Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
File: APkIwDKKjpc_pArFL8M359PE_tA.mft (raw, json)
Hash identifier: 7EM8avAS1I2CakUgSBrNOHyfoWPBQg1UuRV5UEAAm7c=
Subject key identifier: E2:23:83:B1:89:BB:18:59:98:A1:B1:21:86:D0:11:0E:2D:2F:6F:FD
Authority key identifier: 00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
Certificate issuer: /CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Certificate serial: 01A1DE032791349910D52A22103636E8F132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
Manifest number: 1AF3
Signing time: Sun 15 Nov 2026 07:01:50 +0000
Manifest this update: Sun 15 Nov 2026 07:01:50 +0000
Manifest next update: Mon 16 Nov 2026 07:01:50 +0000
Files and hashes: 1: APkIwDKKjpc_pArFL8M359PE_tA.crl (hash: 2VAiE/CbQ4FNOQGEN9MQB2kQP3U8/mq+bLMJ/zGNtS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:03:27:91:34:99:10:d5:2a:22:10:36:36:e8:f1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Validity
Not Before: Nov 15 07:01:50 2026 GMT
Not After : Nov 16 07:01:50 2026 GMT
Subject: CN=e22383b189bb185998a1b12186d0110e2d2f6ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e2:d7:67:97:ac:58:bb:bb:63:c3:41:0b:9d:
e9:70:0c:e3:de:a3:87:b5:7e:cc:64:ed:1d:bc:27:
4e:44:a2:eb:73:9c:bc:5d:37:5a:d2:7b:a6:28:b9:
f2:b3:b2:bc:7c:b2:03:84:15:6a:f9:e9:b1:fb:9e:
36:b2:4f:68:b0:69:ca:16:39:43:d2:c1:c8:7e:f0:
3a:c1:8f:27:25:06:da:7c:4c:79:1b:ca:bf:8e:b7:
a0:27:19:b2:c9:ff:90:1a:e0:48:72:40:be:fe:36:
77:3f:52:65:b9:ce:fe:71:d3:25:1d:98:23:ac:2e:
f8:92:56:98:22:f8:3e:55:88:11:0c:be:67:5d:1a:
d6:e4:28:9c:5e:b6:36:7b:54:3a:0e:48:78:2b:94:
35:4f:4e:33:d2:bd:2a:83:23:62:6e:75:45:57:48:
63:5e:45:8a:62:64:55:93:88:e7:f8:55:b5:30:a0:
e7:ed:14:5a:6a:87:f9:7a:f1:85:91:d4:fa:71:09:
1e:64:a3:75:df:18:6e:a5:2b:25:05:7a:d2:07:73:
31:5b:b9:7e:c8:7a:07:0c:92:82:1b:93:79:ee:85:
20:67:65:6b:42:5b:3a:5e:d5:d5:ba:e5:c3:68:fd:
36:17:3a:f8:6c:f1:7b:6a:24:a4:70:87:b3:f3:8a:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:23:83:B1:89:BB:18:59:98:A1:B1:21:86:D0:11:0E:2D:2F:6F:FD
X509v3 Authority Key Identifier:
keyid:00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1c:f9:fa:d7:9c:ac:e7:f6:ab:c7:bb:96:b8:6c:20:69:f4:
8e:7b:c2:cb:e7:e5:96:4a:ce:88:25:39:25:64:98:ee:c8:f3:
25:29:54:71:06:be:31:d0:7b:64:62:de:6a:7a:76:3b:b6:6b:
ac:ef:4e:a3:ee:93:44:87:ce:90:2e:1e:f5:31:16:eb:2f:e7:
7d:3f:2b:e7:c5:83:51:4e:ce:8b:cc:9f:99:4c:4a:5a:b5:23:
32:a5:f4:ba:fa:3a:26:7e:61:be:89:28:60:2c:0b:73:7d:f5:
c2:cb:81:1d:ed:0b:9e:a0:da:f9:de:6d:53:6b:f1:b2:ac:30:
c8:68:8f:50:36:17:71:55:23:37:6a:35:61:20:be:e9:c7:b4:
d9:4f:5a:25:fe:b2:8e:b2:d2:2d:f8:8b:a0:21:1f:c7:d5:37:
83:98:7a:46:07:76:b4:b6:b7:c0:34:7f:bb:22:56:45:3f:90:
9f:9a:e0:da:98:ed:9b:54:3a:ad:76:db:cc:24:16:08:aa:92:
07:d0:26:2e:66:10:fd:9c:34:22:03:b2:44:59:0c:4e:f7:63:
6f:5a:3f:06:ca:d7:b0:09:f7:60:f1:65:75:1f:4a:1a:ec:1f:
1e:7b:f0:7b:71:5c:19:0f:42:6f:a3:c7:af:6a:64:9b:01:a3:
37:9a:b6:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeAyeRNJkQ1SoiEDY26PEyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZjkwOGMwMzI4YThlOTczZmE0MGFjNTJmYzMzN2U3ZDNj
NGZlZDAwHhcNMjYxMTE1MDcwMTUwWhcNMjYxMTE2MDcwMTUwWjAzMTEwLwYDVQQD
EyhlMjIzODNiMTg5YmIxODU5OThhMWIxMjE4NmQwMTEwZTJkMmY2ZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+LXZ5esWLu7Y8NBC53pcAzj3qOH
tX7MZO0dvCdORKLrc5y8XTda0numKLnys7K8fLIDhBVq+emx+542sk9osGnKFjlD
0sHIfvA6wY8nJQbafEx5G8q/jregJxmyyf+QGuBIckC+/jZ3P1Jluc7+cdMlHZgj
rC74klaYIvg+VYgRDL5nXRrW5CicXrY2e1Q6Dkh4K5Q1T04z0r0qgyNibnVFV0hj
XkWKYmRVk4jn+FW1MKDn7RRaaof5evGFkdT6cQkeZKN13xhupSslBXrSB3MxW7l+
yHoHDJKCG5N57oUgZ2VrQls6XtXVuuXDaP02Fzr4bPF7aiSkcIez84oSXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOIjg7GJuxhZmKGxIYbQEQ4tL2/9MB8GA1UdIwQY
MBaAFAD5CMAyio6XP6QKxS/DN+fTxP7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVBrSXdES0tqcGNfcEFyRkw4TTM1OVBFX3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lYTJjNTAtYWZjYS00MGIxLTkzODEt
N2RlY2YxZTQ3ODY1LzEvQVBrSXdES0tqcGNfcEFyRkw4TTM1OVBFX3RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lYTJjNTAtYWZjYS00MGIxLTkzODEtN2RlY2YxZTQ3ODY1
LzEvQVBrSXdES0tqcGNfcEFyRkw4TTM1OVBFX3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxz5+tec
rOf2q8e7lrhsIGn0jnvCy+fllkrOiCU5JWSY7sjzJSlUcQa+MdB7ZGLeanp2O7Zr
rO9Oo+6TRIfOkC4e9TEW6y/nfT8r58WDUU7Oi8yfmUxKWrUjMqX0uvo6Jn5hvoko
YCwLc331wsuBHe0LnqDa+d5tU2vxsqwwyGiPUDYXcVUjN2o1YSC+6ce02U9aJf6y
jrLSLfiLoCEfx9U3g5h6Rgd2tLa3wDR/uyJWRT+Qn5rg2pjtm1Q6rXbbzCQWCKqS
B9AmLmYQ/Zw0IgOyRFkMTvdjb1o/BsrXsAn3YPFldR9KGuwfHnvwe3FcGQ9Cb6PH
r2pkmwGjN5q2Ug==
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:54:34 2026 by rpki-client