13:7d:db:b1:10:e5:3b:
24:58:57:3f:45:8e:3f:14:02:40:f1:7e:ba:03:37:25:fa:be:
72:85:52:a5:77:a1:38:9b:bf:d9:0e:69:4d:ae:8e:3a:a8:37:
a6:83:85:77:04:a9:84:0b:83:89:15:ea:bc:16:0d:32:c3:db:
00:93:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:23:12 2026 by rpki-client