Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
File: aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft (raw, json)
Hash identifier: gxj/bhvULPtDZLZg8/4Is7PMVv6R1K4eoLAxWrWJtxE=
Subject key identifier: EA:9C:E6:80:A8:54:98:81:0A:BE:72:85:E0:1A:E9:C8:44:FF:36:57
Authority key identifier: 68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
Certificate issuer: /CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Certificate serial: 019D292967B85022251AC535A1C3D2C05D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
Manifest number: 1786
Signing time: Thu 26 Mar 2026 08:01:12 +0000
Manifest this update: Thu 26 Mar 2026 08:01:12 +0000
Manifest next update: Fri 27 Mar 2026 08:01:12 +0000
Files and hashes: 1: aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl (hash: 6vuQieq+n834NOtkypDxxciLKJPUjCoulDtzDv3lgVM=)
2: gNhszUNFjUvnmp6uYZywKw0VK4Q.roa (hash: OoYbjhXKEH09k93nIljEgaEwB00MnQM3qMLjic/Ifxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:67:b8:50:22:25:1a:c5:35:a1:c3:d2:c0:5d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Validity
Not Before: Mar 26 08:01:12 2026 GMT
Not After : Mar 27 08:01:12 2026 GMT
Subject: CN=ea9ce680a85498810abe7285e01ae9c844ff3657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:f5:7a:40:97:d5:3e:16:d3:e8:cb:10:2a:
c0:bd:3a:10:b3:c7:83:bf:a6:a5:fd:46:ce:e4:3f:
9d:66:49:4a:9e:56:96:57:2f:d3:c1:bf:27:6d:9f:
9b:5c:af:13:95:b1:77:b5:57:76:e8:41:a6:5c:ee:
39:a6:43:d4:21:bd:fb:19:12:2a:b9:a0:dc:b6:20:
88:5b:8a:6c:fc:08:ef:50:dd:a9:57:98:78:71:5a:
9e:94:9c:6a:38:84:01:e1:f4:ad:b6:d2:37:e6:92:
b8:2c:33:ed:e1:20:8d:25:d0:28:89:53:ed:0c:ce:
fb:5b:ca:e6:6f:47:4f:6a:6e:15:54:12:ba:76:9a:
b7:a1:0b:5b:01:34:09:e5:38:5a:0b:c4:35:f9:39:
ec:67:af:e6:26:d3:b6:6c:7b:32:cd:e3:cc:96:b6:
58:db:88:2b:fa:5b:35:0a:6f:20:55:9b:88:7c:e1:
ea:5b:6b:42:a5:17:08:3a:3c:c9:cd:97:0d:69:17:
3b:9a:10:91:63:d1:cb:9a:d7:7d:2a:2f:91:4f:cc:
7a:a2:42:aa:a3:f1:a9:65:b4:46:77:bc:32:4a:3e:
e9:a3:bf:3d:34:bb:f0:15:6d:3e:c8:59:5f:3e:fb:
66:bd:25:3d:10:2e:61:a1:32:61:2c:08:51:fb:e3:
af:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:9C:E6:80:A8:54:98:81:0A:BE:72:85:E0:1A:E9:C8:44:FF:36:57
X509v3 Authority Key Identifier:
keyid:68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c7:99:84:fc:7d:d7:ce:87:27:18:36:ac:8c:e8:07:d8:d0:
f9:12:71:f8:c7:2b:58:a9:b4:c2:83:8e:24:5a:66:ba:69:42:
d4:81:96:16:bd:54:38:eb:de:8c:41:79:ce:ac:77:4e:d3:de:
c3:5b:da:1f:41:b4:85:d1:ef:93:d0:34:73:0e:b8:84:18:ca:
b1:7b:20:40:f4:68:81:0b:33:a5:45:f5:62:b9:7b:6a:bd:c1:
ca:0a:ef:77:c7:71:6d:f9:c2:4b:1a:54:4f:b5:6d:03:5c:70:
85:51:2a:c1:d9:8e:59:3e:fe:da:e3:b5:d3:93:db:e8:b6:cd:
a7:da:db:5e:c1:34:d5:37:a4:9d:b1:66:52:d6:50:5d:31:77:
d7:ce:2b:13:d8:6a:40:22:bc:a5:fa:9f:ec:8d:d7:4f:54:cd:
d0:88:30:19:2f:15:c1:32:98:37:be:67:92:92:49:6a:7f:73:
06:60:b4:be:0d:22:a3:7e:15:f5:3e:c3:59:a3:46:b5:e1:de:
cd:d0:d4:4d:4f:44:c5:02:12:86:94:ce:48:ba:12:e4:4e:c1:
a8:fa:54:8c:30:ad:7d:1c:d1:8f:f8:3e:39:75:c8:3f:c7:d9:
58:fe:b6:45:0d:66:99:b5:f9:bd:3d:22:10:5d:df:5a:0b:0e:
ff:27:98:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:21 2026 by rpki-client