Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
File: aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft (raw, json)
Hash identifier: vIIvl4wlScMpkCsZ0fBYkxAtJ1Q+CCV5719L+KvMokc=
Subject key identifier: 72:12:89:5C:34:CA:8D:80:7A:64:7A:96:CC:4F:5F:2B:19:D4:25:61
Authority key identifier: 68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
Certificate issuer: /CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Certificate serial: 019FF97EB1FBF6868459CE312A5FB0949D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
Manifest number: 18FB
Signing time: Thu 13 Aug 2026 05:00:57 +0000
Manifest this update: Thu 13 Aug 2026 05:00:57 +0000
Manifest next update: Fri 14 Aug 2026 05:00:57 +0000
Files and hashes: 1: aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl (hash: DLIM/PiPL193BDMkFwjWrEscw4NgN+7rnwQDPl+1gOU=)
2: gNhszUNFjUvnmp6uYZywKw0VK4Q.roa (hash: OoYbjhXKEH09k93nIljEgaEwB00MnQM3qMLjic/Ifxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:7e:b1:fb:f6:86:84:59:ce:31:2a:5f:b0:94:9d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Validity
Not Before: Aug 13 05:00:57 2026 GMT
Not After : Aug 14 05:00:57 2026 GMT
Subject: CN=7212895c34ca8d807a647a96cc4f5f2b19d42561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:a1:e7:b4:c1:6a:bb:50:e9:6a:7e:ea:87:
e2:42:c0:d0:c3:44:e0:ef:3a:43:0d:68:51:e5:a6:
aa:ab:4c:7e:ac:46:ed:c7:b2:35:09:b8:83:81:53:
d4:dd:64:1e:68:ce:09:a2:91:72:ef:49:02:e6:f1:
f6:11:f9:70:e5:da:93:82:6a:8d:a2:94:e3:73:26:
25:c4:63:55:4e:6b:27:90:34:ee:36:29:16:51:cd:
04:e2:e1:9a:57:9c:51:70:ae:06:3b:7e:22:83:0c:
99:60:7d:98:af:02:15:3c:7f:10:30:d3:4b:a9:1e:
cc:a3:e9:e2:f2:02:8f:23:da:f4:1b:f1:48:14:0c:
a8:ed:2d:5f:ce:c3:79:57:d2:f7:97:5f:65:11:d6:
c9:34:c3:b7:bc:d4:ad:32:a8:e5:26:7d:45:e0:8b:
ad:d8:98:6f:b8:6a:4a:4a:63:07:35:3b:ef:d6:ee:
c9:e2:6d:02:2b:02:99:0f:9d:8a:29:36:d2:36:c5:
12:ec:aa:49:ba:2a:43:94:f3:5f:30:25:6e:a2:c9:
3b:1b:bc:a9:9f:39:4f:25:2f:57:7a:8b:e4:cf:18:
89:18:e3:8d:ef:ed:52:3f:2f:57:03:ab:3b:a3:43:
6d:c2:08:13:8e:08:ed:c1:ab:44:bd:3d:60:21:2f:
b9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:12:89:5C:34:CA:8D:80:7A:64:7A:96:CC:4F:5F:2B:19:D4:25:61
X509v3 Authority Key Identifier:
keyid:68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6e:1e:e3:60:06:3f:97:bd:02:ab:7f:16:eb:01:7f:dd:27:
ef:ff:cf:9a:33:0f:74:17:8a:b1:06:6a:7e:c8:4e:1b:23:81:
3c:82:d7:64:d6:68:3e:2d:98:f1:d2:66:7c:d6:9e:e3:cd:67:
bf:9a:95:85:ba:02:84:b3:99:74:d2:c3:b9:e4:d8:56:0b:85:
c7:f3:70:c9:55:c5:bf:d8:be:5b:fa:31:84:68:99:7d:3b:f7:
6c:b1:40:f2:f7:78:13:73:c9:e5:50:49:7b:3e:0a:86:33:42:
96:9c:9d:a4:14:f9:6c:f1:f2:4c:9f:3e:61:0c:8e:03:2b:e8:
56:fa:c3:c5:ac:41:6e:a9:b4:22:47:62:38:18:65:4c:82:6a:
a5:c1:e2:24:e8:ab:0f:e8:62:9a:24:ab:38:c5:c1:a8:1e:5c:
9a:3c:9c:53:4d:f7:15:b3:2f:ed:72:4b:29:55:6c:40:66:a9:
4d:e5:d8:5d:e0:f9:8d:8f:1c:c0:a8:67:80:0a:61:e4:2a:cb:
eb:4b:b4:fd:3b:70:ca:3d:89:bb:70:b2:b6:15:c7:df:a4:43:
c6:f2:be:41:96:d0:f4:32:b6:cb:7a:8b:e6:19:e0:e8:65:38:
1c:e0:9c:9c:e7:a4:fb:ca:55:f7:73:f0:56:49:69:76:29:62:
f4:8b:d7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:16:29 2026 by rpki-client