Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
File: aP4jOevgl_9pirMOW2PswhoqI6s.mft (raw, json)
Hash identifier: 5p7PPiHrmoM/mi5tW5/6a2Mtubl3lDoULU7egIyo75w=
Subject key identifier: BE:7B:17:92:FE:37:63:05:6F:71:80:87:00:87:8B:2E:F3:94:24:EF
Authority key identifier: 68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
Certificate issuer: /CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Certificate serial: 019F90FEDD113D5A1144E88998E6D7827A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
Manifest number: 0891
Signing time: Thu 23 Jul 2026 22:00:49 +0000
Manifest this update: Thu 23 Jul 2026 22:00:49 +0000
Manifest next update: Fri 24 Jul 2026 22:00:49 +0000
Files and hashes: 1: ZVtTxijOLWFcJSO6efo4DmD_3no.roa (hash: EQQUPUJE6DPaF7qwNTT9ymoPg6GQS/wPlAo+XhsXQps=)
2: aP4jOevgl_9pirMOW2PswhoqI6s.crl (hash: 3efJ6SMaFagdnIME5lsZsqJrHB4WkP08yvc+GR0pwWU=)
3: pe6SimYP6o2XDFFmpY-wO0p4kd4.roa (hash: DO3dJUNt2bxLV7u0cSp3tB8Jr2qZvvBLvtswnAFN4BA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:dd:11:3d:5a:11:44:e8:89:98:e6:d7:82:7a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fe2339ebe097ff698ab30e5b63ecc21a2a23ab
Validity
Not Before: Jul 23 22:00:49 2026 GMT
Not After : Jul 24 22:00:49 2026 GMT
Subject: CN=be7b1792fe3763056f71808700878b2ef39424ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:3e:6e:ad:70:79:5a:8c:38:65:29:af:26:
ed:a3:22:aa:92:33:35:70:39:49:2a:f6:5b:af:b8:
54:55:4a:85:4e:31:fb:00:81:01:7d:f5:c7:7b:63:
a2:6f:0e:f4:12:f8:a9:3c:76:e8:bf:b8:c4:a2:0d:
a6:25:76:16:d1:c8:7b:c4:94:f7:4c:66:87:62:47:
d7:14:9d:b3:b8:2b:0b:7b:bc:50:52:cb:b0:bd:7a:
76:2b:4b:35:e9:81:f4:ad:1a:7e:f4:a6:13:dd:88:
02:18:59:3f:22:ef:9a:1a:05:aa:35:54:d1:c6:2f:
62:6a:5f:35:b6:1b:6e:84:6d:97:27:67:7a:64:3d:
75:9b:52:39:ba:81:ca:0b:57:bd:2f:53:e8:b4:a6:
a6:9a:73:47:d0:ac:60:5f:2a:e5:55:38:4e:00:38:
68:26:36:ad:1b:ba:34:d6:e8:2e:85:cf:41:da:af:
04:19:3c:ee:67:11:cc:12:bf:51:98:cd:3b:33:dc:
dd:50:00:ad:23:71:85:82:ed:91:20:64:d9:c7:54:
f7:2d:88:99:86:62:af:bb:39:01:c7:0d:91:43:97:
a6:f7:dc:87:e0:c8:c9:74:23:41:8f:23:69:84:0b:
2a:74:03:60:73:f7:36:9a:43:34:e9:5c:9a:21:99:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7B:17:92:FE:37:63:05:6F:71:80:87:00:87:8B:2E:F3:94:24:EF
X509v3 Authority Key Identifier:
keyid:68:FE:23:39:EB:E0:97:FF:69:8A:B3:0E:5B:63:EC:C2:1A:2A:23:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP4jOevgl_9pirMOW2PswhoqI6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e7e0d8-cf2b-4e15-af27-eea8af1434d9/1/aP4jOevgl_9pirMOW2PswhoqI6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:66:20:16:3f:4f:78:38:2e:24:4f:1c:bc:50:da:67:70:cf:
fe:9d:fd:dd:85:cb:9d:8d:d2:93:81:89:d0:6b:ce:9f:7f:b1:
76:c6:dc:bd:9a:6f:16:11:fd:d6:98:6a:b8:ff:be:0e:ec:6f:
b3:57:9f:e9:b3:25:33:14:98:b2:a9:db:de:b5:6c:7f:80:79:
44:0d:90:a9:04:fb:7d:2d:3a:97:8e:a3:eb:67:2e:f3:59:37:
0c:05:cc:24:14:42:f9:55:a4:66:88:19:11:e5:0c:2c:2a:f6:
0c:68:84:27:95:07:b7:d9:1b:f1:4c:89:ca:87:7c:b0:96:b6:
36:eb:3e:fe:b9:f4:76:86:45:6e:dc:18:83:32:52:64:71:92:
f2:6a:75:4a:fd:59:9d:e5:d5:25:e1:50:a6:a9:b8:bc:b8:2f:
0f:7e:94:18:fb:a1:9d:c4:93:ad:28:77:89:62:f9:90:19:40:
3b:67:6f:58:cf:d3:22:31:93:1a:b4:d7:d2:e8:ff:47:4f:32:
a9:d2:49:5e:d1:fb:7b:8e:9b:6e:cb:23:e3:d7:9c:2e:45:60:
22:09:c8:59:b5:c4:5c:07:3c:08:53:9a:3d:0f:39:ad:c9:3a:
02:a6:60:89:dd:a5:53:5a:f3:f0:39:c0:47:9f:4c:62:70:f9:
29:5e:96:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:20:01 2026 by rpki-client