Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: 0nT7Lv6MfKcrMgF6AD2OeBJrew0tmcbAcHGP/71V41A=
Subject key identifier: 0E:1E:46:D8:27:A4:6E:CA:0D:BF:10:95:6C:F0:39:3B:C6:90:8B:F4
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 019CABD9C2F06A1A35EACC15FAF2EA5BA539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 17D8
Signing time: Mon 02 Mar 2026 00:01:40 +0000
Manifest this update: Mon 02 Mar 2026 00:01:40 +0000
Manifest next update: Tue 03 Mar 2026 00:01:40 +0000
Files and hashes: 1: L0pkYoARJXEFc-gB4c5J8VXY3Mg.roa (hash: 1faOAUcr0h7qDHU3+7FacAnxC8gdfFMLQm2JVMNKznA=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: RNQDBBYcxDXIKh4OG2+iuycaD0uLS2qdmSXWdPvHR7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c2:f0:6a:1a:35:ea:cc:15:fa:f2:ea:5b:a5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Mar 2 00:01:40 2026 GMT
Not After : Mar 3 00:01:40 2026 GMT
Subject: CN=0e1e46d827a46eca0dbf10956cf0393bc6908bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c9:94:28:5b:8d:e9:06:d5:f4:ec:bb:80:ce:
47:c4:ff:74:ab:1d:d5:9a:ed:f8:33:d5:07:8d:ec:
1e:d0:5a:30:15:fd:0f:5c:fe:9e:33:c8:5c:fa:97:
af:17:7a:f4:7b:b4:80:5b:64:76:b6:d9:18:13:81:
92:a0:af:6e:b3:f1:ed:a1:e3:01:84:df:92:c7:5d:
73:ef:e4:1d:75:2b:0d:02:b3:41:43:dd:40:f2:bd:
8e:f3:61:93:f5:91:0e:55:ff:3f:83:cf:a0:cd:44:
f4:38:60:d8:a7:90:bf:8a:3e:fa:a6:fc:af:40:c3:
1c:c0:f7:66:06:27:1c:68:83:6c:08:01:c5:52:1e:
c7:58:fc:aa:23:61:5d:fa:8d:b4:c7:0b:9b:23:88:
1e:54:28:58:e4:a8:78:48:c2:bc:a8:02:4c:76:af:
52:87:70:e2:60:3f:a6:13:d4:99:0f:7a:c4:98:05:
1f:7f:6c:14:fa:c6:6c:a8:bc:15:67:61:20:56:43:
25:f4:8f:e9:38:a6:4b:91:66:35:e3:7f:5f:df:96:
14:41:33:ea:97:49:8b:21:44:29:0f:47:96:7d:e8:
1c:90:05:92:d0:3e:51:d5:20:7b:3a:d0:97:b7:b9:
9e:b7:0d:a5:43:3b:0e:79:d1:25:93:ca:26:3e:ce:
44:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1E:46:D8:27:A4:6E:CA:0D:BF:10:95:6C:F0:39:3B:C6:90:8B:F4
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ee:e2:ab:ef:6d:4a:ba:88:e2:a7:d7:5b:89:f5:fa:ad:cb:
20:c3:6d:25:c4:37:3f:7a:55:2a:c1:86:0b:f5:a2:81:f4:93:
2d:3d:de:31:7b:78:0e:15:ce:f2:09:4b:36:a6:04:a6:a0:16:
4d:1e:ca:8f:7b:35:f1:66:47:e6:94:c1:28:39:32:af:f6:07:
13:7a:84:5f:67:68:08:31:41:11:e9:ca:1d:44:5c:e2:a8:bf:
3d:63:fa:73:65:1b:c2:60:bc:88:77:24:60:b0:b5:79:5b:62:
20:45:c5:9a:25:b7:15:1c:68:e2:1c:8d:2e:7c:6b:8a:d2:04:
25:e7:ca:d8:4c:8b:e8:17:cb:59:a0:e7:28:a7:9d:a4:8c:7d:
71:71:d6:fc:9e:39:de:3c:a8:9e:68:8f:db:f4:fe:63:a3:53:
de:68:c8:60:d4:1c:5b:b2:fa:a8:20:51:ff:8a:e4:a9:dc:9d:
62:41:ff:7f:c4:d9:19:bc:f5:76:c8:9f:92:ad:4d:89:e7:51:
2e:9e:b0:23:3d:51:a0:0f:09:d2:44:8d:12:4c:fd:f2:2b:fa:
39:84:81:7d:ae:54:17:4a:8e:ca:d9:61:6d:23:31:28:e4:13:
55:ea:fb:4d:4e:3b:cf:21:b0:0f:15:83:8a:17:84:0c:11:c7:
37:35:9a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:47 2026 by rpki-client