Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
File: APkIwDKKjpc_pArFL8M359PE_tA.mft (raw, json)
Hash identifier: k+mNomJI0a8JzLhMNg1oWF6eaxzF1UWecxSkViZKUlQ=
Subject key identifier: 42:F6:76:BE:06:25:8F:CF:9A:F6:68:51:F5:24:A5:05:78:E4:BC:86
Authority key identifier: 00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
Certificate issuer: /CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Certificate serial: 01A13FA7D9B78FA106EF6D3397B9D4368F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 13:02:07 +0000
Manifest this update: Thu 15 Oct 2026 13:02:07 +0000
Manifest next update: Fri 16 Oct 2026 13:02:07 +0000
Files and hashes: 1: APkIwDKKjpc_pArFL8M359PE_tA.crl (hash: PrAVhrfoISZ28RRU0B+czx7LV20RDJsMOFyKYbnaPM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:d9:b7:8f:a1:06:ef:6d:33:97:b9:d4:36:8f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Validity
Not Before: Oct 15 13:02:07 2026 GMT
Not After : Oct 16 13:02:07 2026 GMT
Subject: CN=42f676be06258fcf9af66851f524a50578e4bc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:8d:31:0d:6e:b5:dd:9c:5a:ae:81:79:62:
f6:6f:7d:4d:5c:f3:a8:4d:4d:5a:a5:13:8e:fe:67:
e9:41:49:1c:1b:08:4c:a1:8b:34:e9:ae:b8:01:46:
e1:87:76:32:62:49:e8:59:ec:c3:2f:3a:ad:29:ec:
64:41:2a:a9:c5:44:22:2c:19:9f:1e:e1:c3:2c:fb:
5e:d7:be:81:ec:84:12:44:f4:53:25:ba:86:fc:f6:
ef:b3:3e:d9:fe:d5:0f:05:30:be:f4:fa:91:df:8a:
4b:52:6c:49:9f:b0:92:59:5c:e8:73:1a:51:31:19:
c1:f0:d4:bb:ca:e8:ed:36:3b:ff:7b:1b:31:96:40:
51:5a:94:97:00:e3:ae:39:e7:af:6f:38:51:14:1a:
4c:7a:ab:fd:6c:ea:ae:ec:fd:af:9f:7e:3f:a7:7c:
ef:52:89:f1:35:8e:75:b0:93:98:47:d3:e0:68:a9:
c1:3c:f7:83:a6:24:68:ee:71:22:f9:3b:63:8b:b2:
e7:4e:c6:93:dd:cd:5f:ac:fb:09:32:f2:d5:5d:6a:
89:34:92:16:e5:6e:73:5f:80:ea:1f:71:a2:77:25:
9b:41:ab:7e:30:c6:1f:48:e6:8b:31:cf:ed:b6:02:
72:51:a1:39:57:94:d9:35:67:51:95:d3:2e:49:dc:
4d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F6:76:BE:06:25:8F:CF:9A:F6:68:51:F5:24:A5:05:78:E4:BC:86
X509v3 Authority Key Identifier:
keyid:00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:62:87:99:62:c8:de:23:78:16:6e:42:e3:d7:94:bf:cc:6e:
24:6b:fa:76:84:42:73:27:f8:ba:e5:3e:bf:d5:75:d1:64:aa:
7c:3d:d7:bb:ee:b9:86:48:82:9d:74:40:50:d2:11:7e:c0:e6:
d9:d7:ef:20:3a:16:f1:b4:5e:f5:36:ab:51:4b:f2:c0:30:44:
de:07:28:67:f6:4c:cd:d3:02:d0:d5:bc:3a:5d:f0:c1:89:af:
90:0d:e1:6e:de:f5:1d:16:c3:8a:fd:7e:16:b7:0a:3d:79:35:
1f:3c:43:81:57:07:a8:37:a2:22:7a:12:6d:d9:2a:5d:02:db:
f6:2d:b2:75:dc:e2:bb:f9:54:76:1f:5b:1a:c5:38:93:9d:51:
26:32:48:dc:9d:b9:d1:6a:0e:e4:fa:39:e3:4d:a1:8b:8c:61:
ff:58:39:67:99:80:55:b9:56:07:ee:5a:6d:20:26:ee:c9:6d:
f5:be:5e:6e:38:7d:b2:72:2c:64:6b:e2:2f:ee:97:87:be:a1:
0d:8f:cd:45:c0:cb:70:68:b5:df:4a:ef:59:94:66:bc:dc:24:
39:23:dc:5a:44:5b:a5:eb:ea:d6:46:d0:02:3f:e2:52:54:b4:
92:a1:82:89:c8:69:da:f5:ba:96:89:04:0e:32:b5:08:20:92:
9e:a9:51:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:05:53 2026 by rpki-client