Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
File: aPYGg7N3JXQn279uzjXixYWjsB0.mft (raw, json)
Hash identifier: 5cjSgalg6Q2zYZ80xO+iyJrTIuqWQbsptR2GZ99nAJc=
Subject key identifier: D9:26:D8:23:78:CD:F6:52:9F:6F:2B:5C:3C:05:E9:AD:0C:C6:1A:49
Authority key identifier: 68:F6:06:83:B3:77:25:74:27:DB:BF:6E:CE:35:E2:C5:85:A3:B0:1D
Certificate issuer: /CN=68f60683b377257427dbbf6ece35e2c585a3b01d
Certificate serial: 01A00394EEAA748FDE1F2342A415BB05DDB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
Manifest number: 1A02
Signing time: Sat 15 Aug 2026 04:01:27 +0000
Manifest this update: Sat 15 Aug 2026 04:01:27 +0000
Manifest next update: Sun 16 Aug 2026 04:01:27 +0000
Files and hashes: 1: aPYGg7N3JXQn279uzjXixYWjsB0.crl (hash: clOs6scj0dsX8ODoLGz1bU82/ZPNERFAh4MBqwYQjqk=)
2: eJ3f1i44Rqh5dEICPulbHl4WkkI.roa (hash: kZed20xL2+OJp4rVcGTuqnAX+7hPge7JicJ6LEk/ItE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:ee:aa:74:8f:de:1f:23:42:a4:15:bb:05:dd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f60683b377257427dbbf6ece35e2c585a3b01d
Validity
Not Before: Aug 15 04:01:27 2026 GMT
Not After : Aug 16 04:01:27 2026 GMT
Subject: CN=d926d82378cdf6529f6f2b5c3c05e9ad0cc61a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:1d:54:e2:92:32:b0:39:9d:fb:f3:6e:b5:
32:79:7d:7d:ee:f1:a0:84:2f:13:5b:6c:88:bf:48:
cb:27:1e:54:16:1b:8a:64:54:37:f6:61:2b:ca:85:
a7:9a:47:75:17:11:f2:0f:cc:e5:7d:ba:b1:87:47:
63:c9:e4:e1:47:a1:05:09:05:8f:cb:53:59:dc:e5:
af:e0:c4:99:3e:f0:f4:f8:22:99:c7:a2:51:64:f7:
bf:42:50:05:8e:f0:e2:c5:bd:d8:88:47:b4:96:36:
6c:e1:31:76:2b:b9:51:a7:78:4d:fa:20:79:38:1a:
2c:96:88:b0:68:63:24:25:53:c5:a5:41:78:fe:58:
34:ba:53:3f:ab:76:5d:a0:d3:02:b2:f0:65:d8:bd:
e1:bf:f2:5c:15:92:8b:cd:42:53:e7:e0:69:e6:30:
ed:f6:cf:3b:48:f1:58:1c:57:ff:59:95:07:dc:b0:
6f:20:e1:be:e4:42:40:c4:2b:29:c7:88:89:7a:44:
f8:4f:26:ae:b6:ef:11:eb:67:44:a0:b7:20:b2:58:
25:30:c7:94:a3:8e:c6:d1:19:1f:62:cb:33:7f:e6:
27:84:00:f2:dc:20:b8:27:bc:49:6b:f1:6c:ad:82:
14:ac:3f:2f:e2:ce:67:b5:7d:07:35:e5:de:14:33:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:26:D8:23:78:CD:F6:52:9F:6F:2B:5C:3C:05:E9:AD:0C:C6:1A:49
X509v3 Authority Key Identifier:
keyid:68:F6:06:83:B3:77:25:74:27:DB:BF:6E:CE:35:E2:C5:85:A3:B0:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPYGg7N3JXQn279uzjXixYWjsB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2eb969-863a-462d-9f9d-35474036a9d7/1/aPYGg7N3JXQn279uzjXixYWjsB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b3:52:e1:51:65:d9:40:56:c1:dd:f8:70:e1:a7:51:38:8c:
45:a4:6f:46:b0:1a:5e:c8:0e:aa:6f:32:9e:f7:48:13:70:6a:
10:b3:11:a9:3f:f5:1c:14:59:79:f7:8d:47:7c:d5:67:53:fe:
f3:bc:90:46:15:3d:e2:78:25:b4:0f:69:6a:6c:7a:2b:81:ec:
df:5e:7e:98:c0:74:6d:2e:e3:d0:c1:03:d3:85:78:88:80:c2:
c1:b6:13:16:6f:5d:d2:f0:e0:78:05:18:c1:bb:91:ff:fe:60:
7f:a2:31:2c:87:44:91:b4:86:b6:18:47:09:94:82:a2:9a:0f:
68:cd:f4:97:8a:00:56:a4:be:6b:f4:14:0f:7f:82:12:33:fe:
94:94:b0:53:e1:d4:bd:de:51:3a:77:73:d2:27:91:3a:b0:18:
fc:1e:41:c3:4e:4f:e3:46:13:f2:b0:0c:dc:bc:38:88:19:1a:
e7:1f:a2:53:c9:2e:4a:25:df:84:cc:d2:46:42:66:af:7c:61:
e4:41:07:9f:aa:8a:34:59:73:7b:16:44:7f:5a:5b:fd:61:fe:
ff:ad:e1:51:78:32:5f:9a:7a:3c:86:98:f8:52:40:d2:a4:a6:
86:96:98:26:6d:70:97:40:4c:12:25:dc:a7:70:28:ed:49:9c:
29:df:4b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:40:48 2026 by rpki-client