Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
File: aPYGg7N3JXQn279uzjXixYWjsB0.mft (raw, json)
Hash identifier: Hkxx6dV4l0pRJhGVRaNg/lTwmHyl0fWAuX0twIc9lCs=
Subject key identifier: F3:12:9B:30:CE:4F:28:A9:7A:E9:2F:51:6A:4B:E3:92:9E:59:20:80
Authority key identifier: 68:F6:06:83:B3:77:25:74:27:DB:BF:6E:CE:35:E2:C5:85:A3:B0:1D
Certificate issuer: /CN=68f60683b377257427dbbf6ece35e2c585a3b01d
Certificate serial: 01A0D9F1E720D6247A80297539CEAEFB2335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 19:01:44 +0000
Manifest this update: Fri 25 Sep 2026 19:01:44 +0000
Manifest next update: Sat 26 Sep 2026 19:01:44 +0000
Files and hashes: 1: aPYGg7N3JXQn279uzjXixYWjsB0.crl (hash: DJ8gtC1N3eIVDeh8YddytymUrBg91gDKiSb/5l8jR40=)
2: eJ3f1i44Rqh5dEICPulbHl4WkkI.roa (hash: kZed20xL2+OJp4rVcGTuqnAX+7hPge7JicJ6LEk/ItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:e7:20:d6:24:7a:80:29:75:39:ce:ae:fb:23:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f60683b377257427dbbf6ece35e2c585a3b01d
Validity
Not Before: Sep 25 19:01:44 2026 GMT
Not After : Sep 26 19:01:44 2026 GMT
Subject: CN=f3129b30ce4f28a97ae92f516a4be3929e592080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:a8:2f:75:2f:87:fb:63:e0:d2:28:c0:86:
ab:3b:65:50:28:5b:a3:87:07:f8:6f:f0:c2:a1:2e:
21:c8:23:63:00:ae:fa:fd:0f:b1:e2:c1:9f:1f:0b:
24:23:c5:86:1a:6e:50:1b:17:a3:4b:e3:bc:87:3a:
14:9c:4e:dc:c1:43:19:6d:90:9d:af:80:55:e9:fc:
01:c1:de:e1:97:52:1b:bc:03:7e:29:11:9e:70:c5:
03:53:2e:ab:a7:22:74:21:f7:72:f1:af:b0:7f:26:
d1:5e:f6:e9:89:63:06:a2:38:3a:b7:a0:6d:91:c0:
8d:9e:1f:6e:85:d3:fe:d1:ef:0c:60:7b:4f:46:68:
f4:ce:0f:7d:e4:8f:3c:cf:07:00:3f:e3:37:38:da:
0f:3f:67:1c:47:bb:04:14:7b:f9:40:74:d6:d9:7c:
78:44:14:81:dc:e2:00:9f:ba:8b:90:d7:03:42:69:
54:30:ab:90:71:e4:66:7f:ed:fa:4c:a2:33:38:8a:
ad:52:e9:6a:54:ec:45:db:22:7f:7f:5a:de:9a:10:
0f:c7:9d:40:76:56:94:ce:99:6f:ca:f8:37:62:23:
9e:7a:8c:f0:0f:e9:d4:7a:0f:d2:32:4a:5f:00:e7:
cd:ad:c6:b4:62:bf:d7:f9:41:33:14:96:c6:51:67:
42:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:12:9B:30:CE:4F:28:A9:7A:E9:2F:51:6A:4B:E3:92:9E:59:20:80
X509v3 Authority Key Identifier:
keyid:68:F6:06:83:B3:77:25:74:27:DB:BF:6E:CE:35:E2:C5:85:A3:B0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ae:50:fa:5f:35:43:4b:ed:c0:ed:c3:f3:2a:cb:c7:7f:2e:
9f:d1:90:6b:ac:4e:4a:83:b3:6a:d9:5f:d6:fc:68:40:4a:25:
8b:c7:69:62:63:84:e1:7f:6f:3c:c4:77:ac:65:b9:7f:94:8c:
37:d9:2d:36:69:c5:c9:65:32:87:b6:e4:b8:3e:73:b6:7a:16:
0d:0c:4f:e7:d3:7c:aa:69:82:f5:81:c6:04:95:08:cc:22:c1:
70:ec:b9:70:fa:a8:bf:04:d9:c2:9e:d2:2d:41:7f:01:3e:e4:
74:68:60:d0:4a:bb:66:62:ec:d3:31:65:d9:b6:aa:b7:02:75:
58:48:ed:64:01:03:62:69:09:00:09:1c:76:d8:57:e2:6a:76:
5a:28:77:f9:b4:d5:d0:05:53:8d:3d:ba:0a:56:09:45:e2:12:
c7:94:75:55:7a:09:75:d7:3f:bb:d0:b8:e3:a7:71:4f:24:b6:
fa:e4:49:06:2d:c5:41:57:d5:01:9f:0e:e8:ba:75:2d:ea:2c:
b8:f3:6b:99:d1:21:f3:d8:a6:5c:9f:11:89:d6:06:02:8f:eb:
66:88:2f:fd:c1:55:21:f9:ee:65:96:a9:a5:95:99:a9:be:fc:
94:11:8c:0c:b9:78:76:e1:2a:58:78:97:fa:f4:17:c7:34:8c:
59:6f:90:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:57:38 2026 by rpki-client