Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
File: APkIwDKKjpc_pArFL8M359PE_tA.mft (raw, json)
Hash identifier: 9Hr2c0+XjwSp2YGvO9lGgN3LI/cFeOJHmzjpppKM+Ss=
Subject key identifier: 3C:CB:8C:59:BD:BD:F1:88:28:12:BC:2D:00:24:71:E2:28:54:1E:E8
Authority key identifier: 00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
Certificate issuer: /CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Certificate serial: 019FA82C09BA6805D1271DAF6B69E1E81F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
Manifest number: 19CE
Signing time: Tue 28 Jul 2026 10:01:26 +0000
Manifest this update: Tue 28 Jul 2026 10:01:26 +0000
Manifest next update: Wed 29 Jul 2026 10:01:26 +0000
Files and hashes: 1: APkIwDKKjpc_pArFL8M359PE_tA.crl (hash: l3AsOb2CFQsKjSgSlYuSReu3LN1cjET3wtAy7pn4Ijc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2c:09:ba:68:05:d1:27:1d:af:6b:69:e1:e8:1f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Validity
Not Before: Jul 28 10:01:26 2026 GMT
Not After : Jul 29 10:01:26 2026 GMT
Subject: CN=3ccb8c59bdbdf1882812bc2d002471e228541ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:01:69:67:89:d3:3a:82:91:d3:0d:22:e1:
36:fc:68:fe:2d:7a:ff:60:fa:70:c3:5d:bf:27:ff:
97:a3:d4:54:fb:03:70:e2:cf:4e:0b:38:c3:38:99:
08:d9:64:8b:98:54:ce:40:6a:51:a0:08:e7:4b:6c:
1c:15:9b:80:b2:0f:e1:a4:94:ac:77:08:c8:e2:d9:
61:56:8c:05:6f:db:bd:2d:d7:3a:67:03:61:d0:80:
61:09:ec:bd:dc:46:0a:4d:7d:87:c5:f6:53:a5:03:
e7:34:2c:c4:0c:49:96:fe:d7:d2:e5:d3:b7:4c:08:
fa:71:d4:68:4d:80:b8:6e:c5:36:b6:4c:c6:9f:8b:
df:02:d0:9b:75:55:16:ae:e7:21:60:64:47:65:60:
30:49:f0:f1:85:df:87:d8:de:83:29:58:21:f2:ef:
8b:58:bf:86:12:01:c8:49:53:9c:78:af:6a:a5:03:
c9:29:42:18:5d:58:08:b3:eb:97:b6:9e:35:db:23:
6e:6d:fd:6d:1b:16:de:c1:a7:8a:11:80:2d:59:40:
fb:2f:74:5a:f0:a4:fa:42:8c:75:ec:d1:a1:fe:2e:
dc:35:6f:5d:12:36:49:29:c7:02:bc:f7:16:06:8e:
95:ce:49:8c:cd:1e:49:83:4c:46:0f:e9:68:ba:26:
02:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CB:8C:59:BD:BD:F1:88:28:12:BC:2D:00:24:71:E2:28:54:1E:E8
X509v3 Authority Key Identifier:
keyid:00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3d:fc:74:89:70:e1:c5:74:f4:58:dc:fe:fc:24:29:21:ef:
ad:61:1f:85:11:03:0b:5c:38:5a:31:f7:82:48:0d:10:1b:31:
6d:7f:87:fb:03:5d:8e:27:67:87:c9:78:54:dc:46:75:0b:f3:
d6:c2:6a:55:5b:be:a0:b3:5c:e2:51:9d:0c:a8:db:6d:b5:49:
3d:49:2a:0c:59:a4:cd:b4:75:57:2b:97:d0:3a:bf:70:a2:cf:
ca:77:8c:67:7d:99:6b:80:33:51:f8:ed:5f:9e:53:e8:49:30:
10:de:5c:66:32:91:d2:af:50:50:e4:55:a4:27:e6:30:69:ce:
f9:1f:90:f6:69:89:4d:f5:b2:61:12:db:84:8e:5c:ae:ec:46:
ea:16:86:dc:f2:14:fc:3e:64:04:44:6b:31:fd:9f:e7:62:8a:
41:ee:07:67:2a:16:37:77:f0:e1:51:a2:e6:d0:1f:9f:58:8e:
76:8b:3c:79:e9:b7:cf:5c:ca:eb:25:42:35:8d:67:c5:31:f3:
62:87:84:81:0b:07:53:0d:e3:4f:a3:f7:ec:af:cd:79:c5:22:
7d:d7:5a:f3:b2:84:2a:46:9a:3c:6a:e9:bc:54:76:40:34:c7:
60:ab:1e:1c:a0:b8:35:db:2e:3b:b9:7a:14:16:4d:ef:3d:40:
9f:af:1d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:50 2026 by rpki-client