Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
File: aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft (raw, json)
Hash identifier: HhKhGw/00KewBufuA36KTL8LZRzJOgQF/NBeJFc/I7Q=
Subject key identifier: 6E:E8:47:75:1B:40:EF:14:C7:07:99:8A:C6:F4:58:A4:0C:7B:37:B9
Authority key identifier: 68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
Certificate issuer: /CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Certificate serial: 019D36E47BCD6756B8F0BE384FC0CBDE6FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
Manifest number: 1771
Signing time: Sun 29 Mar 2026 00:00:36 +0000
Manifest this update: Sun 29 Mar 2026 00:00:36 +0000
Manifest next update: Mon 30 Mar 2026 00:00:36 +0000
Files and hashes: 1: MZL9_X29mF5ZTnP-08X3-lUJHsk.roa (hash: Ys149eirL94m3+q1yxe8UOWC49nh/48e67xp1NKzimk=)
2: aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl (hash: OvxAWqskh/HE9XToqSx9FcEfKVzA09q6HfTVP64vrX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:e4:7b:cd:67:56:b8:f0:be:38:4f:c0:cb:de:6f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68fed508cca5f716e4dd974de3500e7dd19baa15
Validity
Not Before: Mar 29 00:00:36 2026 GMT
Not After : Mar 30 00:00:36 2026 GMT
Subject: CN=6ee847751b40ef14c707998ac6f458a40c7b37b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:58:64:98:d5:43:b0:af:3f:6f:d2:7f:71:17:
6e:cf:f7:03:d5:fa:e5:f0:6e:7d:2d:ca:b0:ea:bf:
e5:32:6e:26:75:ae:6b:a2:4e:a0:6b:87:c7:61:a9:
45:2f:1a:bc:a4:3a:5d:37:aa:2a:09:9c:9f:43:96:
eb:b1:f0:29:19:24:e3:97:3a:53:69:1f:33:12:c5:
17:ac:8d:7b:5b:8e:65:43:5c:02:97:fa:51:43:17:
50:c8:77:71:d9:d3:7f:f7:df:b1:98:c1:56:be:bb:
7e:06:b1:2c:0a:66:d9:e9:45:6e:50:27:5f:bc:76:
f9:cd:e2:08:f1:3d:1a:5a:8b:d5:33:61:36:ea:74:
d7:83:a9:ff:ef:4a:47:2b:6f:99:78:80:c5:74:6e:
73:ce:db:bc:44:55:4d:5b:77:87:9d:c4:2c:1b:75:
c2:ba:e7:5f:f4:f8:01:d6:78:ec:14:41:62:c2:71:
4e:17:a0:aa:ba:34:62:05:e2:19:32:11:1a:5b:5b:
ac:bc:27:35:18:14:ae:d8:20:65:a7:90:5e:ff:49:
04:ac:e2:ad:e6:b0:18:c7:2c:e5:f2:20:6f:86:84:
c8:5a:17:8d:88:f8:5d:29:29:5d:d2:d9:e1:e3:49:
25:6d:cb:b6:b9:33:f4:0e:4b:d3:ac:4c:9c:48:b0:
61:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:47:75:1B:40:EF:14:C7:07:99:8A:C6:F4:58:A4:0C:7B:37:B9
X509v3 Authority Key Identifier:
keyid:68:FE:D5:08:CC:A5:F7:16:E4:DD:97:4D:E3:50:0E:7D:D1:9B:AA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aP7VCMyl9xbk3ZdN41AOfdGbqhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c5ea31-7bc1-477a-8bdc-41a35e7c22f8/1/aP7VCMyl9xbk3ZdN41AOfdGbqhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a6:50:46:d3:44:bf:0f:b7:e1:4a:3f:5c:54:c3:d0:b9:0f:
43:c6:4f:96:e0:8d:d0:89:83:76:16:d2:4e:a8:a4:79:1f:44:
a6:37:e8:87:f1:e7:16:ca:24:05:1a:f3:f2:f5:75:b7:1a:1b:
de:47:bf:1b:ce:17:3f:c5:ec:74:ef:6d:23:c1:1b:0c:3d:d4:
6f:6c:f2:62:71:93:d8:f7:f6:87:f7:e9:68:ba:9a:ab:68:b9:
a5:b7:a8:58:e2:a4:7c:ff:81:b8:7a:50:9f:79:f6:4e:af:75:
27:26:9e:88:51:a4:8f:02:4c:b2:5b:57:66:c5:dd:b1:93:f4:
08:46:be:59:8a:c7:6b:7c:a4:90:bc:ab:f4:97:b6:4a:cb:fa:
58:f5:cf:a5:96:00:c4:5d:2b:8d:01:9a:80:77:2e:16:ff:fa:
99:7a:82:a6:33:bd:8d:57:07:c5:44:64:f4:61:8a:f1:19:21:
ba:f4:1c:26:1d:aa:aa:ca:e6:a6:d9:51:8f:d8:49:4a:96:20:
c7:60:0a:9a:08:00:97:bd:8b:7a:45:88:12:bc:f9:dd:7b:e6:
5e:68:5a:37:b9:74:18:fb:b5:5f:6d:fc:82:01:13:f7:02:bb:
4d:1b:37:a5:1f:0e:db:af:80:86:21:0f:45:56:04:ea:9c:ac:
c0:c1:dd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:16 2026 by rpki-client