Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: S1osDBga8rHjv0ubGkl/Iu0UvVxOFCCiCJER/hfxLPs=
Subject key identifier: 83:31:5C:E6:69:0A:AC:01:AE:D4:80:A5:54:A2:85:34:22:4A:3C:DA
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 01A0C5578B1243450F8CFD1472ADF30A105C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0B81
Signing time: Mon 21 Sep 2026 19:00:43 +0000
Manifest this update: Mon 21 Sep 2026 19:00:43 +0000
Manifest next update: Tue 22 Sep 2026 19:00:43 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: XIa+Dg5/VTg1ZEbHVj9RMmQt1K/vK07vOqHiEyO/cMc=)
2: Oqp0LnSyxA2FjpucrV--rkFrY9M.roa (hash: dShE79kR6w3t9UN+uBV7ehXeiyGLd3Stfbk1UBF24b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:8b:12:43:45:0f:8c:fd:14:72:ad:f3:0a:10:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Sep 21 19:00:43 2026 GMT
Not After : Sep 22 19:00:43 2026 GMT
Subject: CN=83315ce6690aac01aed480a554a28534224a3cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:16:37:4e:4e:6d:d0:57:6f:bd:d8:c1:2c:
4a:00:3b:c2:16:1d:a1:1f:a1:6f:85:ba:72:99:b9:
d8:d9:59:fb:3c:78:44:17:d3:82:21:ad:f7:aa:2a:
29:f7:d9:b7:c9:c8:20:05:1e:ea:a1:d8:0c:24:38:
b6:fb:cd:b2:a3:1f:1b:3c:99:d8:fc:b2:04:17:40:
54:dd:24:f9:fb:ba:de:28:36:82:76:8a:38:ce:50:
f2:3b:f0:7c:71:35:f4:23:86:ec:33:c6:46:22:cb:
13:98:5c:83:71:b1:d0:d9:ad:bf:af:b2:1b:9a:59:
af:3a:27:5a:4d:d8:bd:ab:37:6d:7b:77:69:6a:99:
9e:e1:f8:c9:9d:7d:dc:23:6a:65:f5:35:b8:13:5a:
e2:ae:16:02:72:5e:fe:51:d8:14:ab:b5:70:7a:e2:
13:45:59:e7:47:44:b1:bc:88:85:2e:72:28:a3:03:
db:26:c1:80:23:2c:e9:56:9f:b3:98:4e:87:ce:33:
41:c7:eb:26:f9:86:a0:62:e3:81:d1:e7:0b:e5:42:
10:3e:41:cf:05:42:8f:d9:fd:64:53:3d:22:3d:e8:
19:37:7c:11:09:e9:c1:4b:30:3e:77:79:12:78:5a:
bc:1f:af:5f:fe:f2:07:5b:5d:bc:90:5e:75:ea:7c:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:31:5C:E6:69:0A:AC:01:AE:D4:80:A5:54:A2:85:34:22:4A:3C:DA
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:16:30:fb:8b:d0:0e:c8:cf:dc:15:85:63:91:b7:40:da:0d:
e8:c8:cc:68:36:db:fb:be:27:79:5f:bd:d7:d6:3f:d0:c1:b7:
b0:c1:86:2b:55:c6:7b:2c:89:a9:7a:63:cd:72:ac:fa:c9:97:
4c:5e:09:3d:e9:76:33:ea:f7:7f:8c:2f:df:a4:f5:c8:19:01:
1a:8a:7d:57:e2:8b:a7:c7:8e:e0:23:69:cc:50:75:f4:5a:87:
66:47:8b:9f:7f:b7:6c:a6:3c:db:35:93:83:69:6d:f4:57:f0:
5b:ec:96:ed:a7:f0:72:f5:2d:7b:4f:52:92:91:f8:46:87:b1:
51:10:6e:e9:2c:06:2d:9b:d1:03:72:85:14:93:e3:cc:65:5e:
90:a2:a4:19:7c:d3:b4:2a:30:73:f1:63:a5:96:26:1b:1c:4b:
92:13:ef:52:6d:35:57:1b:a9:35:30:85:31:d8:e3:a9:24:f2:
ad:a7:3f:31:bf:15:48:94:b8:66:b4:8f:67:22:5f:54:6d:d5:
50:6a:46:9a:b4:50:d3:83:77:75:9c:e8:e7:af:b3:a2:b2:6b:
84:09:b7:27:b2:ad:ae:72:a2:28:d7:75:3e:11:7b:12:93:43:
75:3b:0a:fa:af:93:fc:6d:25:71:40:42:a5:4b:bf:ca:98:cf:
a7:b4:1c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:59:32 2026 by rpki-client