Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: xTphbOtn0PeGXCT6V6HLsdfjklCxQkSINcTZvSAsXis=
Subject key identifier: 8D:ED:38:F7:4A:B6:03:D6:38:33:4E:98:38:90:E9:D8:CB:40:8D:F0
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 019EC0DB71E679298A99B499FEFE68569388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 18EC
Signing time: Sat 13 Jun 2026 12:01:07 +0000
Manifest this update: Sat 13 Jun 2026 12:01:07 +0000
Manifest next update: Sun 14 Jun 2026 12:01:07 +0000
Files and hashes: 1: L0pkYoARJXEFc-gB4c5J8VXY3Mg.roa (hash: 1faOAUcr0h7qDHU3+7FacAnxC8gdfFMLQm2JVMNKznA=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: V1dXUa+jI23Jb/A0nJGKlu8oRUr5ca5t5hBXE87uKsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:71:e6:79:29:8a:99:b4:99:fe:fe:68:56:93:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Jun 13 12:01:07 2026 GMT
Not After : Jun 14 12:01:07 2026 GMT
Subject: CN=8ded38f74ab603d638334e983890e9d8cb408df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:77:a8:23:4f:2c:ab:b8:a4:08:83:87:7a:26:
84:02:d9:59:b3:b7:28:b1:37:84:92:db:c0:30:e2:
48:7a:50:58:98:fc:d1:79:78:c9:82:c2:cb:66:c6:
11:40:6e:de:5e:6f:bc:99:e0:cc:c1:67:0f:5f:68:
15:51:08:6a:b7:81:18:bb:1d:4a:2c:c1:f3:c2:67:
6f:e9:01:c2:65:7d:d1:59:57:06:35:b4:3d:26:5e:
a7:61:7f:92:f3:2b:3a:3f:b7:ee:62:06:4e:ac:27:
0b:dc:89:ce:e4:30:5e:d8:75:d3:11:d5:bf:1f:9d:
93:f7:cc:ab:d5:d3:e0:a0:4a:26:6e:e0:e6:de:09:
a2:92:6f:ca:c0:b6:75:85:e9:a0:88:ef:bd:07:02:
bf:c0:45:78:eb:07:90:c6:9b:55:9a:41:9e:4f:d0:
99:8d:66:ec:e1:e3:76:07:a1:a4:45:94:ca:c5:64:
97:d4:d6:aa:32:ee:e6:6e:84:77:2e:3e:0e:a7:0f:
cf:6b:6b:e3:14:ce:ad:91:61:c6:e1:cc:32:89:02:
37:1e:3b:2d:a9:a0:47:fa:09:d6:52:09:4f:be:3a:
d9:75:17:d6:45:66:06:2f:1a:72:2d:ac:76:19:12:
0c:bb:ac:00:f7:e1:31:63:6b:5f:ba:dc:6b:02:2c:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:ED:38:F7:4A:B6:03:D6:38:33:4E:98:38:90:E9:D8:CB:40:8D:F0
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:be:ce:c8:d9:73:da:ba:94:b4:ab:98:26:ed:cc:77:7d:f3:
f8:d9:ae:99:82:73:11:46:c0:c5:3f:bd:b7:9c:f0:19:e0:23:
27:2d:d4:0d:e5:61:bb:3f:76:17:b0:34:aa:c7:76:a4:5d:f2:
ef:7f:d2:0a:21:77:07:ba:b6:9a:00:c9:45:4e:09:32:e8:40:
85:4d:9f:39:c6:ab:94:cb:85:77:c2:30:26:20:a4:8e:20:61:
3a:a2:cc:22:ac:9b:01:14:42:6b:1a:11:32:58:a8:29:65:6c:
3a:d5:00:6b:e2:93:3e:c5:51:a5:4e:b2:2e:41:2a:36:d0:ee:
96:be:47:77:42:59:3f:7b:63:d8:5f:f2:55:59:04:c0:80:d7:
89:a6:6a:3d:e7:6a:94:e5:e8:8a:bc:9b:db:2f:81:45:98:56:
43:20:de:92:a9:0d:fe:a5:ba:77:e7:ee:96:9f:21:93:9d:68:
18:65:76:1d:fd:ac:5f:9e:fa:df:97:fd:cf:13:83:f6:e1:f4:
b9:f2:04:61:6b:a1:31:9b:4f:da:c5:8d:fc:13:81:90:65:0b:
ec:9f:d3:d3:52:b3:88:88:9b:39:d0:19:c8:3c:b4:45:b3:dd:
a1:ab:cb:da:d1:3c:54:99:43:b2:07:d0:12:73:da:e2:d6:ef:
9b:8b:bc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:43:18 2026 by rpki-client