Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: 9e4BaEnVfv+0wpJxJ/fFECmo0SOP+XHqD40MZfvMRRU=
Subject key identifier: 6D:CB:0F:BC:AB:FD:6D:07:DD:A9:9C:7C:99:2D:72:82:DA:CA:F8:CD
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 019D996263576D251D6FF697D47EF82BD066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 1853
Signing time: Fri 17 Apr 2026 03:00:55 +0000
Manifest this update: Fri 17 Apr 2026 03:00:55 +0000
Manifest next update: Sat 18 Apr 2026 03:00:55 +0000
Files and hashes: 1: L0pkYoARJXEFc-gB4c5J8VXY3Mg.roa (hash: 1faOAUcr0h7qDHU3+7FacAnxC8gdfFMLQm2JVMNKznA=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: wtu663dSxmigBtaPUNDI6Wa0+8YFrJZcR6pWGPnzDeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:63:57:6d:25:1d:6f:f6:97:d4:7e:f8:2b:d0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Apr 17 03:00:55 2026 GMT
Not After : Apr 18 03:00:55 2026 GMT
Subject: CN=6dcb0fbcabfd6d07dda99c7c992d7282dacaf8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:37:bd:2f:ae:46:98:01:4a:24:ea:ac:15:
e6:0c:5c:94:55:76:43:00:9d:04:a6:6a:14:57:75:
fc:0e:1d:5d:d7:49:37:d8:58:45:b8:49:38:e6:85:
91:b2:32:a2:cf:fc:f2:39:0c:b0:66:31:a0:16:dc:
3a:86:3c:7a:f7:a5:fd:ce:16:2f:74:45:32:40:3d:
aa:cb:21:6f:24:9c:06:63:c7:00:e4:ea:47:e0:a5:
e9:95:e4:a8:82:10:18:b0:d7:2b:d6:d9:3c:f8:2c:
7c:79:89:30:9c:26:d5:d2:cb:da:f9:91:83:30:ce:
8a:ac:5c:53:65:05:53:2f:99:8d:e4:96:b8:a8:84:
2d:f9:c0:99:13:1e:a4:ba:60:e2:f1:8f:3b:8e:be:
58:d2:f3:86:f4:8b:34:f2:57:01:43:9a:d0:45:be:
0c:b8:1f:63:f7:aa:70:d0:17:2f:e8:ea:41:14:0e:
2b:49:fc:27:6d:09:41:4c:f3:45:9f:ca:32:f0:13:
b5:09:1b:99:d0:d0:f0:83:ad:db:cc:b3:6a:77:ed:
37:d4:02:ba:0b:bd:0e:78:39:1a:20:fe:a6:79:4d:
53:92:a8:3f:aa:a5:e7:54:bc:f0:44:72:c9:ed:fa:
c8:69:36:f3:7c:bb:61:70:a6:25:da:9e:94:1b:8a:
36:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CB:0F:BC:AB:FD:6D:07:DD:A9:9C:7C:99:2D:72:82:DA:CA:F8:CD
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a2:05:4e:68:f9:34:13:e2:04:8d:9d:40:77:ff:6d:db:e4:
b0:39:96:f4:f8:c3:48:f0:54:6f:32:5b:72:bd:1b:bb:46:07:
4d:84:8f:a7:ba:20:af:99:fe:f0:f2:b0:c2:81:87:ba:50:bc:
1c:3c:f9:d0:b7:22:ba:02:fc:8d:41:aa:83:ea:83:96:64:fb:
f0:c7:3d:85:38:be:8b:d3:a0:e7:51:76:d5:64:f9:07:11:8e:
04:2d:62:aa:e1:f0:82:2e:0b:16:52:e6:28:42:8e:32:b5:b4:
74:52:60:f8:a0:3c:a7:cf:d1:3b:4e:59:51:88:50:e2:f5:9a:
74:e3:72:4d:06:f7:da:12:98:6c:9e:73:f8:81:3a:fd:8f:61:
3b:5d:8d:10:62:95:ad:0a:c6:06:e3:81:13:25:38:83:02:8e:
9b:e2:cf:ef:60:79:57:a8:f6:f4:1f:71:09:44:b9:e2:b4:34:
fc:53:d2:da:b8:5b:b9:c5:9a:ef:12:28:d3:63:9d:52:f3:3a:
eb:3a:66:18:c0:79:9d:da:85:2f:83:f5:63:34:6f:8e:1e:02:
8c:46:19:a6:a4:c7:3d:4e:cf:c1:54:1a:d7:7d:bd:d2:9f:d9:
19:7a:74:f3:01:85:69:d5:a9:5e:1a:9c:6f:4b:74:20:1c:5f:
8b:5e:f7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:29 2026 by rpki-client