Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
File: apWkz28PDDLNPf6Yh2ImC_zbpn4.mft (raw, json)
Hash identifier: ejN6tRBHrssKCibWJSyc91yMGMP/q2LmNhU5Cw5yl/M=
Subject key identifier: 1C:E2:C1:AF:1C:70:1C:87:B0:E7:1B:22:20:1B:C5:5D:32:75:E4:8D
Authority key identifier: 6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
Certificate issuer: /CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Certificate serial: 019D9A3E6DE01DB29D145A6F66614DE47BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
Manifest number: 0614
Signing time: Fri 17 Apr 2026 07:01:15 +0000
Manifest this update: Fri 17 Apr 2026 07:01:15 +0000
Manifest next update: Sat 18 Apr 2026 07:01:15 +0000
Files and hashes: 1: BKpTCMfaKLw7yMMu4I6xltN6R7Y.roa (hash: GRV0cRwAqNgjNvn/FF2Y105789sE37bG6GFfvU+/74s=)
2: apWkz28PDDLNPf6Yh2ImC_zbpn4.crl (hash: EG0ibfdAmiKWdWht+HV8/Txqe5jkeaeo2PfwbFJdmBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:6d:e0:1d:b2:9d:14:5a:6f:66:61:4d:e4:7b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a95a4cf6f0f0c32cd3dfe988762260bfcdba67e
Validity
Not Before: Apr 17 07:01:15 2026 GMT
Not After : Apr 18 07:01:15 2026 GMT
Subject: CN=1ce2c1af1c701c87b0e71b22201bc55d3275e48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ae:aa:28:c1:c2:86:8e:74:35:9f:ed:37:12:
17:0c:79:24:19:ac:df:13:14:45:32:dc:ce:f2:b0:
18:8a:b9:25:98:04:6b:72:cf:da:35:8c:98:3e:6d:
8c:d4:b5:6d:28:65:21:4c:30:36:ba:a4:29:cd:39:
5e:bb:29:97:dc:98:5c:04:79:3f:cc:33:e7:d5:42:
99:2c:a0:95:d0:a2:88:f5:3b:42:3b:f5:1f:60:0f:
ec:56:1f:9c:fa:e6:cf:c6:ff:8b:f1:73:b5:17:d8:
6c:00:b5:15:ac:7f:d4:5c:23:bc:d2:7d:0a:c7:7a:
36:c6:ce:03:7e:fd:b4:9c:1a:fb:03:8b:1a:fc:3a:
38:4d:46:98:5d:3d:f8:b4:0b:fe:2f:9d:b5:00:4d:
9c:4b:b8:5b:7c:d0:11:54:ab:5e:42:7a:c4:f3:c0:
c0:3a:32:a7:99:2a:1a:5d:6d:99:ed:ce:20:3c:f6:
50:c0:2b:03:65:9c:54:e5:80:f0:5d:a3:af:d7:d5:
2d:a2:25:69:fb:79:61:b9:c9:2a:c6:b4:9a:7c:9d:
3d:2b:5e:6e:58:9b:0c:31:24:4e:c7:cd:44:da:4c:
4c:db:28:3e:1b:4b:d8:ae:20:02:fd:4b:b4:03:87:
c9:f8:fd:0f:b9:6f:84:c0:43:f7:a5:30:8d:a4:f4:
51:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E2:C1:AF:1C:70:1C:87:B0:E7:1B:22:20:1B:C5:5D:32:75:E4:8D
X509v3 Authority Key Identifier:
keyid:6A:95:A4:CF:6F:0F:0C:32:CD:3D:FE:98:87:62:26:0B:FC:DB:A6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWkz28PDDLNPf6Yh2ImC_zbpn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a0aad9-3867-449a-9243-9ab24e7d28fe/1/apWkz28PDDLNPf6Yh2ImC_zbpn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:cc:c5:2b:fe:bb:96:2b:0e:5d:ff:97:6e:79:4c:65:04:e2:
fe:10:c6:05:ce:b5:4c:19:e1:77:f4:43:fb:e0:7f:b5:6a:45:
84:5a:ff:0f:86:48:53:bd:95:9c:23:f2:e7:80:b6:d1:43:1f:
74:ff:89:29:67:63:4a:fe:60:e3:0c:59:a7:47:b8:09:ea:88:
e4:78:a4:78:73:8a:09:65:83:c2:12:e8:01:ef:c1:77:a0:f2:
f0:d8:c4:7f:57:ce:84:6b:b6:df:dd:98:18:af:75:27:fd:b3:
c4:e3:08:1f:04:c2:d6:b9:cb:56:cd:4e:c3:3a:df:66:61:71:
7e:30:e6:b0:10:2a:f0:1e:17:56:0c:ea:c1:94:3d:2e:46:bb:
8e:25:a4:77:49:2e:5f:ed:b2:cd:af:9d:32:22:32:c5:bc:f3:
fc:72:29:57:2e:b9:d1:fe:3e:13:d6:1d:4c:70:57:10:20:9a:
04:0a:98:79:1e:52:f4:b2:4b:93:b3:7b:3d:48:80:ac:3e:99:
84:3c:6d:05:60:90:d3:93:83:e4:22:64:55:28:db:e9:51:da:
d3:ac:6f:8e:6a:c0:72:62:80:9c:08:05:c7:67:96:ad:2a:fd:
9e:39:33:57:42:7e:0a:4d:12:75:47:a1:50:28:3c:53:8b:86:
3f:43:79:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:22 2026 by rpki-client