Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
File: apc35u85FOD8zAaQI76XGYuRN5E.mft (raw, json)
Hash identifier: 8OyTyiyZirkyLY+SiJR/FWFK99BCGYFc+/W8P7QRy0M=
Subject key identifier: CC:0F:CD:CF:41:D4:62:A9:19:BB:24:2A:F0:D4:18:37:69:7A:8F:A2
Authority key identifier: 6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
Certificate issuer: /CN=6a9737e6ef3914e0fccc069023be97198b913791
Certificate serial: 019CAB6BACEFABACCD5EC761934A307560C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:26 +0000
Manifest this update: Sun 01 Mar 2026 22:01:26 +0000
Manifest next update: Mon 02 Mar 2026 22:01:26 +0000
Files and hashes: 1: apc35u85FOD8zAaQI76XGYuRN5E.crl (hash: Q2GacbOR5hXLbWZJ2ImOzqgXLBwUIq/2jPfXn1dn/NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ac:ef:ab:ac:cd:5e:c7:61:93:4a:30:75:60:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9737e6ef3914e0fccc069023be97198b913791
Validity
Not Before: Mar 1 22:01:26 2026 GMT
Not After : Mar 2 22:01:26 2026 GMT
Subject: CN=cc0fcdcf41d462a919bb242af0d41837697a8fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:32:30:09:a9:fa:83:21:50:ef:fb:90:c5:
51:4c:3d:9b:21:4a:fb:88:12:4f:b3:dc:d9:a5:28:
51:74:f6:77:08:5a:f9:3d:15:4a:b6:d7:d9:62:f8:
20:c2:1d:ac:71:48:5d:26:44:e2:06:b5:24:ad:bd:
6b:40:bf:e4:97:1f:a7:68:b9:2e:65:f7:4c:d9:06:
ea:90:a7:44:a7:7d:17:4a:a1:dc:c8:f3:a7:0e:41:
0a:8e:04:df:77:7d:23:9c:84:0d:fb:b8:c7:24:cd:
b3:64:bb:74:4e:da:94:5b:b6:16:f3:47:77:5a:07:
77:ef:2d:3f:61:6a:b5:d3:72:49:94:25:7c:07:36:
e6:96:31:b2:1b:09:3c:d4:da:b0:cc:e3:83:41:f0:
73:58:cf:0a:0b:34:1f:fa:49:fe:21:d4:19:f7:35:
b9:a9:dd:50:cf:d0:a3:83:76:29:a3:8e:72:5a:e2:
19:ba:ea:1f:46:64:32:a6:20:b1:48:84:99:21:b9:
08:e4:af:cf:7e:e4:78:de:bb:ac:c4:94:cc:41:c8:
aa:1e:ed:91:be:f9:07:90:99:30:ba:de:94:e1:19:
35:6a:48:ff:69:68:73:51:b7:5e:73:5c:fb:d8:9d:
52:03:41:c8:17:82:b4:ef:52:74:9c:3a:d7:b3:2c:
2b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0F:CD:CF:41:D4:62:A9:19:BB:24:2A:F0:D4:18:37:69:7A:8F:A2
X509v3 Authority Key Identifier:
keyid:6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:62:ce:04:58:63:ff:65:5c:3e:2d:96:17:01:88:80:0e:97:
e5:d5:3a:ee:c4:d5:55:bc:e1:fd:c0:69:13:7d:3c:b3:eb:df:
22:98:a8:14:9f:1f:01:0b:e0:9d:34:da:55:88:11:cb:4e:75:
30:52:bc:3b:c7:f8:fb:90:c0:83:5d:05:d0:4d:36:de:eb:dc:
81:a4:cf:c8:45:98:8a:0c:fe:ae:98:14:a0:d1:be:9d:e2:16:
96:8b:af:e9:88:b9:07:12:67:28:aa:10:68:5b:b6:b4:c2:d5:
ae:46:3c:9d:93:ea:b8:87:78:02:a7:58:1e:98:e7:f4:22:9d:
fa:3e:e7:67:d2:63:c9:9e:88:56:f1:9d:c1:52:b9:f8:76:24:
d4:06:1b:7a:a3:4c:5a:9e:64:cf:bf:ac:20:0c:74:25:d0:3f:
4b:b0:0b:13:2f:cf:b9:2e:0b:41:9f:95:1d:0c:3b:6b:cf:a5:
3e:fb:11:8a:8f:01:1e:ce:07:75:d7:38:39:01:1d:41:2c:7e:
8d:08:e3:53:2e:c3:1e:42:1d:a9:f3:1b:dd:55:fa:59:9f:9f:
c1:98:5d:74:4d:8d:e0:94:94:f7:6c:e9:4a:1c:ae:bb:57:4b:
59:2a:61:d6:19:b3:77:30:c7:d5:bf:d2:41:5a:43:ca:1c:9d:
39:00:77:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra6zvq6zNXsdhk0owdWDGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOTczN2U2ZWYzOTE0ZTBmY2NjMDY5MDIzYmU5NzE5OGI5
MTM3OTEwHhcNMjYwMzAxMjIwMTI2WhcNMjYwMzAyMjIwMTI2WjAzMTEwLwYDVQQD
EyhjYzBmY2RjZjQxZDQ2MmE5MTliYjI0MmFmMGQ0MTgzNzY5N2E4ZmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt30yMAmp+oMhUO/7kMVRTD2bIUr7
iBJPs9zZpShRdPZ3CFr5PRVKttfZYvggwh2scUhdJkTiBrUkrb1rQL/klx+naLku
ZfdM2QbqkKdEp30XSqHcyPOnDkEKjgTfd30jnIQN+7jHJM2zZLt0TtqUW7YW80d3
Wgd37y0/YWq103JJlCV8BzbmljGyGwk81NqwzOODQfBzWM8KCzQf+kn+IdQZ9zW5
qd1Qz9Cjg3Ypo45yWuIZuuofRmQypiCxSISZIbkI5K/PfuR43rusxJTMQciqHu2R
vvkHkJkwut6U4Rk1akj/aWhzUbdec1z72J1SA0HIF4K071J0nDrXsywrGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwPzc9B1GKpGbskKvDUGDdpeo+iMB8GA1UdIwQY
MBaAFGqXN+bvORTg/MwGkCO+lxmLkTeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84NDM4ZjUtNmM5Yy00NzAzLTlmZTIt
MDE1ZmRlNDVkMGVhLzEvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84NDM4ZjUtNmM5Yy00NzAzLTlmZTItMDE1ZmRlNDVkMGVh
LzEvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2LOBFhj
/2VcPi2WFwGIgA6X5dU67sTVVbzh/cBpE308s+vfIpioFJ8fAQvgnTTaVYgRy051
MFK8O8f4+5DAg10F0E023uvcgaTPyEWYigz+rpgUoNG+neIWlouv6Yi5BxJnKKoQ
aFu2tMLVrkY8nZPquId4AqdYHpjn9CKd+j7nZ9JjyZ6IVvGdwVK5+HYk1AYbeqNM
Wp5kz7+sIAx0JdA/S7ALEy/PuS4LQZ+VHQw7a8+lPvsRio8BHs4Hddc4OQEdQSx+
jQjjUy7DHkIdqfMb3VX6WZ+fwZhddE2N4JSU92zpShyuu1dLWSph1hmzdzDH1b/S
QVpDyhydOQB31A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:32 2026 by rpki-client