Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
File: Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json)
Hash identifier: JHpnHzA5lmel3zjZQWLZdYsIOhXSJ1x9rAYeouG+dyY=
Subject key identifier: E6:DA:88:C5:28:C8:08:23:1A:E6:01:E7:6B:31:09:92:9A:CC:45:DE
Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
Certificate issuer: /CN=029f93002d78e8e40da560c4291fb830d92dff66
Certificate serial: 019CABD9B7E08D92D7D8277C011D2857C7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
Manifest number: 17D5
Signing time: Mon 02 Mar 2026 00:01:38 +0000
Manifest this update: Mon 02 Mar 2026 00:01:38 +0000
Manifest next update: Tue 03 Mar 2026 00:01:38 +0000
Files and hashes: 1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: iVSzmkep5q2JecMmk1H/GIfOy8bMvXZ7eui/Q7reAXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:b7:e0:8d:92:d7:d8:27:7c:01:1d:28:57:c7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66
Validity
Not Before: Mar 2 00:01:38 2026 GMT
Not After : Mar 3 00:01:38 2026 GMT
Subject: CN=e6da88c528c808231ae601e76b3109929acc45de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:59:62:b4:ae:3a:00:c2:83:5c:61:26:e1:
74:93:9a:db:9d:35:59:89:14:d9:fe:e6:60:71:48:
d0:78:21:bf:65:aa:61:1e:70:d3:63:23:71:a2:66:
b0:55:e2:92:b8:64:ba:79:74:ac:89:ec:c0:b4:5f:
1e:7c:cf:b6:78:27:1e:43:d8:a4:6d:17:5e:76:4a:
95:55:10:bc:5e:fd:e9:66:f3:73:81:7e:1d:41:88:
39:34:62:1b:fb:5a:7b:49:55:a5:6f:da:ee:8a:9d:
f4:80:f1:90:8d:b7:28:a2:84:8d:b1:89:5a:9e:6b:
2c:43:6d:df:ae:6b:c4:2e:a6:ae:63:78:b3:ca:12:
b2:da:3e:29:dd:ee:95:80:d9:c0:a8:38:b4:82:45:
ad:40:d8:2c:de:2b:50:46:5e:94:5b:96:66:d5:c5:
be:30:22:a3:c3:44:60:2b:0f:90:dc:b4:fd:b1:2e:
e9:53:90:ac:6c:06:00:b1:e4:d6:91:c8:13:23:24:
63:e0:0e:5a:28:c3:cb:bf:55:65:54:a5:a9:fa:66:
c4:37:03:99:72:67:df:6f:8a:3c:e3:40:21:66:69:
dd:dc:c3:0d:ac:77:f2:a8:f8:8d:a2:c3:5b:c5:3d:
3f:78:16:1c:25:0c:08:84:1c:f3:64:60:09:73:68:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DA:88:C5:28:C8:08:23:1A:E6:01:E7:6B:31:09:92:9A:CC:45:DE
X509v3 Authority Key Identifier:
keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f9:59:91:da:bc:c4:cf:29:08:b6:7c:a5:6e:94:bc:d6:d7:
18:94:b4:df:a6:ae:1b:f8:ee:83:57:25:38:6d:df:ee:d6:18:
15:ec:ab:3f:55:99:6f:04:d2:3d:b3:a5:5f:27:fc:8b:f4:7d:
69:35:b8:67:e5:be:a5:b1:2b:7c:8d:ea:16:fb:17:06:d6:38:
ae:1a:62:23:79:99:b0:71:fa:32:99:c2:f5:fc:c2:20:d5:cc:
da:02:6f:25:73:e2:4c:0e:d2:d2:ea:92:5c:7d:c0:d5:35:bc:
7a:42:76:ba:0f:65:f6:a0:24:3f:34:8e:f4:6b:ec:c3:17:50:
d7:d7:ef:0b:83:33:cc:3c:24:51:27:78:c5:3d:86:d2:d6:63:
b1:ad:40:59:c1:1c:e1:ae:a1:92:07:45:6c:59:18:b0:94:d7:
66:cb:a8:d9:fe:eb:75:04:64:28:e9:8c:4f:94:60:e4:c5:9a:
d6:63:95:a7:50:fd:10:25:44:3d:0f:2c:ed:39:4b:3c:57:5a:
55:06:44:9f:fb:ac:6e:9a:7f:da:86:93:0f:13:cf:a8:79:31:
3a:f7:db:32:eb:55:1b:b0:f1:d2:96:82:c4:eb:c1:6f:3f:81:
7f:fc:9b:c2:12:74:58:a5:e2:ee:1e:db:dd:da:fe:e0:a1:f9:
79:d2:a6:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2bfgjZLX2Cd8AR0oV8ewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOWY5MzAwMmQ3OGU4ZTQwZGE1NjBjNDI5MWZiODMwZDky
ZGZmNjYwHhcNMjYwMzAyMDAwMTM4WhcNMjYwMzAzMDAwMTM4WjAzMTEwLwYDVQQD
EyhlNmRhODhjNTI4YzgwODIzMWFlNjAxZTc2YjMxMDk5MjlhY2M0NWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCNZYrSuOgDCg1xhJuF0k5rbnTVZ
iRTZ/uZgcUjQeCG/ZaphHnDTYyNxomawVeKSuGS6eXSsiezAtF8efM+2eCceQ9ik
bRdedkqVVRC8Xv3pZvNzgX4dQYg5NGIb+1p7SVWlb9ruip30gPGQjbcoooSNsYla
nmssQ23frmvELqauY3izyhKy2j4p3e6VgNnAqDi0gkWtQNgs3itQRl6UW5Zm1cW+
MCKjw0RgKw+Q3LT9sS7pU5CsbAYAseTWkcgTIyRj4A5aKMPLv1VlVKWp+mbENwOZ
cmffb4o840AhZmnd3MMNrHfyqPiNosNbxT0/eBYcJQwIhBzzZGAJc2hz6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObaiMUoyAgjGuYB52sxCZKazEXeMB8GA1UdIwQY
MBaAFAKfkwAteOjkDaVgxCkfuDDZLf9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83ODYzN2UtMDcyZC00NzAwLTg1N2Yt
NWYyNjM1NWM4YTc0LzEvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83ODYzN2UtMDcyZC00NzAwLTg1N2YtNWYyNjM1NWM4YTc0
LzEvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZflZkdq8
xM8pCLZ8pW6UvNbXGJS036auG/jug1clOG3f7tYYFeyrP1WZbwTSPbOlXyf8i/R9
aTW4Z+W+pbErfI3qFvsXBtY4rhpiI3mZsHH6MpnC9fzCINXM2gJvJXPiTA7S0uqS
XH3A1TW8ekJ2ug9l9qAkPzSO9GvswxdQ19fvC4MzzDwkUSd4xT2G0tZjsa1AWcEc
4a6hkgdFbFkYsJTXZsuo2f7rdQRkKOmMT5Rg5MWa1mOVp1D9ECVEPQ8s7TlLPFda
VQZEn/usbpp/2oaTDxPPqHkxOvfbMutVG7Dx0paCxOvBbz+Bf/ybwhJ0WKXi7h7b
3dr+4KH5edKmaw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:01 2026 by rpki-client