Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
File: aPQ7W7zEligG6pMi7Ckum2bdzMU.mft (raw, json)
Hash identifier: IqZ10itY7hF+kNSRolxirFUag3F1r2hEkLsDlxK/d7Q=
Subject key identifier: 82:21:CD:C4:01:92:69:B2:E4:02:EF:B8:2E:3A:49:25:8B:50:25:3B
Authority key identifier: 68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
Certificate issuer: /CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Certificate serial: 01A17C5FFF0ADE2D9D8CD0A1F5C7156685B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
Manifest number: 04F8
Signing time: Tue 27 Oct 2026 08:00:28 +0000
Manifest this update: Tue 27 Oct 2026 08:00:28 +0000
Manifest next update: Wed 28 Oct 2026 08:00:28 +0000
Files and hashes: 1: IEEGCXxK9NZZAyvgooGe_0krRwA.roa (hash: ufaDl8VQDgum3aim68/T7UN4n3wx+m74Tx5ctK6jZmk=)
2: XHzhckAnu87gDfunEM3sM2fHJc4.roa (hash: J4SR1s2pClNQQ3/S6LW+95K5vqFvopp0j499gt2QsWY=)
3: aPQ7W7zEligG6pMi7Ckum2bdzMU.crl (hash: WXXHgRH5lrsbjtOeYHMzVEvUNgbtdD2GYoxsFWGtXSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:ff:0a:de:2d:9d:8c:d0:a1:f5:c7:15:66:85:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f43b5bbcc4962806ea9322ec292e9b66ddccc5
Validity
Not Before: Oct 27 08:00:28 2026 GMT
Not After : Oct 28 08:00:28 2026 GMT
Subject: CN=8221cdc4019269b2e402efb82e3a49258b50253b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:fd:ea:9d:f5:d0:09:03:c3:91:a9:23:c2:
f9:ac:a4:7e:1a:c0:9e:0a:83:9f:1d:b0:d2:b0:ae:
a9:b1:c9:b9:fc:14:f7:c3:be:a0:c4:67:50:72:92:
3d:e7:2c:80:02:3d:2b:f0:d9:6a:6a:db:d2:87:52:
fe:06:15:1b:d2:d5:78:a1:14:d5:d6:e6:34:3d:c8:
90:1a:22:f4:a2:f1:2b:71:9a:ea:a4:69:c1:67:40:
d6:c6:12:ec:85:dc:64:6d:24:de:86:2a:1a:33:28:
33:c1:d0:3d:81:a3:0b:6e:c8:6a:fd:c5:9d:df:eb:
7b:19:1d:20:95:18:2c:af:d7:2a:83:a9:97:68:8d:
93:6f:96:d9:03:c7:7f:45:61:74:50:ac:e7:63:a8:
c4:b8:1d:b6:25:46:0e:01:d3:e2:3c:c7:58:02:6f:
2d:50:98:25:f2:7c:14:2a:22:b1:c0:a5:b0:b5:3e:
03:70:2a:3e:6f:62:07:60:ba:7b:c3:9b:a1:70:d2:
1d:c9:bb:f3:e4:15:3d:90:e5:cd:b4:bf:bd:cd:ed:
e5:09:11:10:bc:24:2f:db:9c:8a:d6:cc:ce:82:31:
06:81:ba:78:86:1e:17:24:54:72:16:75:96:1e:41:
86:f2:27:8e:85:b4:8c:8e:54:44:c4:86:57:f6:8e:
3e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:21:CD:C4:01:92:69:B2:E4:02:EF:B8:2E:3A:49:25:8B:50:25:3B
X509v3 Authority Key Identifier:
keyid:68:F4:3B:5B:BC:C4:96:28:06:EA:93:22:EC:29:2E:9B:66:DD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPQ7W7zEligG6pMi7Ckum2bdzMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/046ffe-05eb-4c8c-8545-02483e6482cb/1/aPQ7W7zEligG6pMi7Ckum2bdzMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5c:b7:c1:f0:ad:a6:de:78:af:bf:39:b9:2c:27:06:56:dd:
f6:41:9f:bd:8a:c8:d7:ad:47:20:66:36:6d:23:b4:5d:ac:44:
26:d5:fc:a3:26:b6:27:65:c2:6c:cc:8e:d5:25:12:33:62:a8:
4a:a2:53:61:b4:5f:4d:76:ba:a9:05:0e:29:f3:b2:04:3b:26:
24:55:eb:3f:fd:d4:ae:d1:64:30:8b:8f:45:0f:21:d8:66:55:
95:e9:4c:ee:50:75:db:09:bd:fa:3f:5b:49:73:6c:01:78:37:
9f:fb:72:1d:e2:3c:4c:0f:99:c5:00:27:b8:90:db:98:52:e1:
aa:9b:2a:11:34:74:cc:ff:59:2e:38:7f:a3:20:5c:bb:fd:aa:
a4:5c:69:04:ec:7e:8b:d7:2e:d9:fe:3e:1c:b7:4f:21:54:16:
bc:20:1e:7c:5d:00:4f:bf:05:e5:31:ec:f8:ad:01:e5:55:98:
3f:39:e0:5e:54:f7:49:42:c0:52:4d:a3:28:31:0a:5e:89:ce:
d5:3f:00:6c:1d:c3:5a:0e:07:f0:2c:f8:e7:28:30:c8:6d:dd:
d8:98:8c:59:74:87:e1:74:06:b6:3d:c8:e7:28:e8:de:7b:f5:
0c:49:6e:64:19:26:4d:ce:51:76:e3:29:8b:14:9a:55:91:8a:
b4:b4:6c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:36:32 2026 by rpki-client