Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
File: apWkz28PDDLNPf6Yh2ImC_zbpn4.mft (raw, json)
Hash identifier: N6dJY9yaf0/w0sHE1POo++4A8WqSZZi6VNfffyptrz0=
Subject key identifier: E7:DE:18:70:DA:2E:EA:D0:7B:6D:13:7E:0D:7F:3C:CF:C6:1E:86:68
Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
Certificate issuer: /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Certificate serial: 019D2A3C21F07463AEA02B751EE27D70B288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
Manifest number: 05DA
Signing time: Thu 26 Mar 2026 13:01:16 +0000
Manifest this update: Thu 26 Mar 2026 13:01:16 +0000
Manifest next update: Fri 27 Mar 2026 13:01:16 +0000
Files and hashes: 1: BKpTCMfaKLw7yMMu4I6xltN6R7Y.roa (hash: GRV0cRwAqNgjNvn/FF2Y105789sE37bG6GFfvU+/74s=)
2: apWkz28PDDLNPf6Yh2ImC_zbpn4.crl (hash: 59Wb/ff1JYHuGlKwHHDQ2P4QX/kNEIHmcXyDI7P2zBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:21:f0:74:63:ae:a0:2b:75:1e:e2:7d:70:b2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Validity
Not Before: Mar 26 13:01:16 2026 GMT
Not After : Mar 27 13:01:16 2026 GMT
Subject: CN=e7de1870da2eead07b6d137e0d7f3ccfc61e8668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:ce:ed:dc:be:a5:c4:62:b7:f4:bc:7c:01:
04:55:37:ce:ca:d6:eb:a0:18:e1:4d:3e:20:88:61:
53:87:43:92:dd:f5:77:f0:e0:aa:c8:68:9a:c5:0b:
ac:b6:03:01:16:56:4d:1a:b1:60:54:e4:7d:da:d7:
ac:a3:00:d3:2f:23:67:b8:ab:ce:e4:7d:db:6d:99:
35:53:99:14:63:12:d8:c9:56:58:31:cf:1c:e4:9d:
78:12:f8:32:b7:8f:91:92:7a:23:4e:1b:0a:ef:78:
f4:38:a3:ea:77:cc:20:89:a0:d3:40:10:11:da:c0:
27:aa:35:2f:59:3e:76:b0:0c:2e:c7:3c:69:dd:9a:
02:0e:f6:6e:7a:f9:6a:0c:9d:f6:58:68:0c:a0:ce:
f5:87:96:d3:c9:37:9d:a3:a6:30:0b:7d:0a:d8:19:
e5:dc:5d:38:87:22:09:fa:77:53:21:b0:14:2f:fa:
d9:ec:75:9c:32:88:ed:cb:f4:4c:8b:20:e8:8b:52:
9e:e4:3b:af:29:8c:cf:f7:e9:02:f6:13:8b:fb:58:
31:f4:1f:30:91:0a:80:45:dc:21:99:11:64:22:91:
9a:3f:77:ee:fe:c3:45:21:8a:5e:26:ab:09:d8:4f:
26:88:ac:78:a5:a3:c9:a0:5f:ea:fa:4a:39:99:06:
f8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DE:18:70:DA:2E:EA:D0:7B:6D:13:7E:0D:7F:3C:CF:C6:1E:86:68
X509v3 Authority Key Identifier:
keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b6:fe:38:e7:e7:f3:8b:a0:e4:b8:b3:46:28:c1:21:b8:ed:
e1:17:18:5c:21:a5:55:dc:5a:20:51:d6:49:e1:8a:f6:da:0a:
ea:1e:ef:15:5b:d9:bd:1d:93:2d:1c:d8:c2:29:32:31:3d:ef:
4b:d0:2e:7a:53:5e:8b:45:24:c9:43:aa:f1:27:fd:71:52:7e:
94:4a:f7:13:81:e7:a1:b8:e2:29:90:5f:1e:c9:4a:58:20:c4:
a6:ab:e0:35:38:70:68:9e:ce:13:ad:ee:ec:95:c9:45:e5:0f:
d4:8b:87:ec:7f:69:e4:cf:ea:61:01:dc:f9:3c:88:7d:37:00:
85:7f:62:42:7b:9d:e1:38:41:1e:54:46:3a:88:ab:cc:6d:48:
dd:13:a1:80:22:c6:12:73:b2:2c:27:27:82:9d:4b:a6:09:ed:
c6:00:eb:53:0f:7e:b5:ec:dd:48:30:fe:39:3f:fd:73:62:d4:
7a:b4:32:33:ef:df:ca:b1:10:f6:8d:91:96:2f:4c:e5:52:8d:
43:b3:57:95:ef:3f:81:6d:e3:97:34:ef:75:bf:6c:1b:ec:ac:
ed:f3:70:51:06:b7:a0:5a:9e:76:5a:2b:5d:84:a0:c4:72:7e:
55:0b:f6:c3:8a:fd:50:c0:f5:03:ac:4c:d6:a1:de:e0:e1:ec:
4b:33:d6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:15 2026 by rpki-client