Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json)
Hash identifier: +Dprdgd60xWVcyp6F2FNtOhwKb6P3a2V0c+E1bCy/+s=
Subject key identifier: 5E:8B:90:7A:5D:F9:80:D0:1C:BE:58:23:94:F4:C6:6E:20:42:52:E6
Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Certificate serial: 01A090C59F73E18FF585D9DD9C3C93DEBDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
Manifest number: 047E
Signing time: Fri 11 Sep 2026 14:01:05 +0000
Manifest this update: Fri 11 Sep 2026 14:01:05 +0000
Manifest next update: Sat 12 Sep 2026 14:01:05 +0000
Files and hashes: 1: IEEGCXxK9NZZAyvgooGe_0krRwA.roa (hash: ufaDl8VQDgum3aim68/T7UN4n3wx+m74Tx5ctK6jZmk=)
2: XHzhckAnu87gDfunEM3sM2fHJc4.roa (hash: J4SR1s2pClNQQ3/S6LW+95K5vqFvopp0j499gt2QsWY=)
3: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: La3hSpWw7gVvnoxBw7Ie5Mer9chV8IqVhUv12npcX6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:c5:9f:73:e1:8f:f5:85:d9:dd:9c:3c:93:de:bd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Validity
Not Before: Sep 11 14:01:05 2026 GMT
Not After : Sep 12 14:01:05 2026 GMT
Subject: CN=5e8b907a5df980d01cbe582394f4c66e204252e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:35:c0:2a:84:45:e8:2d:1b:44:17:e9:36:
1e:a7:d7:6a:e0:bd:18:fc:84:98:5f:a7:2b:2e:92:
28:e7:90:79:6a:06:3e:78:6a:bf:bd:94:a3:b7:79:
cf:99:ee:a3:a3:63:99:4f:0a:1a:5c:44:44:90:6d:
ca:ce:20:b0:c4:2f:aa:82:c0:02:fb:82:ed:62:3f:
40:dc:de:c2:da:23:86:6c:89:f4:83:8c:0a:44:ff:
cb:ff:05:31:41:94:a5:06:15:37:8f:ab:61:a4:db:
32:b7:93:cf:97:29:12:44:0e:09:b8:9c:57:1c:31:
4c:85:b3:c9:0d:19:09:7c:69:07:1a:e9:c7:ec:58:
39:b7:d9:fd:0b:25:8c:ba:5e:af:ea:dd:89:1e:5e:
02:0e:73:31:90:96:29:1c:dc:a3:2c:04:29:00:08:
24:51:01:e7:a1:76:4e:57:48:08:ee:0a:5d:02:aa:
9e:dd:71:b4:fa:b9:6d:86:5e:a5:4d:5c:6c:d0:32:
66:4c:ab:e3:03:90:99:f5:28:a6:26:58:f1:31:1b:
9e:fd:9b:41:2d:40:0a:6f:c6:4e:a4:16:e5:a7:ef:
2c:e2:51:db:d7:f5:f6:47:3c:94:9b:3b:49:4f:14:
79:e2:80:1d:28:85:be:54:c6:8b:f5:f2:65:a8:17:
2e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8B:90:7A:5D:F9:80:D0:1C:BE:58:23:94:F4:C6:6E:20:42:52:E6
X509v3 Authority Key Identifier:
keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:dc:95:10:0a:99:e6:71:bc:18:77:e0:4e:f6:30:2f:3a:8e:
99:80:7c:2c:b8:bc:5c:d9:57:77:57:de:81:84:aa:87:3e:32:
6f:bc:f6:97:e6:ae:3a:ab:fe:bd:90:87:bf:23:46:a8:dc:bd:
81:51:c0:e1:bb:ec:5c:6b:77:22:55:ff:0c:38:33:90:c0:5f:
80:29:16:ea:cc:c2:54:b2:78:b6:ba:55:05:6b:3c:f4:2a:91:
84:63:e0:1f:16:a1:4b:4c:3d:cb:0b:1b:ea:13:a7:91:8e:d2:
75:58:34:e6:26:b9:da:87:84:80:ed:5c:b9:9d:42:b1:56:16:
6f:d2:c7:0d:64:1c:61:ee:ad:2c:93:b5:69:ce:ea:11:99:f2:
aa:52:98:ed:3d:9a:30:76:29:1f:a8:38:3c:bb:7e:c9:3a:f6:
bd:dc:9c:de:34:dc:f8:a5:7d:09:21:36:d8:ca:ce:9c:c1:f8:
43:af:4f:46:3e:01:58:42:04:dc:fc:77:5d:29:8f:d5:75:48:
f0:14:a9:3e:20:c9:ff:f9:3c:47:0e:e6:10:ab:2a:a4:9b:c3:
d9:0d:b5:f0:89:51:a0:2d:a9:88:bf:65:82:c1:64:1e:ca:40:
fa:06:a5:13:de:0a:2a:3e:32:66:47:ad:16:ba:6a:86:da:13:
4f:60:7c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:09:09 2026 by rpki-client