Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
File: Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json)
Hash identifier: Wf1E1thNEAcg9e652mIci21/hAMvn0q4VJHl7ZAWYcg=
Subject key identifier: 33:E4:8C:73:AF:0F:B6:83:8E:6F:DA:B9:5D:61:E6:66:30:B2:5F:76
Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
Certificate issuer: /CN=029f93002d78e8e40da560c4291fb830d92dff66
Certificate serial: 019FA8999382E6248D367353683CFDA1F222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
Manifest number: 1961
Signing time: Tue 28 Jul 2026 12:01:04 +0000
Manifest this update: Tue 28 Jul 2026 12:01:04 +0000
Manifest next update: Wed 29 Jul 2026 12:01:04 +0000
Files and hashes: 1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: qD9yQ1v/U4S9DT0YU+aBFWowH+s78MCW6i+Z60m9b7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:93:82:e6:24:8d:36:73:53:68:3c:fd:a1:f2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66
Validity
Not Before: Jul 28 12:01:04 2026 GMT
Not After : Jul 29 12:01:04 2026 GMT
Subject: CN=33e48c73af0fb6838e6fdab95d61e66630b25f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c9:05:03:34:ca:72:8b:91:60:91:22:87:7a:
6e:76:e6:cf:5a:d2:ae:90:bc:fd:85:8e:41:98:c9:
6e:79:a4:a5:2e:6e:dc:55:15:de:ee:57:89:a8:c6:
e0:2a:35:c3:0f:25:16:84:84:b1:0b:05:c5:fd:d2:
8f:77:f2:d0:4b:f7:84:b7:62:fc:25:20:99:a8:03:
d0:0c:75:98:f2:e9:0e:59:b4:18:8a:8b:90:30:cd:
04:da:79:d6:35:54:ec:01:f4:e8:3f:bd:b6:91:df:
27:de:50:02:b5:d1:04:8f:21:c4:f3:65:44:86:7b:
73:28:1e:64:5a:51:04:a4:ac:42:b8:9c:88:44:ed:
6e:f7:85:60:bf:7a:5f:75:76:08:9e:ec:1e:d8:63:
8f:80:9f:57:8a:6e:1c:53:f1:5e:89:a7:a3:cf:39:
d4:78:23:42:23:6a:d8:86:82:4f:cd:3c:9f:da:f6:
be:43:41:87:75:c2:de:80:f5:65:e3:be:07:ce:43:
49:08:c4:8b:28:24:5f:17:97:8a:41:5c:9f:62:8e:
23:60:de:7c:1f:a8:a1:c5:8e:72:ed:ae:d6:84:4f:
eb:c0:cc:dd:00:b7:69:ab:1c:4c:5b:0f:49:20:ff:
7b:f7:dd:c5:93:6f:20:2d:4c:5a:d6:d0:c2:f4:fd:
54:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E4:8C:73:AF:0F:B6:83:8E:6F:DA:B9:5D:61:E6:66:30:B2:5F:76
X509v3 Authority Key Identifier:
keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:90:81:01:df:05:05:31:f5:13:c2:25:8c:56:7e:a3:e5:16:
d1:83:2c:88:67:d2:9a:9d:0e:c2:50:8b:78:c4:ef:01:d1:85:
9e:a3:ba:34:fd:ef:1e:9b:19:23:11:63:9b:d0:18:d1:4a:fa:
3d:59:4d:36:a6:6a:4e:a2:ee:33:f6:3d:77:20:37:99:67:33:
a2:6c:e5:51:ba:f7:10:8d:e4:a2:f5:28:be:b3:be:6a:1e:3d:
4b:a1:55:72:f5:8a:11:ec:d1:a3:b9:2a:7e:5a:77:80:eb:61:
86:e1:82:4d:08:11:a9:3b:e4:a6:ca:7e:e7:a7:14:45:6e:05:
3a:34:ef:f6:5f:07:0f:79:30:99:3b:aa:39:3c:e5:f2:cc:91:
ac:08:81:c9:25:25:74:f2:c5:52:c8:a7:6e:08:8b:63:45:6d:
06:3f:34:d5:b8:0c:6d:91:a0:82:da:8c:a2:41:2b:01:84:91:
db:9d:cc:64:40:b4:2b:0a:99:ae:22:80:8d:ce:6e:de:17:9a:
09:b4:62:57:9a:0c:6e:a9:f7:31:38:1c:e4:88:7c:4d:24:a9:
f6:04:e1:a3:a7:c5:ae:a6:89:e1:e1:0f:05:27:25:ff:f1:21:
a6:d6:39:8e:9b:d5:d9:c7:c0:70:ce:3c:6a:a4:07:09:75:82:
36:be:d5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:33 2026 by rpki-client