Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier: HbYGHCAVQiV+0o6Kbuzg713MPREFWOZ/1Y5FiyqKIy4=
Subject key identifier: DD:D2:F7:23:DE:00:BC:3E:65:EF:41:EC:C5:B4:55:E5:49:F3:8F:E5
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial: 019FA485CE6A951D5739102E72A8D0CDD431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number: 088E
Signing time: Mon 27 Jul 2026 17:00:59 +0000
Manifest this update: Mon 27 Jul 2026 17:00:59 +0000
Manifest next update: Tue 28 Jul 2026 17:00:59 +0000
Files and hashes: 1: 5JP3EEY5bnKcvSQg_d_0jzLOuso.roa (hash: nHWCClQokNNDpIYjG0ERFvivPbSmCZ+n7ir/zAxywpM=)
2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: cDedpF+V70rgeTu+bLZXtqVJt9FnWE1owdXkqj9ekXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:85:ce:6a:95:1d:57:39:10:2e:72:a8:d0:cd:d4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Validity
Not Before: Jul 27 17:00:59 2026 GMT
Not After : Jul 28 17:00:59 2026 GMT
Subject: CN=ddd2f723de00bc3e65ef41ecc5b455e549f38fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:02:70:13:12:af:df:02:d1:4d:82:dc:39:da:
01:2e:4a:2d:69:af:fa:ef:94:51:67:de:43:d6:c5:
55:25:bf:25:7d:48:04:fe:c0:b6:23:79:6f:75:5b:
dd:92:ad:43:89:74:4f:38:d0:35:ad:de:06:89:68:
4c:0b:db:ac:55:2a:19:cb:77:21:b5:ee:c8:ae:f0:
cf:33:89:01:b8:24:0b:e7:05:6f:bf:c1:d4:0b:f8:
b1:ec:4b:f0:e7:81:d8:f5:1a:9c:0b:46:69:1f:21:
60:62:2b:da:05:fc:38:a3:a5:22:73:f9:d0:94:4f:
f2:79:c0:ff:32:ba:65:8b:af:0a:49:4a:a2:f8:a5:
c8:04:d1:0b:4f:3e:64:0f:9a:d4:21:5d:7d:56:16:
0a:7c:fa:3d:35:5c:07:e6:35:d9:f1:df:c8:1e:25:
47:5b:3e:9a:b7:fe:68:53:7e:63:f9:49:00:87:b5:
0c:96:34:b5:d2:16:7c:0a:b5:b4:0d:5a:11:63:4a:
18:7a:bb:44:9b:8d:59:f5:4b:f5:3f:49:bf:b9:ce:
f5:97:c7:cb:83:57:93:d9:99:31:b5:8a:a4:a9:32:
f0:6d:35:4b:b2:11:c6:7f:40:c3:57:86:db:2e:0e:
16:ab:02:9f:2a:24:4a:b2:ec:b2:5b:7f:e0:2e:5f:
2e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D2:F7:23:DE:00:BC:3E:65:EF:41:EC:C5:B4:55:E5:49:F3:8F:E5
X509v3 Authority Key Identifier:
keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c8:1d:0c:1d:bc:b3:c8:9e:29:cf:c7:d5:f3:55:13:19:cf:
5a:8d:dc:42:73:23:b1:2a:20:a7:0b:97:7a:dd:59:ad:4e:c3:
e3:f9:c9:11:3c:52:04:f5:54:e1:57:c1:51:51:bc:43:d2:91:
7c:01:2c:87:1f:22:e6:ec:7c:2f:8c:6a:34:58:c6:4a:7c:09:
74:4e:a5:2f:39:24:95:3f:0b:02:b0:14:52:06:af:9f:54:ea:
d0:91:5a:15:ca:5c:08:c2:9d:c6:80:78:02:18:7f:b9:71:cd:
b0:d1:ac:4b:22:00:c5:49:47:36:47:0d:fb:3f:6b:9f:ba:ac:
6e:8e:79:aa:19:b7:11:cf:90:a4:cc:a2:49:a4:d1:6f:1c:e9:
05:6b:bd:19:be:7a:b9:67:e3:23:bb:97:0c:b1:48:5b:62:84:
dd:f8:6c:ff:9f:f4:d4:a1:54:73:bc:43:dc:65:fb:b1:65:5f:
c3:de:72:4f:ed:37:75:8d:fd:2b:35:bc:83:4f:c7:fe:4e:ef:
76:cd:1b:29:bb:64:5d:43:bf:83:56:52:bd:86:86:e7:2d:bc:
82:87:50:a1:0a:ac:cf:2d:a1:39:2a:89:3d:a9:e7:5e:05:9f:
d8:f2:ed:de:12:36:0a:0a:4c:ae:7c:b3:5c:36:d7:62:7d:67:
62:6f:31:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:19:32 2026 by rpki-client