Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json)
Hash identifier: yCRTt9ceKmclRm5/lyWed5HPN6O3gXc3EJsPyzP6s0M=
Subject key identifier: FE:D5:9A:5F:63:C7:E3:DC:F0:8B:45:50:C3:90:C6:A0:7A:ED:8F:BC
Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Certificate serial: 019CC6ABBD60365253CFD0B5562565B0708F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
Manifest number: 0287
Signing time: Sat 07 Mar 2026 05:01:09 +0000
Manifest this update: Sat 07 Mar 2026 05:01:09 +0000
Manifest next update: Sun 08 Mar 2026 05:01:09 +0000
Files and hashes: 1: A5tB2m_AKkFH2MRYLSZP1qj6r7Y.roa (hash: JU4CZpqlBacShwjyBoLo9X21T9K67+NvyzH3SwXTo+Y=)
2: XHzhckAnu87gDfunEM3sM2fHJc4.roa (hash: J4SR1s2pClNQQ3/S6LW+95K5vqFvopp0j499gt2QsWY=)
3: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: QCohSPpXLYukb9nfqCCw8WyfweyCIq6l24zpyw1559Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:ab:bd:60:36:52:53:cf:d0:b5:56:25:65:b0:70:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Validity
Not Before: Mar 7 05:01:09 2026 GMT
Not After : Mar 8 05:01:09 2026 GMT
Subject: CN=fed59a5f63c7e3dcf08b4550c390c6a07aed8fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:e8:88:ae:a5:96:fe:18:42:20:af:62:54:
1e:b7:84:8a:e0:c1:ca:61:f2:a4:7e:ed:dc:40:23:
da:fe:73:52:7a:bb:9f:c2:e4:48:7c:a1:b1:83:cf:
ef:90:40:71:fc:6c:58:30:14:74:68:cf:f6:61:f6:
75:e7:28:cd:cd:ed:8a:aa:7b:cd:75:55:da:08:14:
5e:6d:e0:a5:d5:12:97:ba:77:81:84:2a:07:06:44:
9b:3b:15:b5:06:1d:91:b0:c2:e6:f4:43:a0:0c:89:
6c:85:d6:3e:66:67:99:ab:2e:b5:4c:e5:65:a9:34:
24:74:7b:26:5e:78:ad:c6:92:e1:95:01:77:be:bb:
c2:06:4f:3b:e8:14:16:bb:62:eb:98:3c:fb:98:53:
14:9f:a0:d9:c3:3a:ea:e5:26:88:e6:38:0a:f9:29:
ac:0a:b7:f8:59:28:57:09:a1:9d:3c:f9:75:a9:a0:
49:0d:1d:ce:8e:2b:9d:be:11:9c:82:52:98:08:8d:
f7:4a:a4:df:13:b7:41:7c:10:5e:fa:00:d1:4b:27:
c2:a0:02:50:35:af:80:56:7f:ef:3f:7d:f0:b8:08:
70:d3:4b:d9:e7:0f:6a:b2:ed:6b:bb:ab:cf:0c:d1:
77:e9:67:9b:e0:3b:27:14:67:4a:14:b2:de:fb:7e:
88:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D5:9A:5F:63:C7:E3:DC:F0:8B:45:50:C3:90:C6:A0:7A:ED:8F:BC
X509v3 Authority Key Identifier:
keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:da:d9:ac:ed:d7:ef:5f:d3:7c:7a:b9:b0:71:86:35:d7:a0:
7d:c9:b2:fd:ce:24:7f:69:f1:91:ef:db:08:de:dc:ca:a3:70:
91:6c:98:04:00:8a:81:ad:04:b2:7d:bf:ec:84:43:ab:ae:88:
29:2a:4d:66:62:bc:d8:c1:11:87:fe:34:4e:c4:0f:1e:7f:6e:
b3:9a:72:d7:52:75:d9:81:9f:27:6e:63:9a:99:3d:e1:a8:5a:
9e:ae:7e:e6:02:98:da:24:20:04:23:db:60:20:89:bd:c2:c3:
da:82:10:fe:0d:6d:26:a1:50:12:06:14:28:e8:b9:dc:7c:90:
ef:bd:18:7e:db:f0:81:c6:7f:44:ae:0e:57:f5:62:e4:27:dd:
8a:05:ba:b4:12:74:8d:07:68:15:19:4e:42:d5:6f:84:b0:16:
ae:7f:18:40:48:b0:06:14:07:1d:99:f4:5c:d0:c4:be:02:88:
08:af:ca:cf:a9:10:5a:5e:b3:0c:c9:80:44:a8:d0:df:12:c3:
c8:11:ad:de:69:51:6c:39:9b:fc:90:21:07:5d:80:7f:d7:bb:
41:a5:46:a5:1a:33:30:10:34:d6:a5:56:f5:93:6e:96:b7:91:
28:85:29:45:d5:1f:16:c9:f2:59:79:55:9b:a3:c3:4e:47:b5:
04:34:db:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzGq71gNlJTz9C1ViVlsHCPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZjQzYjViYmNjNDk2MjgwNmVhOTMyMmVjMjkyZTliNjZk
ZGNjYzUwHhcNMjYwMzA3MDUwMTA5WhcNMjYwMzA4MDUwMTA5WjAzMTEwLwYDVQQD
EyhmZWQ1OWE1ZjYzYzdlM2RjZjA4YjQ1NTBjMzkwYzZhMDdhZWQ4ZmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKDoiK6llv4YQiCvYlQet4SK4MHK
YfKkfu3cQCPa/nNSerufwuRIfKGxg8/vkEBx/GxYMBR0aM/2YfZ15yjNze2KqnvN
dVXaCBRebeCl1RKXuneBhCoHBkSbOxW1Bh2RsMLm9EOgDIlshdY+ZmeZqy61TOVl
qTQkdHsmXnitxpLhlQF3vrvCBk876BQWu2LrmDz7mFMUn6DZwzrq5SaI5jgK+Sms
Crf4WShXCaGdPPl1qaBJDR3OjiudvhGcglKYCI33SqTfE7dBfBBe+gDRSyfCoAJQ
Na+AVn/vP33wuAhw00vZ5w9qsu1ru6vPDNF36Web4DsnFGdKFLLe+36IJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7Vml9jx+Pc8ItFUMOQxqB67Y+8MB8GA1UdIwQY
MBaAFGj0O1u8xJYoBuqTIuwpLptm3czFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wNDZmZmUtMDVlYi00YzhjLTg1NDUt
MDI0ODNlNjQ4MmNiLzEvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wNDZmZmUtMDVlYi00YzhjLTg1NDUtMDI0ODNlNjQ4MmNi
LzEvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdrZrO3X
71/TfHq5sHGGNdegfcmy/c4kf2nxke/bCN7cyqNwkWyYBACKga0Esn2/7IRDq66I
KSpNZmK82MERh/40TsQPHn9us5py11J12YGfJ25jmpk94ahanq5+5gKY2iQgBCPb
YCCJvcLD2oIQ/g1tJqFQEgYUKOi53HyQ770YftvwgcZ/RK4OV/Vi5CfdigW6tBJ0
jQdoFRlOQtVvhLAWrn8YQEiwBhQHHZn0XNDEvgKICK/Kz6kQWl6zDMmARKjQ3xLD
yBGt3mlRbDmb/JAhB12Af9e7QaVGpRozMBA01qVW9ZNulreRKIUpRdUfFsnyWXlV
m6PDTke1BDTbWg==
-----END CERTIFICATE-----
Generated at Sat Mar 7 14:15:21 2026 by rpki-client