Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
File: APkIwDKKjpc_pArFL8M359PE_tA.mft (raw, json)
Hash identifier: IWvK4oFGwQZG19WzIj/5b7Ii3mRv4zCozrZwie06fQU=
Subject key identifier: 94:AE:33:58:29:1A:BE:4D:93:E1:CB:50:E3:94:35:4E:FF:C7:CF:28
Authority key identifier: 00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
Certificate issuer: /CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Certificate serial: 019CAB6B68AD7E2FBBFB8DC2D378CC461B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:08 +0000
Manifest this update: Sun 01 Mar 2026 22:01:08 +0000
Manifest next update: Mon 02 Mar 2026 22:01:08 +0000
Files and hashes: 1: APkIwDKKjpc_pArFL8M359PE_tA.crl (hash: UTssgo4F7EUpSJTArOpTioH1x0XdGdb5ErsPJ1vk4kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:68:ad:7e:2f:bb:fb:8d:c2:d3:78:cc:46:1b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Validity
Not Before: Mar 1 22:01:08 2026 GMT
Not After : Mar 2 22:01:08 2026 GMT
Subject: CN=94ae3358291abe4d93e1cb50e394354effc7cf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:96:56:f4:a1:29:c3:f4:09:b6:27:44:6d:d5:
4b:9d:53:6e:0b:f1:32:3a:34:cc:1e:f7:af:19:17:
35:0a:01:dc:f2:be:e5:af:aa:7c:8e:c9:04:1c:04:
69:e9:35:24:85:76:37:55:62:12:3e:cc:01:81:4e:
e4:e3:8d:90:42:0b:9b:c6:9f:a5:42:03:ca:2b:56:
de:30:be:b6:72:c8:58:06:7e:65:ad:89:78:33:04:
4a:bb:46:85:2e:72:07:c5:48:97:ad:c2:fc:93:d8:
a4:0b:52:1c:4d:87:ad:46:2b:2c:69:02:fd:93:12:
d7:d9:b7:00:41:db:ca:fe:3b:6e:2a:6d:4e:cc:59:
b5:5d:1c:17:91:dd:20:c2:18:a8:ae:21:99:db:4f:
5a:bd:21:d7:1b:ca:be:15:66:0e:2d:3d:ac:f2:3d:
af:be:8a:fa:65:59:0b:20:50:57:c9:0b:d6:25:77:
33:c1:e5:a2:da:fd:c9:c3:ae:91:c8:09:6b:4f:f8:
20:29:8f:e6:9f:4b:bb:b8:11:f8:2c:b1:84:1b:c3:
f2:fb:b3:94:3b:e2:f1:ac:00:bf:f1:4d:8d:f3:3d:
60:92:89:ce:02:1e:52:52:1f:68:2c:02:03:8d:3d:
ef:d7:f3:8c:0d:bb:3c:3f:c7:3a:56:26:86:31:1c:
68:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:AE:33:58:29:1A:BE:4D:93:E1:CB:50:E3:94:35:4E:FF:C7:CF:28
X509v3 Authority Key Identifier:
keyid:00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6a:12:7c:d9:4b:ec:f2:75:ad:bb:02:ac:d4:44:86:ef:d3:
47:19:e7:b4:cb:50:b6:90:7c:26:0e:be:7a:4b:fc:00:45:7a:
3c:d6:6a:86:61:f2:c1:15:b7:c2:e5:71:d3:31:18:1d:a7:a1:
33:61:a2:93:f9:db:a9:c2:f3:22:c0:1b:a0:6f:aa:c9:0c:c4:
58:d6:d0:c9:e6:52:bf:96:06:d6:84:75:2e:f8:2f:ce:fd:02:
80:e6:d7:87:b4:52:30:93:01:f3:70:41:d3:c3:54:c5:27:73:
09:07:59:86:31:2a:72:51:de:00:9f:ef:50:17:3f:bd:23:e6:
1e:0e:97:9d:34:5c:b7:e6:72:cf:66:a7:e4:e0:ab:da:9e:3a:
ca:ce:65:ea:88:48:28:f4:8c:a5:f5:24:ae:a0:7a:f2:b0:fd:
ef:d8:69:2e:8b:44:a7:81:62:af:c6:4e:83:e1:73:b7:2f:91:
b0:a4:bf:7c:91:3e:0e:ee:c6:17:88:89:9d:45:e9:d0:87:a9:
9b:ad:1e:10:bc:c7:5a:c4:06:22:53:3b:8a:e7:d2:9d:db:71:
5f:99:c2:2b:ce:fd:18:94:d1:25:df:40:9b:17:45:dd:62:29:
02:c3:1c:22:ad:81:a5:76:17:14:07:19:e2:d8:6d:4e:d7:e2:
2a:70:a6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:29 2026 by rpki-client