Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
File: aP4jOevgl_9pirMOW2PswhoqI6s.mft (raw, json)
Hash identifier: XBfV8+6oYM9XHdLYMN6ZTxD6VQe4PzC5au1TD+NkxtM=
Subject key identifier: 8D:90:E2:49:11:1B:CD:7E:5F:0B:8E:F1:9E:2A:D6:BE:B1:2C:BD:9C
Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
Certificate issuer: /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Certificate serial: 019E1E35E1ED4688440D0CEDA2617DB62C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
Manifest number: 07CF
Signing time: Tue 12 May 2026 22:01:47 +0000
Manifest this update: Tue 12 May 2026 22:01:47 +0000
Manifest next update: Wed 13 May 2026 22:01:47 +0000
Files and hashes: 1: aP4jOevgl_9pirMOW2PswhoqI6s.crl (hash: 9fjkAajFur6ZsTudrMuMCoEn7bwo8wjAYz0LWqOfCRg=)
2: qK1qsq6SydRQsph0pcOe7ljWypU.roa (hash: GQsQePKWU4sUFb7047+SEDBy9k0n6p9UubN0V6aD1Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:e1:ed:46:88:44:0d:0c:ed:a2:61:7d:b6:2c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Validity
Not Before: May 12 22:01:47 2026 GMT
Not After : May 13 22:01:47 2026 GMT
Subject: CN=8d90e249111bcd7e5f0b8ef19e2ad6beb12cbd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3d:bd:c9:74:2c:27:36:07:84:87:eb:80:29:
8b:dd:2f:8d:25:92:70:64:32:27:cf:e7:af:e4:17:
6d:d0:cb:26:29:ed:9c:59:01:6f:37:77:3b:80:ce:
09:17:04:7f:af:cd:43:24:88:df:29:a0:88:70:d8:
4d:b8:3b:e5:82:d3:5a:12:a1:66:06:c0:37:b3:b6:
c1:b9:f7:84:71:92:f6:f7:9d:88:ea:92:b6:30:05:
2e:f9:b7:44:9b:8d:06:f1:b4:b6:cd:5d:06:a5:e8:
3d:c5:29:48:84:20:ef:1b:33:56:d7:b2:8c:08:ed:
d0:94:53:ff:7b:a9:43:1e:7c:39:d7:03:64:c8:3d:
24:4a:b8:1f:71:9b:8e:9b:7e:bf:ae:1e:12:c7:a5:
a3:b2:1d:64:e7:c7:a0:92:70:70:d6:7a:28:89:3e:
b2:1d:43:aa:dd:82:94:0a:b3:81:29:f1:8a:fb:06:
aa:65:27:36:a1:e3:f7:f9:1b:4b:23:23:f3:39:06:
e9:e9:bd:15:37:92:e3:10:10:06:7d:ff:45:a2:b7:
88:84:51:5f:7e:94:95:5e:9e:c3:7f:8f:5e:c8:28:
e2:dd:c0:e4:fa:6d:2f:3b:16:1b:87:bc:b0:91:26:
a1:4c:5f:48:89:8f:f0:03:13:34:26:3c:31:b9:b3:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:90:E2:49:11:1B:CD:7E:5F:0B:8E:F1:9E:2A:D6:BE:B1:2C:BD:9C
X509v3 Authority Key Identifier:
keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:07:01:28:4b:ca:17:07:bf:ed:02:b2:9b:dd:bd:1d:84:93:
e0:6c:d3:9b:b1:04:b2:90:72:5c:45:9c:a9:1b:1d:fd:4c:41:
2a:f6:d9:4d:17:26:8a:3c:ba:8b:83:0c:7e:6a:3a:5d:b0:0d:
51:e9:4a:62:30:da:bd:14:97:c6:db:60:f3:92:83:81:a2:f4:
6c:9f:e7:d7:9c:56:9b:ba:44:65:8d:1d:99:02:d8:fc:ff:cf:
4a:25:ce:bc:3e:e3:04:73:0b:ad:0b:1c:9a:70:cb:40:93:f3:
01:f4:6d:1c:0e:a8:77:9e:05:5e:3a:5a:ec:3f:f4:ee:2e:2e:
c4:a2:51:00:99:70:06:ad:44:b7:ff:f6:4b:07:bd:f6:c2:41:
eb:fd:4e:5d:2a:46:54:2f:97:77:99:a3:3e:6e:e6:01:95:c2:
7d:8b:f4:a1:dd:67:54:06:67:53:03:97:99:bf:45:22:84:c9:
e9:e8:a3:62:78:97:5a:43:b8:b3:a1:da:7c:24:82:4d:9e:d1:
2a:00:10:6b:b5:30:87:f9:79:56:73:4c:ea:b6:8a:a4:4e:f4:
e2:bb:18:d1:ef:97:1a:4c:e8:b1:4d:76:c4:9e:f0:5f:dd:b8:
00:3a:ed:7f:ae:25:ba:fd:8a:e2:41:c2:dd:6f:e7:e3:93:6c:
60:cb:46:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:02 2026 by rpki-client