Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
File: aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft (raw, json)
Hash identifier: OLlCiCOcIsilLegTqE/ITrdpRYzFm/qkQsVAU3soDL4=
Subject key identifier: C0:7A:14:2A:21:BF:A2:9A:A6:9E:CD:7C:25:97:4C:F3:B1:4D:D5:7C
Authority key identifier: 68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
Certificate issuer: /CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Certificate serial: 01A1193D7685D8F674687A6B5CB3F32277B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
Manifest number: 1990
Signing time: Thu 08 Oct 2026 02:00:20 +0000
Manifest this update: Thu 08 Oct 2026 02:00:20 +0000
Manifest next update: Fri 09 Oct 2026 02:00:20 +0000
Files and hashes: 1: aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl (hash: JCZMGfPgh80tLiFZel/YdCYLAjE88jmYl7hL7BGl2dA=)
2: gNhszUNFjUvnmp6uYZywKw0VK4Q.roa (hash: OoYbjhXKEH09k93nIljEgaEwB00MnQM3qMLjic/Ifxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:3d:76:85:d8:f6:74:68:7a:6b:5c:b3:f3:22:77:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Validity
Not Before: Oct 8 02:00:20 2026 GMT
Not After : Oct 9 02:00:20 2026 GMT
Subject: CN=c07a142a21bfa29aa69ecd7c25974cf3b14dd57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:d9:af:3c:ad:d1:a7:3e:d7:e2:cb:61:f7:
18:87:26:b8:52:1d:87:66:5f:50:53:ef:dc:7a:1a:
bb:0e:95:c3:fd:9d:3d:60:f1:a8:ee:63:8e:47:90:
e0:e5:0a:23:84:78:b6:7b:ed:5c:7a:c4:89:86:25:
ee:11:14:38:3f:f4:d1:d8:b0:63:2f:c6:2e:80:cf:
96:4e:c3:85:e8:e9:af:f7:43:75:a7:43:fe:6c:8f:
99:1a:97:44:a8:12:cb:6d:87:4d:82:53:e9:ab:ad:
86:c2:1e:15:46:aa:d8:a0:69:92:94:19:57:c2:36:
1a:ff:b4:49:05:36:1b:0f:81:bc:9d:37:53:87:03:
b4:8f:9b:fc:a1:78:89:34:24:8d:4b:23:13:c5:73:
2f:5f:41:3c:58:d7:21:b5:ee:c5:be:b2:be:89:24:
d1:ef:9d:35:d7:64:82:02:aa:23:71:af:33:ca:94:
c4:e0:1a:80:ed:65:c2:f6:04:cb:34:fe:1c:63:c9:
8d:3b:32:20:1d:dd:8f:9d:95:c1:54:6f:1d:52:d0:
b5:14:fc:d1:fa:db:f5:e0:66:36:bd:97:79:37:21:
61:31:73:3e:df:b2:da:59:ec:ef:3d:b7:ae:c0:d4:
b3:3d:92:11:5c:bf:f9:f1:e5:74:43:66:68:c2:37:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7A:14:2A:21:BF:A2:9A:A6:9E:CD:7C:25:97:4C:F3:B1:4D:D5:7C
X509v3 Authority Key Identifier:
keyid:68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:69:21:bd:53:5f:b4:93:72:f1:8f:03:7b:31:8d:c3:75:f1:
73:19:0f:61:c6:68:0f:69:ad:d1:ed:bd:36:fa:a1:18:b7:39:
71:87:e9:1d:6f:29:df:54:ce:21:fc:e2:c9:78:08:66:3f:44:
e5:51:f5:59:75:02:e6:50:4f:e9:42:c5:77:39:ca:70:cd:74:
fb:cb:e6:1c:27:75:04:e5:9f:b3:bb:22:a0:ca:08:cb:50:d1:
03:a7:22:fa:c6:d1:26:69:ff:a9:2e:10:a4:94:1e:c4:ff:e3:
21:e0:7d:7c:b0:ff:90:23:69:d1:e9:ac:c3:eb:d2:a2:41:d4:
44:c6:0b:79:7e:c3:ac:8e:56:58:a9:9b:84:75:57:d8:f2:cb:
5a:75:b5:82:a7:f1:23:e1:47:60:65:6f:ce:57:7d:95:7f:12:
df:80:3c:a4:72:4e:53:58:fb:59:5f:76:f3:ab:91:d3:03:42:
94:95:0b:67:f4:3d:6a:5c:c6:74:96:16:4d:a7:56:79:82:0b:
10:18:06:24:db:32:d2:0a:db:dc:c4:c7:92:79:3f:af:88:1c:
a3:9b:d0:2d:28:7b:c0:6f:fa:a6:b5:93:1f:da:77:f0:a0:b7:
4e:27:12:cb:36:40:a2:59:fd:f9:3f:5e:51:98:04:28:1b:9f:
9c:75:b9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:09:44 2026 by rpki-client