Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
File: apBb7RAQVRrlUQyuXu4LuZnSh44.mft (raw, json)
Hash identifier: XE41FK0BIaatGl9NXifk30xyuq1O2W3qWwQyUtr1ihU=
Subject key identifier: 1B:9F:F5:06:A4:E1:19:33:C0:FA:85:BD:32:44:CE:4D:04:50:C4:7D
Authority key identifier: 6A:90:5B:ED:10:10:55:1A:E5:51:0C:AE:5E:EE:0B:B9:99:D2:87:8E
Certificate issuer: /CN=6a905bed1010551ae5510cae5eee0bb999d2878e
Certificate serial: 01A10437C1ABCEA8661BE6A6519F82B52C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
Manifest number: 0100
Signing time: Sun 04 Oct 2026 00:02:05 +0000
Manifest this update: Sun 04 Oct 2026 00:02:05 +0000
Manifest next update: Mon 05 Oct 2026 00:02:05 +0000
Files and hashes: 1: 8WO4H3LLmQjh35Y1DhdVPcJaeWw.asa (hash: sduouSzb9jUwQP/768gaM8wQLqZouXh1WtsTxFHYtIM=)
2: apBb7RAQVRrlUQyuXu4LuZnSh44.crl (hash: qElBw7yXir6cjDGUN0q47hq+0EMZrw5r4juhn/g8cVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:37:c1:ab:ce:a8:66:1b:e6:a6:51:9f:82:b5:2c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a905bed1010551ae5510cae5eee0bb999d2878e
Validity
Not Before: Oct 4 00:02:05 2026 GMT
Not After : Oct 5 00:02:05 2026 GMT
Subject: CN=1b9ff506a4e11933c0fa85bd3244ce4d0450c47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9a:5f:ca:13:4c:50:7b:84:10:59:89:3b:63:
ae:54:df:a5:6d:dc:7f:37:d6:63:9c:f2:2f:bf:9f:
2e:69:84:56:eb:fd:15:c4:97:bb:b7:1e:c7:74:34:
96:b4:b8:a8:bd:b4:08:6f:66:71:97:3c:e8:79:57:
24:4e:85:84:f3:dd:ff:61:cb:a4:bc:c1:f7:ec:d8:
a5:5f:b5:42:a4:10:70:f2:8b:19:2b:79:88:d2:22:
11:8a:3a:55:f4:a3:72:e8:02:b9:90:0c:dc:ce:b6:
a1:0a:81:f0:2e:07:79:91:6d:84:54:31:18:12:04:
2e:99:76:0c:43:79:0a:3d:10:82:17:d9:2c:13:6b:
4d:09:0d:21:e8:71:5f:b2:ee:7f:bd:dc:7d:26:f4:
bf:1a:a3:3d:93:8b:e0:15:09:79:90:72:3f:1f:79:
0c:ea:e4:ac:2f:3b:22:4f:96:07:61:c6:0c:4d:b8:
54:cd:c6:e3:1d:41:ed:43:6d:50:d5:15:ae:53:3e:
a7:56:c1:70:95:fc:1f:5f:f5:27:5b:27:01:11:d5:
f7:88:a8:65:23:e1:c1:29:06:aa:91:81:d8:ec:35:
45:aa:8c:18:e9:0d:38:07:9e:cc:74:4c:7b:38:9f:
61:18:01:c4:07:77:8f:cd:ca:25:33:b6:96:09:4d:
12:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9F:F5:06:A4:E1:19:33:C0:FA:85:BD:32:44:CE:4D:04:50:C4:7D
X509v3 Authority Key Identifier:
keyid:6A:90:5B:ED:10:10:55:1A:E5:51:0C:AE:5E:EE:0B:B9:99:D2:87:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:12:40:95:19:11:89:07:e1:5a:13:ed:dc:f6:85:f0:16:da:
73:8e:04:69:ca:39:14:43:d8:a5:b2:35:fd:95:f2:3c:5a:a2:
f1:5a:17:a3:55:e2:d6:b2:cc:69:2c:84:78:0e:46:11:8a:3f:
a8:b9:59:1f:0f:7b:d9:b0:68:bf:8d:00:2f:38:b3:49:89:65:
d6:e1:a0:bc:c6:7a:27:e1:9f:3e:83:4b:80:71:35:62:0a:18:
d3:0a:f3:75:c8:2a:c9:af:35:02:8d:16:ac:ca:e0:8e:d6:8c:
8d:bf:6f:85:97:8e:e0:2e:ba:3d:1b:9b:80:30:a1:aa:47:79:
b8:ae:49:13:de:64:b2:ed:5e:78:95:9a:ba:5b:14:83:ca:64:
e6:c7:8c:b2:48:b7:35:53:e8:3f:2f:90:22:74:cb:f6:7d:d6:
bd:c7:b5:3d:79:8d:87:a6:f4:a9:32:bf:01:de:87:e9:ef:38:
31:30:02:5d:3a:89:cc:34:91:e5:a2:c0:4d:72:ea:28:f3:cf:
48:41:f2:ce:13:b2:87:2b:c8:7c:70:c3:23:3f:80:e7:72:da:
99:2c:57:4b:0c:c5:04:3a:1b:8c:c9:13:37:02:17:ef:cf:80:
14:dd:68:a6:34:22:39:f0:66:f6:35:c7:a6:d5:5b:71:73:2a:
48:9b:12:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:04:25 2026 by rpki-client