Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: R/erI7icIwxDKk/Hudn+8lpL4VuQrX2L62z9uVtKQyU=
Subject key identifier: 8D:D0:A3:67:C8:C2:03:71:6B:24:2B:A4:8D:81:FB:5D:EF:A6:18:6D
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 019FA97561A14A35B2D770DC48A313D67195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0AEE
Signing time: Tue 28 Jul 2026 16:01:09 +0000
Manifest this update: Tue 28 Jul 2026 16:01:09 +0000
Manifest next update: Wed 29 Jul 2026 16:01:09 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: Q9f3vehN2N7h889PYC0jzXJXxphWB9usJY7oyhO+1QM=)
2: Oqp0LnSyxA2FjpucrV--rkFrY9M.roa (hash: dShE79kR6w3t9UN+uBV7ehXeiyGLd3Stfbk1UBF24b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:61:a1:4a:35:b2:d7:70:dc:48:a3:13:d6:71:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Jul 28 16:01:09 2026 GMT
Not After : Jul 29 16:01:09 2026 GMT
Subject: CN=8dd0a367c8c203716b242ba48d81fb5defa6186d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:ae:d4:00:5a:b2:86:82:0a:63:3c:cf:49:
bb:0d:95:cd:d4:04:ca:75:18:a7:a1:d1:5f:74:70:
a9:94:2a:1d:ea:62:97:1e:9d:3a:12:81:4c:0d:05:
48:a9:bd:f8:97:f9:ac:c6:8e:a7:4b:52:76:3d:d3:
5b:7f:19:ac:5b:72:aa:2e:a2:69:58:40:9b:df:c3:
18:ee:1c:d1:71:b6:32:57:86:ef:a8:93:03:d8:6e:
9e:bd:37:dd:eb:5a:23:ac:8f:7c:d7:55:50:90:62:
8f:3d:fb:70:60:bb:4e:e4:1c:71:36:c3:90:e4:af:
cb:73:91:b8:83:0d:fa:38:8c:a1:38:4b:02:c7:78:
8a:a7:21:8f:28:02:3a:49:56:f6:ed:5b:19:ab:8e:
3f:04:5e:ee:0a:a3:90:5b:a9:f9:07:09:91:93:6d:
84:00:70:87:87:02:e1:3a:ae:1a:b5:1a:f6:1b:19:
e3:0a:4a:f6:4f:6f:d6:81:ab:84:ae:f8:9f:f9:76:
77:58:b5:5d:eb:c7:a1:a6:c0:75:22:c5:93:29:12:
b2:a2:f7:f8:0e:98:fc:a9:5d:cf:93:40:85:d7:ea:
68:9f:14:61:f3:dc:8e:36:e7:10:42:90:50:cc:c3:
04:1d:af:22:b4:d4:c4:98:2c:6e:bd:c1:cc:bb:d7:
d3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D0:A3:67:C8:C2:03:71:6B:24:2B:A4:8D:81:FB:5D:EF:A6:18:6D
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9d:72:48:52:b1:14:69:99:ec:e3:d4:8e:16:6f:b9:d8:bd:
a1:72:15:6a:1d:10:98:c5:10:3f:50:ab:64:f0:62:6f:f4:a9:
81:ca:a5:b2:d1:3b:ad:c2:c4:dc:1b:56:01:ac:82:6a:53:90:
be:28:d9:8d:07:94:c3:9d:ca:7f:68:d9:9f:cc:5c:28:61:11:
50:d9:93:4a:f5:39:65:1a:fc:77:14:63:91:02:dd:f3:f1:26:
6b:73:17:cb:ed:5c:a0:c9:f9:94:88:bb:b9:46:47:a7:83:63:
9a:f9:6a:e5:04:52:48:c4:85:d8:e6:89:f8:d3:63:eb:77:8f:
02:83:22:ab:da:13:09:f0:d4:45:c6:3d:6a:09:46:ae:b0:1f:
86:2f:39:b6:b8:84:10:a4:89:7f:26:5f:2a:90:d5:d7:88:30:
dd:70:6b:9a:b5:41:43:dc:f9:87:f3:ba:15:ab:55:14:47:e4:
ce:75:bf:26:10:c2:6c:5c:d9:bc:f1:bc:af:cc:de:1b:25:ca:
3f:f2:0c:78:a7:ff:f5:8e:c6:02:88:88:40:9e:43:89:8d:7b:
09:06:17:f3:b6:da:45:ef:ea:9b:51:ae:5a:d6:1a:41:2c:3f:
06:55:07:2e:7c:b5:40:39:8f:21:95:66:fc:bd:7e:b2:8e:e0:
ae:f6:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:13:47 2026 by rpki-client