Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.mft
File: APmKcC-EdVZk2q0JVCRiEhJf1js.mft (raw, json)
Hash identifier: k7A5YUXVH2a4zRD4h825wlmH9MBD0496ucwjieX4tYE=
Subject key identifier: 15:5F:A8:A1:A3:5C:7D:52:3D:32:0D:E3:DE:04:42:7F:6C:26:C5:4F
Authority key identifier: 00:F9:8A:70:2F:84:75:56:64:DA:AD:09:54:24:62:12:12:5F:D6:3B
Certificate issuer: /CN=00f98a702f84755664daad0954246212125fd63b
Certificate serial: 01A04129B0B71AD7FB4215852E0EEACF4A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APmKcC-EdVZk2q0JVCRiEhJf1js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:00:46 +0000
Manifest this update: Thu 27 Aug 2026 03:00:46 +0000
Manifest next update: Fri 28 Aug 2026 03:00:46 +0000
Files and hashes: 1: APmKcC-EdVZk2q0JVCRiEhJf1js.crl (hash: 1RMxj3G1S1cXwDonq1KE2+rYXdNKQ//Pf8FlIoh88zk=)
2: qZ9vCmktgVJOJlSmcCKZ_0Kss54.roa (hash: mVbDrPd9yE6i8GNPlAaQal/Zd89QBSi5kZ9wFmjX2kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.mft
rsync://rpki.ripe.net/repository/DEFAULT/APmKcC-EdVZk2q0JVCRiEhJf1js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:29:b0:b7:1a:d7:fb:42:15:85:2e:0e:ea:cf:4a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f98a702f84755664daad0954246212125fd63b
Validity
Not Before: Aug 27 03:00:46 2026 GMT
Not After : Aug 28 03:00:46 2026 GMT
Subject: CN=155fa8a1a35c7d523d320de3de04427f6c26c54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:16:90:aa:4f:12:6c:b1:2c:d1:7f:20:a3:17:
02:02:e3:a5:54:e9:75:bd:55:a6:43:31:b0:65:e6:
4f:97:72:9e:9e:75:29:27:7b:af:c4:c8:15:62:2a:
81:3f:96:10:e2:84:2c:ad:3b:28:b9:9a:3e:e7:d4:
de:17:75:3c:88:59:b3:88:6d:3e:0d:0e:c9:ba:91:
27:20:ea:f5:f6:e5:23:5c:f5:4c:c1:af:be:e3:d7:
7c:cf:dc:83:89:0f:d3:ef:0a:f2:c1:f6:52:cb:56:
83:b6:a4:72:84:da:ff:da:86:7b:b2:0d:22:e4:9c:
54:0a:dd:36:d2:e2:6b:6e:5b:92:7f:00:92:88:74:
fd:ba:87:f7:9d:cf:53:d5:29:7d:4d:60:c8:75:de:
8a:5d:4e:16:20:1e:3a:4c:3b:a6:c6:49:ca:c3:63:
44:ae:39:12:70:69:1f:c1:fd:8b:a4:ef:0b:f4:b1:
7e:8d:d5:72:85:ed:fd:ca:ca:8c:59:51:43:16:d1:
a0:92:49:cf:1b:92:a2:36:81:d0:ae:be:51:9e:6a:
d3:b0:74:54:b2:ca:0e:5e:81:fa:ce:31:32:b1:f8:
a7:3f:25:5d:82:5e:b6:30:6d:02:82:f9:a1:14:e5:
0c:1c:db:d7:99:70:78:90:28:52:25:b3:05:5d:c9:
f9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5F:A8:A1:A3:5C:7D:52:3D:32:0D:E3:DE:04:42:7F:6C:26:C5:4F
X509v3 Authority Key Identifier:
keyid:00:F9:8A:70:2F:84:75:56:64:DA:AD:09:54:24:62:12:12:5F:D6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APmKcC-EdVZk2q0JVCRiEhJf1js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1d:dc:9b:db:ba:13:2e:a0:0b:b2:44:38:ce:2c:cd:0b:9d:
bf:f5:6d:ed:c1:6f:7e:41:d6:cc:e9:3f:1d:9e:3a:91:fe:cb:
a5:ea:62:f3:16:9a:02:cc:3b:74:44:eb:7c:2a:40:13:8a:39:
42:85:49:84:99:91:65:16:00:2a:19:83:38:77:00:f6:8c:90:
53:3c:5c:df:0a:6d:f8:88:49:cf:4c:67:4f:5f:4d:ae:30:0a:
87:42:68:18:e8:87:1e:9f:c5:db:be:2c:7b:61:b8:9c:20:63:
c2:d9:e1:9b:3e:46:00:6e:5d:71:3b:3e:5d:78:a7:13:d4:58:
01:9d:a9:e0:eb:6c:f2:ad:e6:53:83:91:1a:15:8d:55:32:ff:
91:e9:11:04:f6:27:0e:2d:32:0a:b6:a3:91:40:4c:c0:39:02:
4f:2f:49:3f:3e:16:58:d3:bb:df:56:25:7e:23:d8:46:fe:32:
09:b1:8d:e5:95:ac:56:c2:70:87:23:f2:6d:d9:79:34:c5:07:
e0:63:8c:45:ba:5a:f4:d3:7a:be:43:c1:93:90:b3:e2:82:3c:
2d:24:a9:4c:2d:2b:c3:a2:3c:35:b3:e1:45:b9:14:91:d3:7a:
71:08:32:9c:1a:d7:64:49:fa:28:70:d0:30:16:52:b1:da:c3:
47:ea:3d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:45:58 2026 by rpki-client