Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
File: APkIwDKKjpc_pArFL8M359PE_tA.mft (raw, json)
Hash identifier: 9GK5lp0ZjSh9Y2MJWfLWXBFfJoQt05dhbE0gqg5Z2Bo=
Subject key identifier: C9:2C:B7:5D:3D:F6:4E:22:C8:91:91:C6:16:75:EA:DE:92:A2:AA:A0
Authority key identifier: 00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
Certificate issuer: /CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Certificate serial: 01A00102038418689DDAEF578980533B4291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
Manifest number: 19FC
Signing time: Fri 14 Aug 2026 16:01:44 +0000
Manifest this update: Fri 14 Aug 2026 16:01:44 +0000
Manifest next update: Sat 15 Aug 2026 16:01:44 +0000
Files and hashes: 1: APkIwDKKjpc_pArFL8M359PE_tA.crl (hash: IU2fzaMxAPlW7tX0UVRuX60m0BNKR3ikUtJJQvxS4T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:02:03:84:18:68:9d:da:ef:57:89:80:53:3b:42:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Validity
Not Before: Aug 14 16:01:44 2026 GMT
Not After : Aug 15 16:01:44 2026 GMT
Subject: CN=c92cb75d3df64e22c89191c61675eade92a2aaa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:d7:1e:b9:cd:6e:86:26:d1:88:ce:a9:eb:
f7:48:fd:47:cd:60:2c:2f:ea:a9:8a:10:14:54:ef:
5a:5d:0a:c4:3a:72:c2:6e:d1:54:19:b2:c6:4d:06:
1f:18:4c:70:ee:de:c6:ca:de:79:a2:31:2a:22:0e:
7f:d0:97:98:7a:b2:66:a4:f9:2c:57:3a:ff:14:6f:
ac:e2:21:7e:03:9e:e0:5c:38:47:2a:45:62:d2:63:
af:da:ed:62:62:23:5d:59:5c:37:f1:a6:b7:77:7a:
3f:3d:23:49:47:43:fa:bc:8a:7c:1a:57:0f:36:c5:
22:a0:a9:3b:6d:c3:f5:fb:db:49:6e:75:47:9b:9a:
23:55:b5:83:fe:c3:c3:50:50:ff:a3:d3:a3:5a:38:
13:01:3c:4f:8b:87:f1:88:03:eb:81:5a:ae:ea:2e:
38:1b:68:3a:77:ec:c6:ec:39:a4:de:dd:e1:fc:c7:
82:70:18:c9:a8:ed:ea:ee:8f:f0:57:f6:b9:b5:37:
c5:03:2d:33:1c:2b:98:b6:53:0d:ba:29:53:07:4e:
83:c2:31:fa:6f:f3:3d:1f:ee:01:79:0f:a5:65:02:
ba:16:38:4a:37:56:9e:29:b7:89:63:5e:52:e8:f1:
34:e8:32:45:40:69:be:77:ae:03:9e:d2:64:64:60:
f1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:2C:B7:5D:3D:F6:4E:22:C8:91:91:C6:16:75:EA:DE:92:A2:AA:A0
X509v3 Authority Key Identifier:
keyid:00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:6b:a5:78:11:95:20:09:f2:93:5c:b8:7b:5f:9e:77:4c:7d:
b8:e1:48:96:7b:9e:5a:e5:f2:1a:31:81:25:1e:98:2e:33:0f:
a5:2a:2d:bc:e4:c6:13:8f:92:31:c5:10:21:5c:21:6c:99:04:
f3:5f:08:28:01:f1:9f:3a:1f:7a:14:fb:ae:81:76:d8:58:0a:
a2:61:8b:7f:f1:98:a2:d3:aa:d1:d0:0c:a1:bb:66:12:3c:a0:
4d:63:52:ab:2b:2f:df:fa:fa:c3:91:d4:dd:2f:ad:e7:a9:de:
c3:48:e8:cb:5e:6b:2e:61:a1:68:cc:5b:4b:cc:ac:d2:af:b5:
f7:81:87:ef:49:6f:58:02:3e:f2:70:d9:55:7c:64:3b:f2:51:
a9:0d:96:85:34:58:ba:1b:82:d6:c6:02:6c:73:16:ba:a0:7d:
ac:24:e9:1e:88:48:61:bd:63:96:19:64:a8:53:9f:52:33:88:
4f:22:c2:33:8e:61:41:9e:ca:71:63:b4:fa:18:5c:ab:2b:17:
f1:bf:5b:1d:dc:5a:7d:ac:7f:1e:e0:14:2c:74:08:df:fa:24:
5b:cc:64:58:5f:b4:88:91:5e:8d:a5:7b:0d:2b:a7:c5:52:dc:
36:85:11:f7:03:51:f9:92:61:71:9c:0f:09:0e:84:41:56:78:
34:1b:60:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAgOEGGid2u9XiYBTO0KRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZjkwOGMwMzI4YThlOTczZmE0MGFjNTJmYzMzN2U3ZDNj
NGZlZDAwHhcNMjYwODE0MTYwMTQ0WhcNMjYwODE1MTYwMTQ0WjAzMTEwLwYDVQQD
EyhjOTJjYjc1ZDNkZjY0ZTIyYzg5MTkxYzYxNjc1ZWFkZTkyYTJhYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TzXHrnNboYm0YjOqev3SP1HzWAs
L+qpihAUVO9aXQrEOnLCbtFUGbLGTQYfGExw7t7Gyt55ojEqIg5/0JeYerJmpPks
Vzr/FG+s4iF+A57gXDhHKkVi0mOv2u1iYiNdWVw38aa3d3o/PSNJR0P6vIp8GlcP
NsUioKk7bcP1+9tJbnVHm5ojVbWD/sPDUFD/o9OjWjgTATxPi4fxiAPrgVqu6i44
G2g6d+zG7Dmk3t3h/MeCcBjJqO3q7o/wV/a5tTfFAy0zHCuYtlMNuilTB06DwjH6
b/M9H+4BeQ+lZQK6FjhKN1aeKbeJY15S6PE06DJFQGm+d64DntJkZGDxBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkst1099k4iyJGRxhZ16t6SoqqgMB8GA1UdIwQY
MBaAFAD5CMAyio6XP6QKxS/DN+fTxP7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVBrSXdES0tqcGNfcEFyRkw4TTM1OVBFX3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lYTJjNTAtYWZjYS00MGIxLTkzODEt
N2RlY2YxZTQ3ODY1LzEvQVBrSXdES0tqcGNfcEFyRkw4TTM1OVBFX3RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lYTJjNTAtYWZjYS00MGIxLTkzODEtN2RlY2YxZTQ3ODY1
LzEvQVBrSXdES0tqcGNfcEFyRkw4TTM1OVBFX3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr2uleBGV
IAnyk1y4e1+ed0x9uOFIlnueWuXyGjGBJR6YLjMPpSotvOTGE4+SMcUQIVwhbJkE
818IKAHxnzofehT7roF22FgKomGLf/GYotOq0dAMobtmEjygTWNSqysv3/r6w5HU
3S+t56new0joy15rLmGhaMxbS8ys0q+194GH70lvWAI+8nDZVXxkO/JRqQ2WhTRY
uhuC1sYCbHMWuqB9rCTpHohIYb1jlhlkqFOfUjOITyLCM45hQZ7KcWO0+hhcqysX
8b9bHdxafax/HuAULHQI3/okW8xkWF+0iJFejaV7DSunxVLcNoUR9wNR+ZJhcZwP
CQ6EQVZ4NBtgEQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:50 2026 by rpki-client