Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
File: aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft (raw, json)
Hash identifier: HZG8IG2dP9c+SzUThEGkmJ/9LNS1PcH2ODpc7I37aNc=
Subject key identifier: FE:F0:69:57:7E:B2:B8:7B:60:A2:99:BA:22:C3:16:43:11:F1:4C:80
Authority key identifier: 68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
Certificate issuer: /CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Certificate serial: 01A134481F801B8D293577E4DF76D43D56BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
Manifest number: 199E
Signing time: Tue 13 Oct 2026 08:01:44 +0000
Manifest this update: Tue 13 Oct 2026 08:01:44 +0000
Manifest next update: Wed 14 Oct 2026 08:01:44 +0000
Files and hashes: 1: aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl (hash: inG1HSb2qB1heEiT0V/Vw+BDy7/zZDBS8RuBA2Qekm0=)
2: gNhszUNFjUvnmp6uYZywKw0VK4Q.roa (hash: OoYbjhXKEH09k93nIljEgaEwB00MnQM3qMLjic/Ifxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:48:1f:80:1b:8d:29:35:77:e4:df:76:d4:3d:56:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Validity
Not Before: Oct 13 08:01:44 2026 GMT
Not After : Oct 14 08:01:44 2026 GMT
Subject: CN=fef069577eb2b87b60a299ba22c3164311f14c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4d:80:b5:d7:c3:0b:8d:31:8a:0b:0c:c0:8e:
dc:13:d7:bc:31:a6:b9:b0:e4:5a:60:54:bf:d4:41:
38:69:a9:c1:bd:c1:5f:b8:40:c2:c2:cb:e9:72:ff:
ff:f1:ed:8b:43:be:8f:6a:a1:fa:18:73:62:31:aa:
80:f0:eb:c9:82:ba:c0:f9:55:dc:b0:e5:00:ec:fa:
08:86:de:5a:f2:37:b2:53:ed:e1:40:70:cd:36:6b:
ff:3a:4a:bf:56:28:d6:1b:05:7a:94:30:a3:c4:61:
30:08:2d:98:89:31:68:a1:b2:a1:4b:93:23:2d:94:
79:e5:21:58:61:e3:e8:62:60:fb:c9:38:d1:21:3c:
e4:03:f1:da:96:90:33:58:7a:d7:95:1b:83:56:fb:
bc:aa:65:4e:b9:4e:e4:b1:d7:41:46:7b:f0:4e:88:
42:40:25:d2:95:d5:35:42:a9:37:13:ee:c2:4c:c3:
50:e7:87:f2:48:73:f0:96:63:9c:e2:73:69:c1:17:
fb:01:e0:44:35:93:ae:db:7d:9d:4f:65:af:39:28:
3b:0c:3a:78:f3:43:17:96:b0:11:7f:97:6b:f3:17:
be:3e:a1:b6:0a:01:70:98:16:d8:72:08:6d:d7:c8:
4d:ad:48:07:82:7d:fd:3b:2d:fa:bf:2b:14:ae:b6:
9e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F0:69:57:7E:B2:B8:7B:60:A2:99:BA:22:C3:16:43:11:F1:4C:80
X509v3 Authority Key Identifier:
keyid:68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:dd:c4:7c:23:ca:49:f0:33:22:4d:b3:b6:65:dc:f1:72:79:
77:50:0d:15:1d:8b:f1:b6:b7:fd:a0:6a:c4:a7:f6:1d:fa:ee:
92:24:e6:09:fb:ec:0c:1d:d5:71:9d:42:75:0a:4b:03:61:ce:
06:20:37:c4:75:c6:93:30:ed:4b:44:0d:2e:bc:82:fa:e1:b4:
e1:6f:bf:31:bb:55:03:dc:d5:9c:79:07:1f:10:c9:be:fe:1b:
56:64:66:9c:02:62:b5:35:ae:9f:5e:76:70:6f:e4:bc:7f:d4:
1e:7d:51:a5:03:e4:ff:3d:2a:d1:74:95:dd:d6:47:a4:50:6c:
50:af:ee:00:d4:b9:5f:b8:0a:fc:e5:06:46:2a:a8:f4:3d:89:
04:63:a7:fc:b6:5c:f4:5c:45:48:bb:7f:82:4f:a1:f1:4d:e4:
70:fa:02:ce:f1:7c:80:81:62:31:ed:03:46:82:01:ba:e9:27:
8f:5d:76:56:cd:6a:ca:99:ed:fd:69:4f:b2:39:18:7e:2d:0e:
4d:cb:81:04:48:32:94:51:dd:86:eb:8a:c3:49:83:99:1f:70:
a5:ca:62:15:e7:d3:45:38:84:7e:e6:3d:7d:0a:07:cb:93:b4:
e9:7e:1f:83:b4:ff:38:99:35:48:cd:72:5d:1a:f4:42:13:c5:
f2:46:87:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:06:37 2026 by rpki-client