Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json)
Hash identifier: 5W7rC4DM1Ep19HTDtREqBk+SlXsybi1V3ZTDE3ezhmU=
Subject key identifier: 3A:55:EC:52:E2:7A:AA:31:BE:D4:FA:57:AF:2D:76:DC:80:70:CE:63
Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Certificate serial: 019F93241B25F81421031C5154DF8B3B57BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
Manifest number: 03FA
Signing time: Fri 24 Jul 2026 08:00:44 +0000
Manifest this update: Fri 24 Jul 2026 08:00:44 +0000
Manifest next update: Sat 25 Jul 2026 08:00:44 +0000
Files and hashes: 1: A5tB2m_AKkFH2MRYLSZP1qj6r7Y.roa (hash: JU4CZpqlBacShwjyBoLo9X21T9K67+NvyzH3SwXTo+Y=)
2: XHzhckAnu87gDfunEM3sM2fHJc4.roa (hash: J4SR1s2pClNQQ3/S6LW+95K5vqFvopp0j499gt2QsWY=)
3: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: KfsUZtvO3fww3oK1ZSeTVQhRE+bcLX/ALX49twNAdyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:1b:25:f8:14:21:03:1c:51:54:df:8b:3b:57:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Validity
Not Before: Jul 24 08:00:44 2026 GMT
Not After : Jul 25 08:00:44 2026 GMT
Subject: CN=3a55ec52e27aaa31bed4fa57af2d76dc8070ce63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:7d:ac:3b:57:7c:2a:c2:67:3e:a9:4a:88:
58:91:76:db:1f:b8:8f:76:90:9f:65:c5:5a:c1:ea:
80:74:83:ee:a6:ed:bb:95:5f:4f:4d:e0:5c:6f:72:
bf:f8:ae:43:7c:0f:33:5b:15:d7:86:8e:10:5d:00:
f0:0e:cd:25:07:4c:33:1f:a9:b9:ba:28:81:19:c4:
c1:44:58:c2:75:a5:b4:7c:7b:41:fb:23:ee:73:3c:
f3:10:44:cf:82:fd:96:2b:14:a2:d7:47:26:27:41:
c3:4b:15:0c:9d:7d:8a:84:c1:6e:4e:74:38:7f:44:
13:db:7e:eb:4b:b9:d9:a9:02:06:76:e5:fa:77:14:
cc:4b:97:dc:03:57:fa:6b:db:a1:3d:63:dd:b8:aa:
9b:e0:5a:b4:f7:98:53:67:54:63:94:60:f0:b7:67:
de:51:23:53:df:30:cf:aa:1a:99:aa:86:d2:8f:a8:
5e:38:b9:11:f8:b9:86:3b:f3:42:9d:67:51:eb:19:
4e:b5:b7:ee:e6:62:73:89:00:94:2e:2b:19:eb:16:
da:20:5e:91:b8:0a:75:da:d8:5b:4c:00:7d:22:42:
b9:2f:1f:b3:69:ff:37:ad:9d:a6:64:20:7c:0c:be:
9e:d2:36:7b:05:20:55:92:3a:8f:83:20:34:65:b4:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:55:EC:52:E2:7A:AA:31:BE:D4:FA:57:AF:2D:76:DC:80:70:CE:63
X509v3 Authority Key Identifier:
keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:35:70:53:b5:8d:13:ad:9d:c7:77:14:e7:0f:9c:2d:61:5b:
48:bf:11:69:10:80:82:6f:da:d9:2d:5d:49:eb:a3:51:84:60:
3a:4c:5e:a6:6f:93:25:e7:71:9e:c5:98:69:ff:29:1c:97:f9:
e9:26:a5:aa:b4:f4:24:84:a8:3d:6c:1a:9d:f1:eb:bc:cd:f9:
e3:e0:50:7a:93:73:8a:f1:03:ef:81:a6:ee:72:d3:fb:81:c8:
b3:ec:30:0a:5c:b6:5b:ac:b7:be:43:c6:fd:0d:bb:67:1d:c4:
78:ce:a2:d9:e4:ce:66:b2:01:d2:66:7d:a2:25:9a:4e:6a:81:
3d:0c:5b:99:b6:20:78:c3:64:30:b5:75:2b:a2:f7:22:cc:49:
c0:f5:b9:cc:f5:6e:37:f2:4e:87:1f:bc:5b:80:55:91:26:9f:
64:ba:e0:3d:d1:16:59:c8:ac:39:3d:35:fb:73:dc:f9:4a:66:
87:87:3d:cb:a0:0c:0f:38:be:52:80:f2:72:94:8f:94:af:83:
51:48:57:c4:e9:a8:67:2e:97:72:54:a3:d5:26:82:82:fe:0e:
f2:df:75:4e:e0:e3:c0:fc:a5:65:e3:62:97:5f:07:52:ae:7b:
90:a1:fa:86:db:4a:a1:23:1b:5f:d3:8b:60:69:fa:f7:35:f4:
27:18:54:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJBsl+BQhAxxRVN+LO1e/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZjQzYjViYmNjNDk2MjgwNmVhOTMyMmVjMjkyZTliNjZk
ZGNjYzUwHhcNMjYwNzI0MDgwMDQ0WhcNMjYwNzI1MDgwMDQ0WjAzMTEwLwYDVQQD
EygzYTU1ZWM1MmUyN2FhYTMxYmVkNGZhNTdhZjJkNzZkYzgwNzBjZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw799rDtXfCrCZz6pSohYkXbbH7iP
dpCfZcVaweqAdIPupu27lV9PTeBcb3K/+K5DfA8zWxXXho4QXQDwDs0lB0wzH6m5
uiiBGcTBRFjCdaW0fHtB+yPuczzzEETPgv2WKxSi10cmJ0HDSxUMnX2KhMFuTnQ4
f0QT237rS7nZqQIGduX6dxTMS5fcA1f6a9uhPWPduKqb4Fq095hTZ1RjlGDwt2fe
USNT3zDPqhqZqobSj6heOLkR+LmGO/NCnWdR6xlOtbfu5mJziQCULisZ6xbaIF6R
uAp12thbTAB9IkK5Lx+zaf83rZ2mZCB8DL6e0jZ7BSBVkjqPgyA0ZbRGmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpV7FLieqoxvtT6V68tdtyAcM5jMB8GA1UdIwQY
MBaAFGj0O1u8xJYoBuqTIuwpLptm3czFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wNDZmZmUtMDVlYi00YzhjLTg1NDUt
MDI0ODNlNjQ4MmNiLzEvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wNDZmZmUtMDVlYi00YzhjLTg1NDUtMDI0ODNlNjQ4MmNi
LzEvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDVwU7WN
E62dx3cU5w+cLWFbSL8RaRCAgm/a2S1dSeujUYRgOkxepm+TJedxnsWYaf8pHJf5
6SalqrT0JISoPWwanfHrvM354+BQepNzivED74Gm7nLT+4HIs+wwCly2W6y3vkPG
/Q27Zx3EeM6i2eTOZrIB0mZ9oiWaTmqBPQxbmbYgeMNkMLV1K6L3IsxJwPW5zPVu
N/JOhx+8W4BVkSafZLrgPdEWWcisOT01+3Pc+Upmh4c9y6AMDzi+UoDycpSPlK+D
UUhXxOmoZy6XclSj1SaCgv4O8t91TuDjwPylZeNil18HUq57kKH6httKoSMbX9OL
YGn69zX0JxhUcA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:51 2026 by rpki-client