Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier: +Mg/A8UrM2zKTEuJs4K2hast+gG2a+u3RiJO3vHNUvU=
Subject key identifier: 22:A4:37:B1:26:8D:9F:FC:6C:A6:06:1A:22:26:DE:35:2C:96:42:28
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial: 019EBAD89753CAA72D2A5615B583E88260C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number: 0815
Signing time: Fri 12 Jun 2026 08:00:17 +0000
Manifest this update: Fri 12 Jun 2026 08:00:17 +0000
Manifest next update: Sat 13 Jun 2026 08:00:17 +0000
Files and hashes: 1: 5JP3EEY5bnKcvSQg_d_0jzLOuso.roa (hash: nHWCClQokNNDpIYjG0ERFvivPbSmCZ+n7ir/zAxywpM=)
2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: FS+PRkJqTs2IoBQSInHnK4YqXNhr9bvPhoFn+NeXiq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:d8:97:53:ca:a7:2d:2a:56:15:b5:83:e8:82:60:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Validity
Not Before: Jun 12 08:00:17 2026 GMT
Not After : Jun 13 08:00:17 2026 GMT
Subject: CN=22a437b1268d9ffc6ca6061a2226de352c964228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:fc:67:38:a8:b0:f3:a7:22:f9:e6:2b:fb:
1f:93:f8:34:af:1d:1f:59:82:ee:07:8c:68:df:b4:
8b:e1:1e:30:c0:5b:44:e4:de:1b:2f:28:a4:5e:db:
25:17:71:6d:63:f1:13:53:c8:7d:bc:2b:63:ad:25:
b3:40:d6:3d:14:84:d9:c0:8f:90:2d:65:3c:0b:c2:
6b:ad:68:26:9a:ce:c9:9b:af:fe:58:45:eb:9e:c4:
60:dd:e6:ae:76:97:29:25:1a:75:10:a0:81:0d:c8:
61:00:58:e9:03:cd:d2:50:27:04:e3:03:9f:5b:0f:
8d:d3:9e:b2:09:77:bd:77:a6:20:ac:51:75:df:9a:
c4:9e:5f:71:08:4f:6f:eb:6c:e1:17:32:9e:75:cc:
73:db:37:ef:ed:f0:b7:2e:28:0d:87:29:25:09:0e:
0c:c8:a3:d4:fa:44:f5:63:83:85:97:5a:cb:cc:10:
72:6e:ed:12:18:b7:52:3f:8d:53:65:ed:17:14:9a:
e1:68:d1:2a:d1:34:9a:e3:66:ea:75:e1:16:dc:42:
14:25:5a:ab:01:84:45:11:9b:cb:87:18:ae:3b:f2:
90:ff:ea:43:45:91:b8:55:70:36:12:53:5e:b8:4b:
89:d4:e3:9c:ee:36:0a:7d:4a:a5:31:3d:a0:5f:29:
7e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A4:37:B1:26:8D:9F:FC:6C:A6:06:1A:22:26:DE:35:2C:96:42:28
X509v3 Authority Key Identifier:
keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7b:fa:0c:d5:cd:70:a2:af:55:cf:d0:49:49:45:91:04:8b:
24:a8:da:70:9e:83:17:72:b7:a5:0d:25:5e:74:17:89:89:b5:
37:13:2c:2f:ac:86:ec:34:f0:b7:74:ba:56:25:11:f8:a0:dc:
a4:43:64:8a:43:92:39:30:19:35:c1:81:47:ab:23:92:46:93:
54:0e:27:19:c8:15:aa:f6:f8:bb:62:f8:65:47:b4:a1:ca:e0:
7a:9d:17:9d:ae:a0:83:ab:8d:f9:24:28:dc:47:27:7f:b1:05:
6f:82:a8:96:6a:ed:7e:f9:a3:f8:1d:b9:98:3f:b1:11:6b:ab:
04:76:d0:f6:0f:cd:0a:b3:71:86:67:fc:cb:6d:8d:bc:1f:54:
49:a1:dc:2e:f8:6b:c2:ef:ee:c2:99:07:0f:69:2e:2a:6b:fe:
93:5c:53:d0:39:69:68:88:00:4f:b1:8b:19:f3:65:54:6c:b8:
a9:41:f0:2f:9d:71:e8:9a:7d:4b:bd:54:c3:8d:85:89:2c:2a:
56:f1:9e:82:66:01:56:c4:56:c8:e6:83:8f:6f:4f:f7:d5:81:
1f:01:b2:05:bb:1e:ea:b5:08:58:97:d1:d3:a8:8c:30:c5:e7:
28:aa:5c:32:4b:73:59:a9:e8:6a:42:0d:d0:5c:db:c8:cf:eb:
85:b5:4a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 10:11:42 2026 by rpki-client