Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
File: apc35u85FOD8zAaQI76XGYuRN5E.mft (raw, json)
Hash identifier: 7lLFVsIVyoME3EHUIrjo3x5z/ui7WALttS4doNZMss4=
Subject key identifier: E4:7C:9B:A6:A2:4A:D3:93:D7:CD:43:3C:ED:81:75:34:9C:29:A3:70
Authority key identifier: 6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
Certificate issuer: /CN=6a9737e6ef3914e0fccc069023be97198b913791
Certificate serial: 019D98F44FEA3B1BC1003EBFDA70D899B636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:00:41 +0000
Manifest this update: Fri 17 Apr 2026 01:00:41 +0000
Manifest next update: Sat 18 Apr 2026 01:00:41 +0000
Files and hashes: 1: apc35u85FOD8zAaQI76XGYuRN5E.crl (hash: aXpsHpCtyGMAq9cpDKrDjAHnTlNSb4vOjRPtDrO1A2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:4f:ea:3b:1b:c1:00:3e:bf:da:70:d8:99:b6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9737e6ef3914e0fccc069023be97198b913791
Validity
Not Before: Apr 17 01:00:41 2026 GMT
Not After : Apr 18 01:00:41 2026 GMT
Subject: CN=e47c9ba6a24ad393d7cd433ced8175349c29a370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1a:52:52:28:e2:30:a6:2b:2f:73:5f:3a:8c:
1c:ca:d0:e4:80:82:d6:e3:94:16:0e:e8:a3:9c:59:
44:5c:d0:0b:c1:4e:e4:54:ed:f6:a5:d3:f1:1b:be:
d1:37:5a:b0:06:a4:16:96:f7:26:6e:a7:a1:27:02:
32:23:8c:3d:58:d4:54:10:02:b9:d7:f8:da:2a:f6:
58:e8:a9:c6:82:1e:f8:e9:d2:96:4d:c9:dc:a5:68:
e9:4c:c7:fa:4d:76:58:76:e7:7a:d3:3c:c6:f3:62:
58:96:00:d0:c9:cb:fe:cd:7d:b7:b7:62:62:23:77:
4b:d8:b0:93:f0:11:38:59:9b:c0:d6:8a:b0:31:03:
5c:27:a5:89:df:74:6a:dd:be:e7:9e:42:7e:8b:da:
35:15:ec:89:10:6c:61:ce:89:9b:af:5c:b8:c2:ee:
f6:bf:b5:35:57:e5:d7:c6:95:e7:86:e2:0d:58:b9:
8e:4c:3f:be:e9:6b:d4:d0:d3:67:ae:13:cc:85:c7:
f4:d6:84:7b:96:51:35:dd:79:77:97:4c:2f:5f:32:
60:ef:cf:7b:28:44:4c:28:87:da:6b:f4:0c:6d:7d:
ea:3c:c0:51:9a:92:db:3f:84:bd:16:f8:bb:ff:e4:
53:75:93:1a:1a:3c:cc:4b:16:3a:cc:0c:0c:aa:98:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7C:9B:A6:A2:4A:D3:93:D7:CD:43:3C:ED:81:75:34:9C:29:A3:70
X509v3 Authority Key Identifier:
keyid:6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:12:a2:bd:78:17:7a:19:08:93:03:e4:93:ef:41:76:b0:98:
b0:fb:7b:b0:ce:fd:02:66:49:87:ee:08:ac:35:54:07:49:38:
85:7b:db:79:21:0a:b9:21:13:ef:c7:e7:2e:c9:ac:2e:d1:d1:
ff:e0:f8:c1:04:7c:99:9c:dc:e8:17:2a:dc:37:78:13:4e:75:
a5:4e:e0:7b:cf:f0:f1:0f:3b:33:58:c0:2f:ca:f4:64:41:41:
01:33:90:4a:5f:e4:82:9d:81:fa:a7:ea:d2:ea:c5:cf:cb:ed:
b5:90:44:ea:15:33:09:5a:d6:d1:33:37:fb:83:3a:75:17:c1:
04:29:c8:f7:7e:89:2a:31:5a:5d:42:72:12:3e:30:5b:c9:ee:
91:e0:40:21:8a:a2:60:56:77:ed:08:0b:c4:a7:8e:b9:23:8f:
70:b1:bd:71:2b:51:f9:1f:d9:f8:a9:9d:48:7a:6e:65:08:2c:
89:82:2a:09:af:43:6f:66:77:3c:d1:59:7a:1f:df:f1:c3:c4:
5f:81:0f:a7:14:dc:46:ff:3e:87:0a:69:4b:69:25:b6:1e:65:
b0:bb:41:72:da:10:99:20:13:29:b1:31:41:7f:69:8a:5a:87:
73:15:df:f0:21:14:34:f7:2e:65:48:c1:ec:12:79:da:b8:93:
00:50:7b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:42 2026 by rpki-client