Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier: /ugdfvZ+Snyyw9Dn7V3z+bK1aEZiMHnSbENYa/hEH0A=
Subject key identifier: 62:EA:07:45:67:EC:4B:7D:76:CC:B4:B0:86:0C:0A:5E:D2:D8:65:46
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial: 019D3A8A952ABE2F6534227AA9DA37A4C0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number: 074E
Signing time: Sun 29 Mar 2026 17:00:53 +0000
Manifest this update: Sun 29 Mar 2026 17:00:53 +0000
Manifest next update: Mon 30 Mar 2026 17:00:53 +0000
Files and hashes: 1: 5JP3EEY5bnKcvSQg_d_0jzLOuso.roa (hash: nHWCClQokNNDpIYjG0ERFvivPbSmCZ+n7ir/zAxywpM=)
2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: 6Nlnt2fyFrzYX6P1TbW97wX1fFWpDhC4JpqmNO2dck8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:95:2a:be:2f:65:34:22:7a:a9:da:37:a4:c0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Validity
Not Before: Mar 29 17:00:53 2026 GMT
Not After : Mar 30 17:00:53 2026 GMT
Subject: CN=62ea074567ec4b7d76ccb4b0860c0a5ed2d86546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:27:ae:85:96:68:34:2d:1a:7a:db:02:bd:
f6:25:01:d9:3e:05:3b:9d:45:e5:2b:b4:da:95:76:
bc:77:5d:e5:61:ef:f2:c7:7b:05:22:cc:63:27:23:
ca:4a:4e:e2:fc:e2:07:5e:3b:82:79:e1:05:12:61:
be:c7:8f:e7:e4:ae:54:5e:12:1f:3e:bd:6e:04:a2:
ec:2f:59:a3:ac:b4:9c:89:5d:4d:97:59:61:26:46:
d4:34:a6:74:53:c7:22:5d:3a:18:5f:45:28:4b:b8:
32:39:bf:e4:ee:07:37:47:c9:e7:e1:25:2a:2b:61:
b8:94:b6:72:67:dc:ab:aa:b6:8c:81:2a:2b:43:d7:
9c:ea:9e:4d:73:93:ea:7f:44:11:ea:f9:af:48:19:
7a:0f:5a:cc:26:d3:d9:e0:89:d7:a6:fe:6f:dd:3d:
bb:db:e2:5d:28:80:f6:a8:86:18:b1:15:20:05:b4:
3f:f1:4b:8d:63:2b:8a:eb:05:94:c2:47:16:e4:6d:
0a:26:d2:f7:c8:19:97:3c:2d:81:ea:1e:d6:16:9b:
0b:b0:d0:e4:61:b5:95:0a:ae:59:01:16:05:b6:5c:
e8:46:a7:0f:e3:05:0c:60:b0:12:60:35:4e:1a:f6:
60:1f:f1:f9:24:a8:70:71:81:dc:7c:09:b5:b6:5d:
25:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EA:07:45:67:EC:4B:7D:76:CC:B4:B0:86:0C:0A:5E:D2:D8:65:46
X509v3 Authority Key Identifier:
keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e2:11:9f:1d:8a:43:f2:9c:6c:70:0b:4b:09:d2:03:ba:1d:
4e:d1:83:8f:3d:ab:f4:a7:ef:19:91:a5:8b:45:53:a0:0b:64:
4a:ee:7d:1d:8d:fa:7f:50:4e:5f:2b:43:f2:bc:d7:e2:f4:06:
43:18:a9:c4:ab:b8:44:61:6c:6e:d2:7e:69:5e:c1:69:ef:38:
ef:1b:49:0e:a3:01:f9:91:73:e5:12:c2:89:36:84:12:af:ea:
55:81:be:5f:0d:d9:de:bd:1e:23:d4:76:d3:f8:40:b2:91:b3:
4e:88:9a:04:06:5e:b2:fc:4e:9a:d2:63:19:d5:46:27:b5:93:
84:fd:45:87:d6:b3:0d:92:00:63:8f:dd:97:de:a9:d3:35:4e:
ba:d9:bc:61:69:04:6a:11:4b:0d:16:24:d3:eb:f5:47:25:83:
c2:d2:b3:9c:0d:1d:f0:cc:13:17:e2:9c:2e:47:ed:4e:c9:80:
21:a0:fc:f1:4d:bc:44:31:01:4c:d8:96:65:59:63:74:27:60:
4f:90:c4:48:32:bd:c2:0b:d3:46:9a:30:bd:31:fb:f3:c7:4e:
81:a7:70:c0:54:96:86:99:a7:74:e9:6f:79:4a:fa:73:68:91:
92:f7:12:f4:ec:7a:d3:e1:29:dc:49:91:5c:a1:f0:8b:a0:40:
0b:5b:1b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:10 2026 by rpki-client