Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
File: aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft (raw, json)
Hash identifier: xq/gl6hv5bOaH9aoVknoO9jDF+OENGaA5r+ZoAsPxJs=
Subject key identifier: C2:04:3E:E0:71:8C:67:9C:C6:F2:4F:F5:AF:15:6F:3D:3E:38:50:72
Authority key identifier: 68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
Certificate issuer: /CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Certificate serial: 019D2960BDDDA84721B6D9E449BE3B69DC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
Manifest number: 176A
Signing time: Thu 26 Mar 2026 09:01:39 +0000
Manifest this update: Thu 26 Mar 2026 09:01:39 +0000
Manifest next update: Fri 27 Mar 2026 09:01:39 +0000
Files and hashes: 1: MZL9_X29mF5ZTnP-08X3-lUJHsk.roa (hash: Ys149eirL94m3+q1yxe8UOWC49nh/48e67xp1NKzimk=)
2: aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl (hash: skmQYTcmNzP5CqNWmpqrgu+1IERmxFtWw+VNL7VUUd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:bd:dd:a8:47:21:b6:d9:e4:49:be:3b:69:dc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Validity
Not Before: Mar 26 09:01:39 2026 GMT
Not After : Mar 27 09:01:39 2026 GMT
Subject: CN=c2043ee0718c679cc6f24ff5af156f3d3e385072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:07:1d:c6:cb:d9:8d:23:e6:19:2a:3a:03:
eb:a9:28:d9:4a:23:d4:dd:0b:1f:4c:b6:aa:fa:4b:
1c:27:64:d2:97:63:58:93:5e:40:48:a4:51:3c:6b:
b2:97:43:6e:ca:af:58:68:6d:8d:e5:0c:b6:0a:01:
3f:c1:58:51:88:35:26:60:21:ea:f0:3d:81:05:0f:
e4:63:f6:26:a0:8f:b4:15:f3:41:8a:9b:15:af:1e:
7c:86:08:8b:94:67:e1:b5:06:f7:bf:dc:7e:65:9a:
19:a0:99:0f:1b:07:86:5d:37:e8:2c:89:ed:6c:24:
4a:eb:a9:c5:d8:50:9b:c6:a5:ed:5b:81:41:b0:e8:
47:7f:ee:46:21:85:e3:e2:1c:36:59:e4:89:08:45:
19:eb:09:40:da:45:25:1a:36:c8:e8:65:b3:33:a7:
b9:b7:bc:c8:51:70:27:04:41:6d:52:d7:ad:78:24:
65:bd:33:c6:a9:c5:22:46:71:80:d5:35:0f:8d:b8:
7b:77:5a:68:b4:42:40:2c:ae:29:d9:ed:c9:89:c4:
94:74:97:83:65:27:64:f6:f6:77:d2:59:cd:78:21:
ee:4a:0d:0d:b2:27:c2:7c:73:c9:b1:d5:d0:bb:30:
f8:2e:9a:aa:16:8d:5a:d5:2f:dc:a9:4a:d9:fe:34:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:04:3E:E0:71:8C:67:9C:C6:F2:4F:F5:AF:15:6F:3D:3E:38:50:72
X509v3 Authority Key Identifier:
keyid:68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ea:8c:0e:02:0c:77:8e:a1:f1:c5:b9:a0:8c:d4:af:08:87:
e9:cc:fc:04:d2:e0:22:4b:90:13:6c:ee:55:5f:92:02:1d:ae:
c4:06:30:1c:a2:b7:38:25:4f:b8:1c:22:ba:52:b1:e0:3e:a8:
51:d1:f1:fa:52:6c:33:6b:9a:72:04:fd:f9:ed:36:b1:32:73:
a1:38:1a:bd:0e:ee:fd:a2:c6:1a:12:c3:58:91:95:56:1b:a0:
f5:93:f4:79:33:5e:28:db:06:81:9e:cd:d4:ce:ef:a2:1e:67:
52:5f:92:19:de:37:bd:3c:10:93:46:8c:5b:0a:bd:8d:bf:e2:
ab:b0:8a:00:ec:40:9c:39:31:d2:f8:cc:79:4d:cb:89:29:13:
e2:ba:a1:aa:12:66:7a:9e:3a:c4:67:22:c6:0f:70:96:41:89:
5b:d5:72:95:9e:c5:13:e0:0f:81:f4:0b:27:b8:06:bc:d3:66:
ca:21:7f:88:59:0c:fd:67:66:aa:b3:12:a0:54:05:c9:20:7f:
f5:1c:70:22:a4:df:11:bd:f2:ce:72:9b:3d:16:dc:48:9e:c2:
ae:89:d9:00:06:e4:89:83:00:62:02:95:48:fe:9a:f9:e0:f4:
1a:98:08:01:d8:9c:db:f0:d0:cb:5a:15:de:26:53:1e:5f:b8:
1d:9b:cb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:40 2026 by rpki-client