Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
File: aP4jOevgl_9pirMOW2PswhoqI6s.mft (raw, json)
Hash identifier: LIvLuL/rcuiPUTYAbaBQejjEUAmjwhylLndqUkC3IJE=
Subject key identifier: F1:15:05:F0:CE:7A:24:17:02:68:69:8C:30:21:0F:AA:E2:0C:69:EF
Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
Certificate issuer: /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Certificate serial: 01A0CBC792343CB9EB014FCD64FD1C6D88C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
Manifest number: 0934
Signing time: Wed 23 Sep 2026 01:00:48 +0000
Manifest this update: Wed 23 Sep 2026 01:00:48 +0000
Manifest next update: Thu 24 Sep 2026 01:00:48 +0000
Files and hashes: 1: ZVtTxijOLWFcJSO6efo4DmD_3no.roa (hash: EQQUPUJE6DPaF7qwNTT9ymoPg6GQS/wPlAo+XhsXQps=)
2: aP4jOevgl_9pirMOW2PswhoqI6s.crl (hash: 8Wth4Jkno0LZS6mgO9ntnndkhdcKqQDmEAeOcg16oQQ=)
3: pe6SimYP6o2XDFFmpY-wO0p4kd4.roa (hash: DO3dJUNt2bxLV7u0cSp3tB8Jr2qZvvBLvtswnAFN4BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:92:34:3c:b9:eb:01:4f:cd:64:fd:1c:6d:88:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Validity
Not Before: Sep 23 01:00:48 2026 GMT
Not After : Sep 24 01:00:48 2026 GMT
Subject: CN=f11505f0ce7a24170268698c30210faae20c69ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:ae:c0:f0:ad:07:8d:58:0f:a4:ea:9e:a6:
c5:9f:b6:21:55:ea:6a:7c:ef:44:3b:d5:71:8d:76:
61:72:25:22:ea:50:fd:4c:f7:9a:23:f5:a6:98:97:
70:4a:af:3f:ae:32:1b:31:a7:2d:79:85:ef:fe:26:
38:a7:f2:d5:af:56:57:c3:ab:f5:71:07:79:14:fb:
51:f6:5c:a6:71:bc:d4:f9:d8:ae:e2:c6:0e:40:b5:
95:e7:e0:b0:5e:35:e4:a2:b2:28:ba:27:90:96:6d:
dc:ad:e0:97:3f:b9:c2:0f:c1:a3:a8:0f:3a:5e:ae:
2f:cc:2a:bd:f6:2e:cc:95:c3:52:cd:38:87:ae:fa:
d7:d3:aa:6f:52:02:5f:c1:98:b3:4e:ed:8c:01:86:
dc:7a:fe:6a:65:4a:50:6f:9c:28:da:e8:87:91:2c:
ee:87:09:e4:1b:3c:e1:a0:90:e9:17:78:20:0d:03:
67:17:10:67:51:5e:5b:55:7a:e3:19:77:b3:33:21:
ac:87:ae:bc:82:ca:a2:b4:5c:0b:02:d3:82:13:7b:
16:3a:a2:97:af:a4:27:1b:92:f0:97:0e:a9:70:fe:
d7:e1:a7:2f:15:98:4a:db:84:98:0a:11:82:25:20:
ad:46:3f:71:5c:41:30:dc:d5:83:1c:24:b4:0e:cf:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:15:05:F0:CE:7A:24:17:02:68:69:8C:30:21:0F:AA:E2:0C:69:EF
X509v3 Authority Key Identifier:
keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d3:3b:30:fb:e6:b7:c5:cf:64:fb:f4:ec:35:48:39:15:b3:
c8:e5:8c:80:21:0b:e4:85:7f:ae:59:d7:13:0b:13:e9:9d:27:
8f:f4:8e:78:c2:c2:5f:eb:e1:1d:c9:31:a9:ca:1b:91:66:2e:
bb:b1:d6:95:67:19:b4:73:bc:82:96:e3:ff:01:e9:ba:f9:9a:
c8:8a:3b:31:1f:35:63:4b:13:56:fa:84:97:ef:88:ce:8a:97:
ee:60:28:11:d7:16:85:10:11:1f:30:ba:56:5a:bd:3f:bb:61:
82:1b:f9:60:c0:55:10:8b:6e:7a:a5:f5:d1:36:01:f0:b5:87:
af:d5:58:49:12:cf:c7:70:79:f8:89:5c:b6:18:90:6c:c2:d3:
f5:30:89:99:e9:57:b2:1a:b0:27:07:e7:37:bf:b9:26:93:76:
da:a6:29:6d:f4:ea:8a:d9:81:e2:31:30:ef:39:d3:72:39:37:
58:32:a7:2c:67:43:91:a7:5e:8e:96:b7:4b:78:27:ec:c5:2b:
38:c6:d4:d3:2c:4b:58:f8:09:64:bd:50:4b:c0:ad:2a:7c:45:
92:fd:ca:e9:5b:d4:b8:bf:ac:3c:74:5c:8d:f9:e8:dd:c4:fc:
4a:fb:27:03:32:56:f7:da:00:86:ec:3b:04:82:1a:22:ca:d3:
6a:f8:cb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:59:45 2026 by rpki-client