Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.mft
File: 1-vkiApgEfiQaYUx6gMMIdSa2QdQ.mft (raw, json)
Hash identifier: buqYSapg8x/YSOyahpD2JtC2X3JA505hpLqSib/2Ev0=
Subject key identifier: 02:AA:2D:59:4C:E9:CB:77:8C:33:B2:55:28:8C:85:CC:60:11:AF:A6
Authority key identifier: FA:F9:22:02:98:04:7E:24:1A:61:4C:7A:80:C3:08:75:26:B6:41:D4
Certificate issuer: /CN=faf9220298047e241a614c7a80c3087526b641d4
Certificate serial: 01A12BE8EADE8D1E313A3C1BCFAEDB4044C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.mft
Manifest number: 90
Signing time: Sun 11 Oct 2026 17:00:46 +0000
Manifest this update: Sun 11 Oct 2026 17:00:46 +0000
Manifest next update: Mon 12 Oct 2026 17:00:46 +0000
Files and hashes: 1: 1-vkiApgEfiQaYUx6gMMIdSa2QdQ.crl (hash: 7lh/TvbCk7xcn9yEvIzhqfaVoX57p3JuHjCw1vcJ1BM=)
2: HyS9OeER7hDvhrpH9P3qgsXvBH4.asa (hash: diO6MtHxtcdNQErm9imCO+dWoxmH2EHMTqdPtM649Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 17:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:e8:ea:de:8d:1e:31:3a:3c:1b:cf:ae:db:40:44:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf9220298047e241a614c7a80c3087526b641d4
Validity
Not Before: Oct 11 17:00:46 2026 GMT
Not After : Oct 12 17:00:46 2026 GMT
Subject: CN=02aa2d594ce9cb778c33b255288c85cc6011afa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:0b:9f:7a:41:cc:66:e2:50:ed:fd:df:9e:
74:c1:6e:4a:6b:0e:5f:47:eb:15:28:d6:86:b2:70:
54:14:e3:e0:79:05:ae:cf:82:f0:4b:2f:1b:c9:20:
80:fa:e6:04:ed:a4:c1:b9:8c:07:8e:da:27:0b:22:
3e:ee:99:90:37:3f:f8:09:6d:f4:9e:55:c4:40:2b:
e3:9b:ef:6e:97:b3:45:16:f8:e6:03:40:a0:4e:ff:
b0:43:ce:7a:7b:9c:72:f2:78:52:ea:c3:b9:18:77:
8c:bb:2b:42:68:89:55:ca:00:a2:f5:cb:36:dc:09:
6c:4c:54:55:ac:91:d1:98:3b:bb:5e:46:94:3b:a2:
5c:a8:b5:9f:52:df:86:f0:ea:e6:1e:12:9e:7d:ef:
fa:28:c8:ce:2b:cd:45:6f:bc:e5:74:58:62:06:9d:
23:20:1d:2f:6f:8c:53:03:6a:cd:f3:ad:94:b9:8a:
a5:6f:f6:f1:1e:32:6f:92:ac:cf:ac:ee:60:2d:44:
44:a3:9d:b7:cc:0b:53:31:d6:b5:15:0c:3b:07:44:
82:f8:f8:e1:39:74:d3:6b:60:8d:53:00:4d:d2:f0:
bc:37:99:33:89:06:4b:10:b8:43:1c:32:7b:94:4c:
b5:7f:2e:9c:58:2d:37:a0:cb:58:19:14:0e:91:82:
38:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AA:2D:59:4C:E9:CB:77:8C:33:B2:55:28:8C:85:CC:60:11:AF:A6
X509v3 Authority Key Identifier:
keyid:FA:F9:22:02:98:04:7E:24:1A:61:4C:7A:80:C3:08:75:26:B6:41:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9d:19:1d:47:a4:2b:59:45:1e:5d:61:1c:fa:00:7d:47:02:
fc:c9:a1:35:0b:7e:af:59:48:34:16:5b:dc:a4:e3:59:74:0b:
ee:4d:51:3c:62:46:e5:97:74:98:67:f6:7d:c0:c2:c3:13:fc:
c9:bc:7a:33:68:c5:22:84:2e:9e:38:25:88:f2:a0:6c:b7:61:
f7:f6:9b:3b:ba:f8:b6:0d:2a:28:f2:0c:32:5b:4d:af:0f:d6:
d8:71:e4:48:21:71:66:bd:4e:cd:1c:4b:17:b0:56:b2:e4:a2:
86:c3:9f:13:c0:2c:cc:55:f5:1f:72:ea:9d:1e:b8:99:76:85:
3e:7e:ca:0b:32:fe:17:72:0f:ad:ce:3c:f0:60:c9:75:00:eb:
ec:7c:3e:bf:f0:48:f7:3a:b4:02:83:ad:51:83:70:9a:a2:1a:
b2:6f:85:6f:71:3e:34:ac:f1:78:b6:3f:22:ca:71:a0:b3:f4:
d2:fb:86:77:17:e1:94:69:63:5a:ad:aa:47:c6:46:68:a8:18:
1b:48:c7:05:2c:a3:46:5d:f1:14:60:f2:6d:22:1e:e8:11:44:
b7:76:d6:8a:f4:f3:b0:1e:dd:eb:e7:ff:cf:48:92:38:45:b2:
a6:ef:34:2b:a8:cf:04:41:eb:ac:7a:64:81:4e:f0:fd:af:c7:
f2:2e:91:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:28:11 2026 by rpki-client