Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json)
Hash identifier: PujOmOfUaVGkqTlpZMEnM7115uYcqmQ6T8h+Ar8u2OA=
Subject key identifier: A5:39:37:CF:B0:5A:87:E9:E4:3D:52:27:63:E7:88:7D:9E:6C:39:4D
Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Certificate serial: 019F859F97DC85CEAE92639682E978AAC340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
Manifest number: 03F3
Signing time: Tue 21 Jul 2026 17:00:56 +0000
Manifest this update: Tue 21 Jul 2026 17:00:56 +0000
Manifest next update: Wed 22 Jul 2026 17:00:56 +0000
Files and hashes: 1: A5tB2m_AKkFH2MRYLSZP1qj6r7Y.roa (hash: JU4CZpqlBacShwjyBoLo9X21T9K67+NvyzH3SwXTo+Y=)
2: XHzhckAnu87gDfunEM3sM2fHJc4.roa (hash: J4SR1s2pClNQQ3/S6LW+95K5vqFvopp0j499gt2QsWY=)
3: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: KNOXfGgNcO/5VST5A4Z294ooNIRgf/ttvqGkpCUMgTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:97:dc:85:ce:ae:92:63:96:82:e9:78:aa:c3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Validity
Not Before: Jul 21 17:00:56 2026 GMT
Not After : Jul 22 17:00:56 2026 GMT
Subject: CN=a53937cfb05a87e9e43d522763e7887d9e6c394d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:bb:f3:f1:fd:67:b5:b1:e7:c8:0f:6f:f8:
64:dd:5a:46:14:65:aa:0f:7b:61:3a:27:0d:ab:b3:
a4:56:10:a0:9c:6f:a2:a8:a9:4b:74:b6:6b:d8:78:
2b:24:fe:7a:f8:e7:e7:d5:e3:4e:0a:47:ee:c6:37:
3c:01:7a:1b:73:ca:1a:32:34:12:e1:92:a3:cc:8d:
41:35:e6:aa:25:56:ee:4b:3a:24:46:50:9b:5b:8d:
73:b8:45:b2:db:07:83:18:78:79:48:4b:05:c6:16:
f1:64:de:6c:4a:70:11:dd:9a:29:4d:1a:f3:7a:0e:
65:10:d1:a0:9c:25:4d:45:7a:ec:83:ff:d8:6a:97:
6e:65:27:97:e3:e7:55:18:3d:16:7d:12:3f:73:79:
72:a0:7a:ed:3d:ba:52:5a:3c:4c:70:67:47:ed:05:
03:83:37:80:9d:b8:0f:9c:78:fc:73:4e:99:bf:4d:
ec:33:a4:ff:ac:3a:2e:42:f5:0e:22:7f:4f:da:c6:
f9:e2:30:28:20:29:54:02:69:12:b6:99:17:88:ce:
0a:32:09:d2:ec:db:26:ac:bc:56:e5:c2:ad:96:76:
f2:df:46:ae:f1:e9:1c:96:71:7b:cb:2a:fc:e2:a6:
d6:2e:82:28:87:f9:b1:5e:cd:b7:2c:ec:82:ce:3b:
e8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:39:37:CF:B0:5A:87:E9:E4:3D:52:27:63:E7:88:7D:9E:6C:39:4D
X509v3 Authority Key Identifier:
keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:87:8f:0e:52:6a:a0:1a:d7:c9:7d:d6:17:3d:30:47:b3:4f:
e4:2e:3c:07:f3:e3:cd:77:4d:dc:f7:d1:c8:a8:c6:e5:26:79:
08:a0:1d:62:f2:ff:52:94:5e:40:c7:e8:cc:4d:f6:77:58:87:
d7:86:02:ba:76:1f:f6:ac:e4:be:2b:84:76:59:be:e0:d0:dc:
dc:14:52:19:96:b0:8d:2b:a0:01:32:59:d3:07:3c:f4:60:28:
6b:f1:e6:4c:de:e1:bc:7d:18:d5:fb:7e:28:0c:e8:31:86:26:
ab:b1:3b:ff:0a:eb:2a:38:75:fc:0f:81:74:23:4d:35:55:2b:
49:c1:e6:a5:35:76:8b:db:c2:17:27:d5:44:68:f7:94:6d:e0:
c2:24:18:7b:6e:1d:4e:5c:fb:1c:40:f7:ca:8a:42:e5:a4:dd:
cd:ce:92:0a:c9:61:f0:b9:39:14:71:db:f3:ff:31:9c:ed:c9:
16:c0:8b:74:3b:8c:47:f4:a7:fb:bb:af:24:36:a2:8a:29:b4:
90:79:ab:0f:4e:84:2f:d9:22:87:b0:97:01:90:96:d0:59:73:
83:c8:87:0c:1f:0d:df:4f:ac:ba:79:2e:47:c5:16:9d:03:40:
30:cf:64:13:1e:d1:74:ee:7f:8d:0a:a0:16:06:c4:1d:a3:51:
41:6c:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:16:03 2026 by rpki-client