Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
File: APkIwDKKjpc_pArFL8M359PE_tA.mft (raw, json)
Hash identifier: vxhA4Yk50cLmpXEv1EilxnkStDNEeAd2fJFvuwVzBbM=
Subject key identifier: EC:7A:A2:CE:F5:9E:82:CF:4E:B3:05:BD:4F:93:F6:38:33:2D:88:C1
Authority key identifier: 00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
Certificate issuer: /CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Certificate serial: 01A0C7EADC6431B901FD7FCEA3EC043759BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
Manifest number: 1A63
Signing time: Tue 22 Sep 2026 07:00:52 +0000
Manifest this update: Tue 22 Sep 2026 07:00:52 +0000
Manifest next update: Wed 23 Sep 2026 07:00:52 +0000
Files and hashes: 1: APkIwDKKjpc_pArFL8M359PE_tA.crl (hash: X0Jn4Wyi/r9kh26x2FsqEHQGenS38zEyR8KzFoQqDI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:dc:64:31:b9:01:fd:7f:ce:a3:ec:04:37:59:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Validity
Not Before: Sep 22 07:00:52 2026 GMT
Not After : Sep 23 07:00:52 2026 GMT
Subject: CN=ec7aa2cef59e82cf4eb305bd4f93f638332d88c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:af:0c:81:6a:d1:98:71:51:df:54:9c:c0:e9:
2e:db:14:64:c4:f4:73:8b:31:da:0e:1f:29:5d:78:
a7:0a:bc:e4:be:ab:74:e5:32:d4:9b:87:ed:39:b9:
94:ec:5c:16:11:99:40:07:22:15:df:d8:da:10:a0:
13:f0:7c:55:11:2e:10:cb:3b:7b:c0:e2:bb:5b:cf:
28:d9:58:d5:7f:1e:4a:2b:0a:06:d2:8f:97:5c:99:
29:8f:d6:c6:43:8a:e6:19:e0:e1:26:70:e8:6a:b1:
4a:8e:f2:82:5a:20:45:98:48:64:83:0a:ca:40:fa:
f6:62:bb:62:90:2c:cf:78:8c:64:38:81:f4:e8:0e:
ba:58:b2:11:c2:1c:d3:52:66:6c:95:84:ad:64:a8:
fb:5d:fc:7b:76:2c:29:1c:e5:9a:de:26:d1:80:6f:
53:59:35:8a:16:06:0b:dc:a2:f2:81:e3:66:eb:c2:
35:ea:53:66:8a:38:8f:6c:36:62:82:74:8d:8a:4e:
60:1a:7c:f1:ed:98:24:7c:bf:4b:b0:78:36:4f:95:
9b:1d:3f:0f:2c:b3:21:bd:96:1b:02:25:ec:42:0e:
44:f2:ee:77:76:ee:7a:d6:07:30:3c:b6:41:20:2c:
b4:4e:0f:63:11:e5:49:85:88:57:6a:42:ec:7f:c0:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7A:A2:CE:F5:9E:82:CF:4E:B3:05:BD:4F:93:F6:38:33:2D:88:C1
X509v3 Authority Key Identifier:
keyid:00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:40:64:5a:48:97:14:02:ff:e5:4c:1c:d5:00:cb:c7:ea:24:
ef:ee:64:86:a6:78:3b:5d:ba:e5:34:45:56:8a:65:3d:ba:61:
73:fc:84:21:55:82:43:eb:5c:13:1e:3d:8a:42:36:74:aa:ab:
56:30:b9:6c:aa:b1:b5:de:09:7e:8d:2f:63:03:91:56:14:3a:
b4:43:3e:35:58:92:fa:1b:9a:3a:d6:72:0d:0a:7d:4f:8a:e2:
d6:19:0b:3c:52:32:2d:c7:23:20:8a:df:1e:2f:73:78:80:1d:
13:f5:47:69:62:b1:16:21:88:72:48:5e:f5:e2:ff:03:c3:23:
7c:76:05:5e:4d:77:7e:3f:d2:ad:7c:3e:c0:d4:6d:1c:96:f1:
68:59:65:38:d0:f1:d5:61:ec:1b:b0:b4:55:bc:32:c6:09:2a:
35:ea:fb:f2:f9:eb:7f:17:39:ff:42:63:f3:d2:36:75:fc:aa:
f1:96:27:04:3a:0e:67:8d:30:e4:e9:41:11:72:12:2e:88:5f:
e5:81:f0:5a:a1:36:15:dd:df:de:dc:55:2c:c2:05:45:d2:c9:
c7:4c:36:f7:08:3e:69:be:ce:f4:f0:7c:34:92:30:7b:03:e9:
f4:df:c5:be:5d:3b:89:59:f5:85:b9:30:d1:81:db:a7:5c:a2:
6c:f9:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:58:24 2026 by rpki-client