Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json)
Hash identifier: BwCDzQPGEW2XnnKADA943Guu9gabGHCMSv6APtg2AIc=
Subject key identifier: 53:2F:10:48:8F:5D:0B:1C:5B:A6:B0:C4:30:1A:41:6F:7D:E3:5D:B8
Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Certificate serial: 019DB05827782E9254F926F13D89DA00C93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
Manifest number: 0300
Signing time: Tue 21 Apr 2026 14:01:00 +0000
Manifest this update: Tue 21 Apr 2026 14:01:00 +0000
Manifest next update: Wed 22 Apr 2026 14:01:00 +0000
Files and hashes: 1: A5tB2m_AKkFH2MRYLSZP1qj6r7Y.roa (hash: JU4CZpqlBacShwjyBoLo9X21T9K67+NvyzH3SwXTo+Y=)
2: XHzhckAnu87gDfunEM3sM2fHJc4.roa (hash: J4SR1s2pClNQQ3/S6LW+95K5vqFvopp0j499gt2QsWY=)
3: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: K6Hvpq3g+sH9gb1QMqb9LHKd7Fe6ewucRWoz5cHoAP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:58:27:78:2e:92:54:f9:26:f1:3d:89:da:00:c9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Validity
Not Before: Apr 21 14:01:00 2026 GMT
Not After : Apr 22 14:01:00 2026 GMT
Subject: CN=532f10488f5d0b1c5ba6b0c4301a416f7de35db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3d:44:76:1f:b8:f5:eb:ca:92:4a:f0:4a:af:
b3:98:43:58:58:cb:4f:4e:30:64:f0:80:b6:de:d9:
66:90:63:8d:29:11:f1:48:06:78:3f:28:cd:a3:a4:
e7:a3:d8:cc:fc:be:97:ca:97:df:43:23:c9:c4:86:
5e:ae:d6:e5:f9:ae:7c:23:28:f1:b1:31:2b:00:44:
be:e9:ac:8e:02:5e:de:c6:0f:2f:7c:69:99:e8:86:
ea:5d:d5:bb:5d:49:bf:58:48:4b:2a:2c:ae:f9:f6:
10:ca:e3:48:23:ee:c7:b3:a5:b6:a9:8e:d8:c9:59:
48:f1:5c:32:c7:0b:4b:4f:ca:25:b9:a1:ba:80:03:
af:23:41:77:ab:b8:d1:79:31:4b:d9:fe:c0:d0:91:
c0:35:b1:61:c3:dd:d1:38:d1:d1:f3:5e:f0:09:76:
c4:45:94:35:dc:ab:f3:12:82:04:b2:8d:4e:9e:cb:
6b:78:3e:4f:f9:e4:c0:c0:f8:c2:fb:8a:aa:55:2e:
f5:e8:a3:07:1f:59:43:b5:27:43:42:01:af:e0:05:
03:41:c8:c3:05:97:eb:69:16:7f:35:56:2f:bf:81:
88:93:b4:03:29:2c:dd:57:60:0f:e1:6c:1a:09:11:
31:e5:6f:c0:9a:bd:98:60:3d:05:1e:e1:54:7f:a1:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2F:10:48:8F:5D:0B:1C:5B:A6:B0:C4:30:1A:41:6F:7D:E3:5D:B8
X509v3 Authority Key Identifier:
keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:18:c5:93:6f:ac:67:a7:0a:a4:20:81:c1:58:c1:90:40:56:
71:b6:ab:6d:32:a1:01:ee:82:0d:f6:40:f5:c0:dc:71:06:df:
