Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
File: aPYGg7N3JXQn279uzjXixYWjsB0.mft (raw, json)
Hash identifier: EMCWjOFGwNBTr8fSXPPCsBH/Tqg2PHoA+WffyVCmYhI=
Subject key identifier: 60:ED:CF:A5:D1:3D:E6:04:EC:AF:2B:9C:80:62:C8:E0:E1:95:1A:B4
Authority key identifier: 68:F6:06:83:B3:77:25:74:27:DB:BF:6E:CE:35:E2:C5:85:A3:B0:1D
Certificate issuer: /CN=68f60683b377257427dbbf6ece35e2c585a3b01d
Certificate serial: 019F93928AF46FA37CF1D17AA2FBBAFB8F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 10:01:22 +0000
Manifest this update: Fri 24 Jul 2026 10:01:22 +0000
Manifest next update: Sat 25 Jul 2026 10:01:22 +0000
Files and hashes: 1: aPYGg7N3JXQn279uzjXixYWjsB0.crl (hash: edh4KnUnzyLk2YAkaKYszK2fTPnyO4sE4ehRhpr8/qY=)
2: eJ3f1i44Rqh5dEICPulbHl4WkkI.roa (hash: kZed20xL2+OJp4rVcGTuqnAX+7hPge7JicJ6LEk/ItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:8a:f4:6f:a3:7c:f1:d1:7a:a2:fb:ba:fb:8f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f60683b377257427dbbf6ece35e2c585a3b01d
Validity
Not Before: Jul 24 10:01:22 2026 GMT
Not After : Jul 25 10:01:22 2026 GMT
Subject: CN=60edcfa5d13de604ecaf2b9c8062c8e0e1951ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:64:08:48:a3:5c:01:80:d7:51:af:d6:a6:
71:5b:a0:c7:01:ca:10:d2:41:31:b3:43:17:2d:50:
fe:74:67:df:df:b5:49:29:01:7c:a5:bf:e3:04:a3:
57:ec:b2:89:83:27:f6:0c:b9:f2:75:ad:d1:10:1d:
34:bd:01:49:b7:cd:12:04:1f:85:37:36:bb:d7:98:
a0:77:43:b2:c5:03:61:04:be:d1:d6:0b:09:4f:e2:
29:e5:b7:7c:2c:42:1b:35:44:c0:0f:0b:be:f2:a3:
bd:cb:ae:b3:f3:33:6a:07:f6:ac:68:34:91:26:bb:
d8:64:5d:b9:0d:39:d0:06:bb:f4:d7:50:72:61:01:
af:9f:5b:fe:4f:b2:fa:4e:99:4b:cf:9b:0e:23:4a:
82:36:1f:f1:79:5e:74:75:cf:90:76:7e:82:c8:60:
8c:d6:75:e1:37:7a:90:63:89:8d:08:7a:b4:67:15:
b5:f7:e4:93:2e:7c:d2:b1:1a:26:ea:5a:31:c1:2b:
a3:03:3f:72:5e:29:5a:51:52:72:06:b3:6f:e3:4e:
a2:3a:94:84:86:02:50:14:62:6e:cc:8a:d9:75:0b:
52:0d:33:ba:87:6b:19:b2:d0:07:97:b4:ae:ae:ab:
34:88:e4:db:d0:d4:a0:20:39:58:a3:94:b8:f5:30:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:ED:CF:A5:D1:3D:E6:04:EC:AF:2B:9C:80:62:C8:E0:E1:95:1A:B4
X509v3 Authority Key Identifier:
keyid:68:F6:06:83:B3:77:25:74:27:DB:BF:6E:CE:35:E2:C5:85:A3:B0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c2:fd:43:e3:85:85:c5:b6:8a:e7:88:b0:dc:f9:ed:e9:33:
73:bc:c3:1f:4f:84:e5:33:58:6e:1f:d3:d5:1d:7d:a6:0c:33:
be:4a:d9:10:fe:78:24:e9:3f:fc:cd:6d:fb:b0:aa:27:c7:35:
a3:44:17:7a:0f:b4:3b:e2:0a:49:cc:51:9e:43:b8:26:3e:a9:
c4:41:e7:ae:9b:e0:ea:a7:ee:33:59:15:f0:16:12:7b:a3:0b:
36:bb:7b:05:c3:19:52:46:ac:d4:2f:59:24:c5:b8:47:72:cf:
eb:5d:65:6b:71:38:2d:8a:d2:12:d4:81:23:7a:43:aa:52:a8:
9b:ac:97:19:77:99:a2:ea:8a:35:f4:bb:66:f2:ed:80:8c:69:
86:eb:ab:f2:ed:29:d2:eb:e8:91:a4:30:6f:e5:e4:29:c3:8e:
2c:03:b7:85:b7:5f:10:a9:f3:e7:36:c6:99:05:ca:5c:a7:4d:
67:cc:17:10:4d:05:e9:62:95:07:a5:b4:81:85:b3:cf:3a:1f:
f9:d4:c0:0e:33:0b:07:b6:7b:6f:18:76:ea:9c:a6:d3:6c:5e:
a2:6d:f2:06:d3:d6:df:06:9f:bf:04:89:14:d9:fd:42:6b:91:
97:2d:26:1d:45:cb:0b:b6:97:7a:eb:59:4a:e8:ac:c4:1b:ae:
9b:77:48:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:55:12 2026 by rpki-client