Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
File: apBb7RAQVRrlUQyuXu4LuZnSh44.mft (raw, json)
Hash identifier: cYQciRjSHmP5Xxtj6NIuqv0m8jnMwZ1QxnYp+kbyNZE=
Subject key identifier: C8:F7:D4:20:3C:13:70:3A:C2:6D:E8:79:95:0C:05:A6:DB:33:30:8A
Authority key identifier: 6A:90:5B:ED:10:10:55:1A:E5:51:0C:AE:5E:EE:0B:B9:99:D2:87:8E
Certificate issuer: /CN=6a905bed1010551ae5510cae5eee0bb999d2878e
Certificate serial: 01A0EEF932BEE289B5B4E34910BCC0C4C250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
Manifest number: F5
Signing time: Tue 29 Sep 2026 21:01:43 +0000
Manifest this update: Tue 29 Sep 2026 21:01:43 +0000
Manifest next update: Wed 30 Sep 2026 21:01:43 +0000
Files and hashes: 1: 8WO4H3LLmQjh35Y1DhdVPcJaeWw.asa (hash: sduouSzb9jUwQP/768gaM8wQLqZouXh1WtsTxFHYtIM=)
2: apBb7RAQVRrlUQyuXu4LuZnSh44.crl (hash: GSeLxJS/6oMoc6x2tjeWemNhYMhX3yGoE12Zb8R6Btk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:f9:32:be:e2:89:b5:b4:e3:49:10:bc:c0:c4:c2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a905bed1010551ae5510cae5eee0bb999d2878e
Validity
Not Before: Sep 29 21:01:43 2026 GMT
Not After : Sep 30 21:01:43 2026 GMT
Subject: CN=c8f7d4203c13703ac26de879950c05a6db33308a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f8:f5:b6:fe:93:d1:c5:45:a2:91:c9:3e:03:
ce:f2:78:55:a7:10:0e:ca:04:63:d3:b6:71:76:46:
7e:bc:44:3b:3c:7b:3b:1f:d6:12:8c:8c:cd:b4:9e:
b4:76:20:7c:2a:c0:6b:f8:c3:34:6c:d4:1b:0e:bc:
44:f9:95:47:17:c3:05:e3:24:5c:b9:48:e8:35:53:
57:5b:92:5f:29:ef:8b:f1:8a:cd:20:60:d3:6d:63:
cb:e3:30:54:6b:48:3d:14:2f:f8:49:15:f9:e6:00:
62:84:d1:04:7b:b2:92:4c:1a:0c:93:66:63:e9:f7:
d9:3b:9e:aa:e5:94:63:e1:4b:20:3b:e7:d4:d4:db:
fe:a4:ae:21:b4:25:8b:aa:79:43:2e:1f:f4:96:8f:
cd:cc:f4:8d:b6:61:7e:a8:4f:da:f4:90:ab:f9:df:
f8:4d:89:f6:07:ee:e0:fa:60:fe:da:84:e1:b8:e3:
e1:ab:59:74:50:a8:24:d3:f9:89:17:f6:06:d5:7d:
2f:14:36:48:89:f9:04:7f:69:21:af:0a:ea:65:63:
06:d1:a6:6a:a2:2c:19:8b:9c:36:08:29:0f:d5:74:
4f:cb:10:0e:4d:26:f9:5a:30:40:bc:3a:09:3d:9a:
20:23:26:f9:3c:df:ac:39:f9:a0:fd:60:42:76:08:
5d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F7:D4:20:3C:13:70:3A:C2:6D:E8:79:95:0C:05:A6:DB:33:30:8A
X509v3 Authority Key Identifier:
keyid:6A:90:5B:ED:10:10:55:1A:E5:51:0C:AE:5E:EE:0B:B9:99:D2:87:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ff:c4:f4:59:03:d5:28:28:57:04:e5:f3:e9:74:41:c5:32:
17:1d:0a:2d:3a:6d:4a:61:da:02:21:e1:6f:c7:cc:a5:77:fc:
0e:c6:8a:b3:d5:9d:95:ef:f6:03:49:bd:ed:8d:b6:3d:40:e6:
cc:05:dd:30:79:1a:a5:24:b2:b6:ac:51:34:b2:53:90:45:43:
00:dc:04:1a:38:0f:e2:86:85:33:f3:a1:3b:59:dd:fa:f4:15:
db:82:a7:1c:45:11:ce:e8:f4:f4:a2:be:2c:ac:73:74:d1:b4:
96:be:18:29:0f:fc:fd:f1:64:2a:4b:38:bb:79:d9:33:c2:8c:
76:f1:75:a1:a0:b7:4c:ef:9b:8a:92:d9:e1:b9:4f:73:79:07:
aa:6c:7b:df:55:51:37:90:e0:ab:c5:9d:98:be:37:c3:44:84:
d4:38:dd:ec:46:96:38:c7:9b:fe:39:e4:c7:32:e4:6a:2c:50:
29:bf:1b:f3:f2:ae:8d:88:42:17:88:85:af:9d:7b:08:ad:36:
f3:39:78:20:bf:a2:54:33:b8:17:ec:14:1d:1a:47:b9:a6:73:
06:fe:66:1a:e3:f3:51:fe:ff:d4:a8:b1:fb:f9:c0:dc:8f:c8:
d9:0e:54:da:62:61:c2:ab:07:cc:04:b6:ff:f9:bc:11:9d:a5:
ae:a9:d6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 06:56:52 2026 by rpki-client