Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
File: aKfCyE_6STTPD3PvGhoaM3hzGCY.mft (raw, json)
Hash identifier: nCnq9QgHwrAzuvfy2aM61L8D5tvIaluVsZQtdwQIFSw=
Subject key identifier: 33:54:6C:8F:32:DD:A6:CD:04:EB:4E:84:CF:9E:61:98:5E:9D:84:4B
Authority key identifier: 68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
Certificate issuer: /CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Certificate serial: 019DCE997C0397073D8ACA5E4D4711D1247D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
Manifest number: 0FC3
Signing time: Mon 27 Apr 2026 11:00:58 +0000
Manifest this update: Mon 27 Apr 2026 11:00:58 +0000
Manifest next update: Tue 28 Apr 2026 11:00:58 +0000
Files and hashes: 1: 7Mj5v1lcOBzmcBBC8jLwVKnmF6E.roa (hash: FZGMBdbWDI4SBVgHGU6EFIDpQ6waV160tdsD6LVMmXc=)
2: aKfCyE_6STTPD3PvGhoaM3hzGCY.crl (hash: w/uAmWssMnKqXPDmZy/xCUQq4+1sI7xUQdYoCDzMK28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:7c:03:97:07:3d:8a:ca:5e:4d:47:11:d1:24:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a7c2c84ffa4934cf0f73ef1a1a1a3378731826
Validity
Not Before: Apr 27 11:00:58 2026 GMT
Not After : Apr 28 11:00:58 2026 GMT
Subject: CN=33546c8f32dda6cd04eb4e84cf9e61985e9d844b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:ea:ea:86:2c:57:7c:18:68:5f:95:23:4c:
2c:9b:21:09:13:d8:76:99:df:85:f2:0d:67:55:76:
65:80:0e:d2:89:b5:70:b0:1c:12:d0:b2:ac:ee:41:
3d:97:35:1b:88:45:c5:a5:ac:f4:ef:7b:f8:4e:44:
31:4f:a4:25:ae:46:dc:f8:35:47:e5:71:e9:ac:bd:
4c:01:62:60:54:86:11:04:c7:1d:4e:91:c9:84:28:
67:70:6d:2b:cd:51:a3:a4:dc:0c:cf:6c:48:d8:69:
76:35:95:a5:f1:c3:10:25:62:a5:77:94:6d:5f:d8:
5e:07:d7:40:cb:46:25:37:88:b2:75:5a:9f:27:86:
c3:a8:1f:eb:5d:94:49:e7:58:0a:14:a9:a8:0f:a8:
9c:64:4e:ab:45:10:9e:ef:ef:23:61:00:12:d8:6c:
33:b5:e6:0a:ac:2e:2c:ad:5e:3a:e5:fb:07:64:23:
ed:dd:98:3c:f9:86:bb:11:4d:f6:74:d8:59:f2:35:
7d:a0:92:5f:ed:45:9a:11:27:92:6e:74:f1:0f:73:
9d:a2:70:20:e6:86:f6:91:41:9a:71:ee:a9:7d:50:
28:a7:3f:00:d2:36:59:cc:98:6e:c5:8d:f2:ed:1b:
da:fb:cd:82:96:b2:eb:b5:84:17:b8:3f:f5:0f:65:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:54:6C:8F:32:DD:A6:CD:04:EB:4E:84:CF:9E:61:98:5E:9D:84:4B
X509v3 Authority Key Identifier:
keyid:68:A7:C2:C8:4F:FA:49:34:CF:0F:73:EF:1A:1A:1A:33:78:73:18:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKfCyE_6STTPD3PvGhoaM3hzGCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe455d-f6ce-436c-8327-db6ddb4a44e5/1/aKfCyE_6STTPD3PvGhoaM3hzGCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ee:6e:99:61:2f:7f:db:44:81:ba:5e:bb:0b:1c:9d:b5:ca:
e2:87:f9:e2:33:a4:e4:08:6b:23:d7:43:15:a4:3d:ff:07:fa:
13:63:69:a6:f4:93:d2:b8:4f:05:46:75:13:be:79:06:0c:d5:
c8:5b:13:41:3e:76:76:d7:d5:7c:47:c8:b2:c1:43:44:7e:c5:
19:14:6e:7f:16:16:e4:7e:0a:c3:b9:15:c4:34:6d:a0:5a:f4:
fd:a5:10:77:0d:1d:e9:b2:f2:a2:b9:f6:6f:29:5f:95:6b:b8:
24:93:64:dd:b0:99:0a:02:3e:40:d0:15:71:a8:8d:b8:a2:fa:
37:59:43:8e:b8:14:90:60:ac:25:29:7b:88:3a:47:c0:71:ce:
cd:fe:7a:d3:9e:c3:c4:2a:34:9f:a1:e0:e3:f0:08:24:6c:e7:
3d:4f:43:a6:0e:48:e5:f5:71:3b:41:20:a2:b2:5a:9f:f7:a2:
52:45:f1:58:f8:7d:86:84:43:6a:4d:96:d9:b9:76:66:58:6c:
1d:02:5b:8d:ea:c6:20:78:7b:47:62:54:3b:66:0b:79:bd:e9:
56:c2:43:7c:24:bd:86:2f:b8:56:6b:fe:8f:dc:fe:e3:51:d3:
a0:7d:1f:70:1b:d4:c4:38:d8:da:a4:10:12:1b:75:d2:fe:b8:
3c:e6:c9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:29:14 2026 by rpki-client