Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier: PrI/RzRaKeAvus9Ma1JY9yROkNYaR3tMlPeshs+T7iw=
Subject key identifier: 34:47:10:65:3F:14:84:A2:D2:A9:4C:92:6E:3D:02:F3:58:17:03:08
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial: 01A188644A27A981183DC9845473B78B43EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number: 098A
Signing time: Thu 29 Oct 2026 16:00:36 +0000
Manifest this update: Thu 29 Oct 2026 16:00:36 +0000
Manifest next update: Fri 30 Oct 2026 16:00:36 +0000
Files and hashes: 1: XIhC2Wn8iu2emKCOielbdM_m_PE.roa (hash: wAQeXJLUyq1ZTFFe4xVXQP1602jX9IiBilp8BpE2MCM=)
2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: fAufoR9ngOwHLxME2Z0jqhc0GSTzMMIJ9EoQ0zbCH1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:64:4a:27:a9:81:18:3d:c9:84:54:73:b7:8b:43:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Validity
Not Before: Oct 29 16:00:36 2026 GMT
Not After : Oct 30 16:00:36 2026 GMT
Subject: CN=344710653f1484a2d2a94c926e3d02f358170308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:40:5c:14:2f:0c:19:23:bf:29:ed:53:88:6a:
f0:58:5f:5d:32:2c:44:0c:64:18:55:e3:a6:34:a3:
f8:07:63:54:bf:67:26:c6:27:6e:72:26:f3:06:30:
c1:ae:5c:8e:3a:0c:8b:48:d6:a9:7a:e2:b8:93:f5:
6c:75:81:07:bd:46:bb:58:3f:57:d6:64:52:66:b8:
e5:2f:35:f9:71:0e:8a:5c:ab:81:03:85:9c:0d:06:
33:a7:82:ad:e7:c1:9b:9d:73:d8:fe:9a:95:de:a9:
59:b3:fd:e8:f0:47:9d:37:c1:31:19:d8:e7:62:ce:
3d:6a:08:ab:a8:16:c9:ae:5d:40:e1:9a:67:9b:d2:
62:99:73:66:0d:ef:f0:db:3b:db:28:a0:24:16:92:
21:70:85:85:98:ae:39:dc:05:14:1d:aa:46:9c:39:
81:5a:4a:77:c4:5c:f6:0d:17:fe:eb:f2:16:47:78:
e6:5c:40:49:3f:f0:b7:55:e8:86:79:4e:08:ce:5d:
2f:3a:7c:ed:68:85:e6:c9:39:55:ce:1a:e5:5e:b4:
b1:a9:49:e1:26:d0:1c:de:01:4a:94:ad:a1:9f:04:
3e:9a:a6:9c:b5:23:a8:62:b2:39:cd:86:ad:29:f9:
1b:23:c2:78:c3:69:fc:9e:9e:2d:5d:6d:64:d2:44:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:47:10:65:3F:14:84:A2:D2:A9:4C:92:6E:3D:02:F3:58:17:03:08
X509v3 Authority Key Identifier:
keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:14:d8:b5:85:cc:d7:ad:22:ff:ed:78:b7:2b:af:d8:d4:e5:
12:85:a6:69:fc:9e:40:bc:ea:e3:b9:9f:2b:e0:4d:db:83:68:
00:6a:ed:3e:61:22:92:fc:3c:b5:27:94:33:63:fa:c2:87:ac:
46:f7:07:13:23:76:4c:cf:f5:36:c4:57:36:54:15:b8:c6:37:
11:b6:8c:7f:85:c5:83:92:8c:25:58:49:45:11:0c:17:da:69:
01:c5:90:72:36:a4:f5:5c:1a:1e:2a:08:02:e3:0a:69:29:15:
9b:f2:0d:62:bd:fe:ee:63:ba:35:2a:73:5b:e1:76:18:b2:8f:
12:78:4e:0a:f7:be:af:03:05:5d:83:9d:d9:26:9a:29:57:b7:
20:25:0b:dd:8c:cd:ad:63:aa:09:c7:45:7e:7f:0f:ec:7f:4e:
04:11:2e:58:68:a5:02:62:09:bc:0b:15:a0:64:d0:c6:f5:2c:
61:1d:a4:8c:4f:f7:23:5b:95:ba:87:c6:30:82:20:da:0e:64:
6c:d4:f3:1f:b0:5a:f5:61:61:ca:4a:4e:0d:8f:de:f4:76:7b:
14:9e:7d:f7:b9:af:56:b1:e7:48:56:1f:4f:f3:3b:a7:48:c6:
f6:ad:0f:13:a8:0a:77:13:b4:85:4e:d8:f7:da:b4:cf:f8:1c:
6e:0a:84:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:16:06 2026 by rpki-client