Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
File: aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft (raw, json)
Hash identifier: 8IVKcyW5lWJfROVzPd4+V7rEKrqVP7X40oSDCtDS1rc=
Subject key identifier: 08:00:5F:26:32:01:91:D8:15:1F:8B:5D:85:20:2F:D8:32:15:1E:F8
Authority key identifier: 68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
Certificate issuer: /CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Certificate serial: 01A0D3EF6073075160899AA51F2743C51251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
Manifest number: 1950
Signing time: Thu 24 Sep 2026 15:01:15 +0000
Manifest this update: Thu 24 Sep 2026 15:01:15 +0000
Manifest next update: Fri 25 Sep 2026 15:01:15 +0000
Files and hashes: 1: MZL9_X29mF5ZTnP-08X3-lUJHsk.roa (hash: Ys149eirL94m3+q1yxe8UOWC49nh/48e67xp1NKzimk=)
2: aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl (hash: EbDiupDjHvSIQoEMR/fQB+NiMcbHBbNiqGUtBhYVLEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:60:73:07:51:60:89:9a:a5:1f:27:43:c5:12:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Validity
Not Before: Sep 24 15:01:15 2026 GMT
Not After : Sep 25 15:01:15 2026 GMT
Subject: CN=08005f26320191d8151f8b5d85202fd832151ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:60:9b:1b:50:2f:ce:86:e3:b4:c2:99:d2:09:
dd:65:77:d6:6e:f2:29:60:75:3e:1e:91:c7:8d:0f:
73:fd:34:26:dd:8d:48:54:75:21:53:90:d5:4b:9e:
ec:5b:a9:f2:17:63:ed:9b:4f:88:9a:dc:88:fa:d0:
42:ea:ea:db:36:95:01:f0:23:01:c8:69:1f:81:df:
77:d1:f1:e6:c9:16:5a:db:01:31:79:0b:91:b9:b1:
99:51:91:a3:48:bf:2b:5f:3d:cb:35:87:84:5d:34:
f3:b1:c0:0f:24:85:df:ea:b6:91:c0:25:5e:c1:17:
31:47:75:38:c4:fd:10:95:85:45:88:14:ed:a5:56:
13:1e:cb:28:0d:53:70:ff:e7:66:cd:43:9a:e2:e1:
20:76:3c:e9:0a:1a:ef:82:4f:83:0a:52:57:29:d5:
e0:48:5d:a5:13:f8:c6:bd:37:5b:5e:85:5f:30:81:
41:90:23:8c:b8:2f:5e:1a:19:f0:29:68:a2:c9:e2:
e5:6d:ee:23:48:86:a3:42:e1:34:f9:85:29:98:f4:
31:6d:1f:22:b7:c4:83:19:e2:d1:1f:35:af:b0:d6:
a3:93:7a:26:2e:a1:f8:1a:e6:04:29:28:79:b1:f1:
a7:81:ce:33:0f:94:73:5d:69:ac:12:4b:6f:02:ae:
d1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:00:5F:26:32:01:91:D8:15:1F:8B:5D:85:20:2F:D8:32:15:1E:F8
X509v3 Authority Key Identifier:
keyid:68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:02:13:fd:7e:29:2e:4d:b7:12:fb:6e:50:00:28:aa:9c:59:
e7:c6:ca:cb:57:1e:61:90:9d:3d:b3:3c:53:bb:95:8a:76:f0:
fc:ef:5c:e0:20:f2:44:cc:7e:0a:63:90:52:2c:26:12:85:3b:
e2:4c:4c:bb:8b:95:3e:a9:13:23:d4:db:6e:a0:f9:3c:89:83:
ca:da:e5:4d:b0:8e:53:6e:99:5a:81:f4:69:af:de:72:54:b6:
43:b5:5c:12:ed:b9:9c:01:30:38:b6:e2:f6:63:77:3a:d0:4f:
1e:0f:67:61:c2:5e:79:3f:ef:6d:fe:74:fe:ba:b9:65:3c:f3:
aa:6d:73:b8:17:63:9b:8a:81:d7:1d:b0:53:c4:8e:dc:a4:10:
27:7e:9f:d1:45:66:1b:6a:1b:34:e8:e6:4e:f6:0c:63:e1:35:
d7:5d:bd:09:96:1f:cd:b8:39:40:99:b0:5e:ed:92:d9:54:ed:
a1:a2:87:26:87:1e:b0:2e:8b:36:74:20:a5:09:1b:99:62:2a:
f7:e3:27:ed:ea:4a:ea:8f:ec:8e:9a:e3:d5:e6:60:27:5d:13:
76:92:60:c6:ea:e4:71:05:2f:6b:e4:47:a5:91:35:6a:19:8a:
18:88:d3:4f:c2:64:2f:30:b8:83:54:f0:a1:4d:6b:96:ee:67:
ec:5a:79:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:20:32 2026 by rpki-client