Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
File: apBb7RAQVRrlUQyuXu4LuZnSh44.mft (raw, json)
Hash identifier: YnwHTiaeywh6QhZm9Zz6QAMsFTu1+hqzjB4A2O/OaL8=
Subject key identifier: 54:23:FC:E3:EB:63:80:F5:24:30:9E:72:08:D0:FE:F4:1F:DC:FC:65
Authority key identifier: 6A:90:5B:ED:10:10:55:1A:E5:51:0C:AE:5E:EE:0B:B9:99:D2:87:8E
Certificate issuer: /CN=6a905bed1010551ae5510cae5eee0bb999d2878e
Certificate serial: 01A0C85994F97EA2A323EC31C704EB80CB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:01:48 +0000
Manifest this update: Tue 22 Sep 2026 09:01:48 +0000
Manifest next update: Wed 23 Sep 2026 09:01:48 +0000
Files and hashes: 1: 8WO4H3LLmQjh35Y1DhdVPcJaeWw.asa (hash: sduouSzb9jUwQP/768gaM8wQLqZouXh1WtsTxFHYtIM=)
2: apBb7RAQVRrlUQyuXu4LuZnSh44.crl (hash: 4T7g1271Otj/+Ca8Ig/14m6WSr8ENcgKlQrbXWMs+fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:94:f9:7e:a2:a3:23:ec:31:c7:04:eb:80:cb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a905bed1010551ae5510cae5eee0bb999d2878e
Validity
Not Before: Sep 22 09:01:48 2026 GMT
Not After : Sep 23 09:01:48 2026 GMT
Subject: CN=5423fce3eb6380f524309e7208d0fef41fdcfc65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:72:57:8b:9b:1a:6b:09:d5:79:2c:c8:96:
28:7b:54:7c:f9:36:02:1f:64:46:54:1c:82:4c:34:
ba:dc:5c:c6:7b:f7:28:54:14:bb:41:9e:ca:eb:da:
b4:de:df:44:98:e8:dd:4d:8a:f0:e3:77:a6:a9:03:
c2:74:23:14:ba:a0:ae:01:d9:5a:f1:d7:cc:33:23:
9e:9d:42:a6:5c:d2:6f:64:2c:9a:d3:5d:2c:f7:ed:
54:11:98:92:f7:4e:80:80:fc:46:a6:d3:cf:0b:ce:
a1:e4:7a:8f:b7:3f:43:fc:dd:4e:2c:e8:44:fc:13:
87:5e:b2:d9:b2:c4:f2:ae:43:95:e0:90:77:3f:91:
88:53:7a:d8:b0:69:6a:c4:26:a8:7d:59:74:8f:da:
d8:3a:3c:b3:f6:30:3f:58:86:e1:53:28:f3:89:84:
4a:ae:bb:0b:3e:b9:e9:c2:cf:99:1f:b4:10:a5:d2:
ec:f8:3f:f4:2d:46:e4:4a:fb:a9:bc:b0:16:36:c9:
19:96:6e:9c:c3:8f:91:74:79:43:6e:fd:c5:6c:38:
d1:50:54:8d:95:ef:a3:80:06:d2:78:63:6b:a7:28:
93:e4:99:ad:d3:32:e7:59:01:cc:39:57:7b:08:dd:
38:14:44:4d:ad:e1:35:cf:ae:46:a9:89:d9:13:70:
b0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:23:FC:E3:EB:63:80:F5:24:30:9E:72:08:D0:FE:F4:1F:DC:FC:65
X509v3 Authority Key Identifier:
keyid:6A:90:5B:ED:10:10:55:1A:E5:51:0C:AE:5E:EE:0B:B9:99:D2:87:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c3:a0:6d:3c:7b:22:8b:76:bc:47:8c:cd:09:c3:af:48:76:
a4:ad:96:f7:10:3e:c5:43:27:f7:c7:a7:cd:6d:10:21:06:ae:
08:c6:e2:d5:c5:28:80:4b:70:70:21:a6:86:00:02:c8:66:c2:
b8:6b:bd:1d:ab:bd:8a:3f:33:21:df:76:1a:d2:c1:38:f3:37:
05:4e:cb:5e:86:a2:61:20:91:0d:d6:db:52:4e:ae:57:20:7b:
c6:40:45:99:19:6f:25:45:0a:1b:af:42:f4:7a:41:24:24:81:
dc:32:39:b0:56:39:ac:eb:29:65:cb:60:80:e1:41:55:b1:d1:
47:b9:21:36:e3:dc:04:cb:28:cd:74:8e:8f:7d:5e:26:7b:cb:
69:ee:1d:ec:6a:9d:a9:98:c3:f1:a7:08:0f:6f:e2:af:b2:40:
7a:6a:11:59:ad:b8:30:7b:1d:c3:6f:64:3b:79:a7:d2:f5:67:
69:91:42:5a:96:46:c0:f0:1b:fa:75:98:c3:d0:a7:75:b0:de:
03:35:a8:e5:39:68:1e:64:43:62:64:79:f6:a5:14:06:33:05:
24:43:36:ef:89:6f:3a:b9:34:d0:48:f5:5e:f9:9d:de:54:79:
c2:96:3c:53:ef:2c:7e:06:73:f0:3d:5f:e1:f2:ed:eb:2e:86:
ba:cb:89:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:57:41 2026 by rpki-client