4b:4b:77:b6:2b:06:dd:e7:1e:ed:d5:2b:d7:ef:5c:5e:c2:ba:
be:d4:5c:fc:eb:37:71:7c:3b:0f:e3:38:d8:68:b0:4a:41:84:
7f:2d:fb:e7:bd:28:e6:be:47:24:99:17:76:a8:e7:94:18:b8:
e7:69:47:64:43:67:0d:0a:4a:ef:75:fc:c7:f3:93:e4:a9:2b:
8a:5e:a0:1f:1a:f4:32:e5:49:6e:4e:55:24:76:85:0a:96:96:
cc:1c:f3:ad:06:14:10:5e:d3:0f:80:de:8d:63:3d:5c:80:d5:
60:c1:16:b1:88:1d:2d:0a:fc:3d:6f:ea:3f:10:be:59:0e:6f:
b6:60:4b:5a:69:35:84:71:4f:77:9e:d9:bf:da:7a:a9:cc:58:
6d:d3:ea:77:df:ee:9c:53:d9:5e:34:af:82:b2:77:ed:f4:3f:
dc:ed:57:7a:50:c1:5f:8c:07:80:7c:16:9d:d0:b8:c6:3b:40:
63:18:64:ca:e8:34:69:0e:47:a2:49:18:5d:1a:5f:2c:86:25:
66:0f:fb:1b:23:cc:6a:11:84:4a:c1:72:f7:3e:d6:51:66:b0:
39:f5:e2:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2wWCd4LpJU+SbxPYnaAMk6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZjQzYjViYmNjNDk2MjgwNmVhOTMyMmVjMjkyZTliNjZk
ZGNjYzUwHhcNMjYwNDIxMTQwMTAwWhcNMjYwNDIyMTQwMTAwWjAzMTEwLwYDVQQD
Eyg1MzJmMTA0ODhmNWQwYjFjNWJhNmIwYzQzMDFhNDE2ZjdkZTM1ZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4z1Edh+49evKkkrwSq+zmENYWMtP
TjBk8IC23tlmkGONKRHxSAZ4PyjNo6Tno9jM/L6XypffQyPJxIZertbl+a58Iyjx
sTErAES+6ayOAl7exg8vfGmZ6IbqXdW7XUm/WEhLKiyu+fYQyuNII+7Hs6W2qY7Y
yVlI8VwyxwtLT8oluaG6gAOvI0F3q7jReTFL2f7A0JHANbFhw93RONHR817wCXbE
RZQ13KvzEoIEso1OnstreD5P+eTAwPjC+4qqVS716KMHH1lDtSdDQgGv4AUDQcjD
BZfraRZ/NVYvv4GIk7QDKSzdV2AP4WwaCREx5W/Amr2YYD0FHuFUf6EmLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMvEEiPXQscW6awxDAaQW994124MB8GA1UdIwQY
MBaAFGj0O1u8xJYoBuqTIuwpLptm3czFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wNDZmZmUtMDVlYi00YzhjLTg1NDUt
MDI0ODNlNjQ4MmNiLzEvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wNDZmZmUtMDVlYi00YzhjLTg1NDUtMDI0ODNlNjQ4MmNi
LzEvYVBRN1c3ekVsaWdHNnBNaTdDa3VtMmJkek1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBjFk2+s
Z6cKpCCBwVjBkEBWcbarbTKhAe6CDfZA9cDccQbfS0t3tisG3ece7dUr1+9cXsK6
vtRc/Os3cXw7D+M42GiwSkGEfy37570o5r5HJJkXdqjnlBi452lHZENnDQpK73X8
x/OT5Kkril6gHxr0MuVJbk5VJHaFCpaWzBzzrQYUEF7TD4DejWM9XIDVYMEWsYgd
LQr8PW/qPxC+WQ5vtmBLWmk1hHFPd57Zv9p6qcxYbdPqd9/unFPZXjSvgrJ37fQ/
3O1XelDBX4wHgHwWndC4xjtAYxhkyug0aQ5HokkYXRpfLIYlZg/7GyPMahGESsFy
9z7WUWawOfXiCQ==
-----END CERTIFICATE-----
Generated at Tue Apr 21 22:53:40 2026 by rpki-client