Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json)
Hash identifier: /Szwm2/taEQlWUnnL8Z8+uhJleqtHwHYPPAoRQZu/wY=
Subject key identifier: 29:73:B5:FA:DA:DF:D6:09:6B:32:89:C6:8C:59:99:1F:0F:F9:19:5D
Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Certificate serial: 019E9BF2A9F359E7026DD4F11A14A564F99B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
Manifest number: 037A
Signing time: Sat 06 Jun 2026 08:00:32 +0000
Manifest this update: Sat 06 Jun 2026 08:00:32 +0000
Manifest next update: Sun 07 Jun 2026 08:00:32 +0000
Files and hashes: 1: A5tB2m_AKkFH2MRYLSZP1qj6r7Y.roa (hash: JU4CZpqlBacShwjyBoLo9X21T9K67+NvyzH3SwXTo+Y=)
2: XHzhckAnu87gDfunEM3sM2fHJc4.roa (hash: J4SR1s2pClNQQ3/S6LW+95K5vqFvopp0j499gt2QsWY=)
3: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: o0CnlhzGkEcqJZSnDrcaX1+x2+IpDq9tEagzP8AJClg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:f2:a9:f3:59:e7:02:6d:d4:f1:1a:14:a5:64:f9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Validity
Not Before: Jun 6 08:00:32 2026 GMT
Not After : Jun 7 08:00:32 2026 GMT
Subject: CN=2973b5fadadfd6096b3289c68c59991f0ff9195d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:70:2c:7c:5e:43:9b:26:17:91:69:c3:9c:
4e:1b:c2:c1:38:0b:40:d2:3e:05:74:a1:44:42:51:
8b:e4:89:be:d1:98:c9:68:41:06:c9:8e:c1:82:4c:
4f:18:74:55:8f:38:56:77:87:26:16:77:b2:2f:1c:
c5:23:0f:db:59:f3:27:3d:58:54:b4:0c:a3:c2:db:
8d:d2:6a:98:cb:e0:6d:6a:7d:39:c8:fb:7d:60:4a:
dc:08:c8:c4:16:22:70:ff:91:6f:56:f5:49:00:b9:
14:01:a2:eb:cc:fd:9c:08:04:50:65:b1:39:9d:8e:
f2:1c:ea:1f:7a:88:f5:cf:ea:f1:d2:58:e2:e0:34:
f8:ea:08:39:7a:a7:e7:e6:65:24:99:d1:e8:4c:e8:
a7:6b:3e:bb:d3:39:f3:18:d2:1a:2e:ce:a0:a2:1c:
5c:08:37:ac:09:2a:c2:38:bd:8d:80:a2:d3:36:4c:
93:92:ab:35:66:a3:9b:44:41:1e:76:57:9c:02:58:
f3:6c:03:f2:be:95:2e:9f:87:74:d9:15:8d:19:50:
be:64:53:8e:26:eb:06:da:9b:3f:80:ca:7e:d5:a5:
d5:86:8e:d0:32:60:5e:41:5b:cc:21:af:db:9a:7e:
0f:09:6a:bb:8d:99:73:cd:0f:a9:cf:20:01:2f:8d:
71:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:73:B5:FA:DA:DF:D6:09:6B:32:89:C6:8C:59:99:1F:0F:F9:19:5D
X509v3 Authority Key Identifier:
keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:bb:8f:a7:2c:0e:a7:a6:27:1c:5c:8d:46:30:41:0e:02:b6:
b9:05:db:56:63:4a:b5:1b:97:05:b6:12:7c:81:8d:de:ee:27:
92:e9:91:f5:bb:db:be:1f:15:c5:5e:19:17:d1:7d:1d:f0:7a:
74:6f:05:ed:13:bc:f5:55:9f:02:6a:7e:ed:fe:56:4d:1e:01:
4b:a7:50:95:fe:75:65:e8:45:ee:97:0d:9b:b5:0a:01:03:ef:
4f:30:97:61:71:5e:ec:ed:ef:a5:68:bc:83:45:85:b6:74:e7:
95:1f:68:45:b3:43:c7:2a:88:be:5b:83:4c:8e:3b:5d:b2:98:
66:14:48:3b:8e:37:fe:32:90:97:30:f5:c0:37:d5:61:db:56:
8d:05:06:8f:37:97:82:7a:e0:87:95:66:90:97:c4:9b:45:7e:
73:85:2d:70:6d:09:f9:a4:d3:3a:90:e7:fa:da:6e:95:b2:87:
6d:64:4c:b7:bf:c3:df:48:4d:4d:2f:2a:62:df:22:72:5a:02:
48:ad:f5:ba:02:b7:e5:d5:b6:9a:e5:f3:f0:31:ff:64:e8:06:
27:6f:90:6d:47:36:be:fc:20:18:db:f1:8b:c4:24:d2:4b:6c:
3b:29:5e:a6:3b:a2:0d:e7:f7:98:cf:5b:ac:1b:6a:44:57:3c:
25:6e:a8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:09:12 2026 by rpki-client