Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.mft
File: 1-vkiApgEfiQaYUx6gMMIdSa2QdQ.mft (raw, json)
Hash identifier: AdqP1LVz2mfBZn8wstHfda8yygJe/7RxgPx/+NMBWtI=
Subject key identifier: E2:16:8D:C5:4F:3D:F1:82:A6:B3:D2:22:94:17:FE:C6:B5:0D:DC:06
Authority key identifier: FA:F9:22:02:98:04:7E:24:1A:61:4C:7A:80:C3:08:75:26:B6:41:D4
Certificate issuer: /CN=faf9220298047e241a614c7a80c3087526b641d4
Certificate serial: 01A0E8534DE1F0F18527F4C2197FCF29E7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.mft
Manifest number: 6D
Signing time: Mon 28 Sep 2026 14:02:48 +0000
Manifest this update: Mon 28 Sep 2026 14:02:48 +0000
Manifest next update: Tue 29 Sep 2026 14:02:48 +0000
Files and hashes: 1: 1-vkiApgEfiQaYUx6gMMIdSa2QdQ.crl (hash: aB6kidgoubYbuxL/tuZ++3n9As0mEAEwr+RvUA4OwC0=)
2: HyS9OeER7hDvhrpH9P3qgsXvBH4.asa (hash: diO6MtHxtcdNQErm9imCO+dWoxmH2EHMTqdPtM649Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:4d:e1:f0:f1:85:27:f4:c2:19:7f:cf:29:e7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf9220298047e241a614c7a80c3087526b641d4
Validity
Not Before: Sep 28 14:02:48 2026 GMT
Not After : Sep 29 14:02:48 2026 GMT
Subject: CN=e2168dc54f3df182a6b3d2229417fec6b50ddc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:fd:36:df:12:29:4a:4b:19:5b:30:47:3a:
d8:34:c5:95:42:cd:19:17:9f:2f:00:82:de:8e:36:
a6:a8:f0:e1:8b:6c:d8:76:ff:77:be:a7:05:33:36:
9f:85:8c:5e:4e:de:32:c7:ac:9b:5f:30:58:06:f5:
31:19:c9:bc:a6:89:b1:9a:29:ca:b2:79:9d:03:af:
45:42:b0:6a:66:13:28:89:be:b4:7c:66:d7:3b:84:
9a:cf:fc:d1:d9:ef:84:66:e6:8a:70:9c:79:92:52:
8f:ae:7b:f0:93:ef:1d:a3:11:09:a3:ed:b5:80:31:
84:9a:f1:98:2c:fa:95:4b:a9:10:5d:f3:4a:03:fc:
54:6f:08:4d:f3:91:c5:b3:a1:23:15:55:94:72:c2:
83:b6:59:1c:77:09:ce:be:b2:8b:9c:37:fb:5e:91:
b2:ab:1f:a8:70:36:d3:1e:bb:41:32:45:76:a7:74:
f4:b6:6a:f1:c2:84:18:c7:21:1e:7f:fd:b4:2c:33:
0d:cb:48:c1:56:71:a2:3a:8f:fe:c4:7e:1a:84:43:
74:05:7b:ee:d8:4c:74:91:f8:47:76:86:42:af:4d:
bf:24:d5:78:3d:97:9f:36:86:4d:c9:ee:91:70:29:
72:db:52:9e:93:2e:35:e6:1b:76:9d:4e:0a:45:17:
6b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:16:8D:C5:4F:3D:F1:82:A6:B3:D2:22:94:17:FE:C6:B5:0D:DC:06
X509v3 Authority Key Identifier:
keyid:FA:F9:22:02:98:04:7E:24:1A:61:4C:7A:80:C3:08:75:26:B6:41:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:50:f2:a6:49:4b:fe:da:cf:30:3a:a5:f8:fc:7a:b9:10:de:
7a:85:5f:3c:e1:8a:d1:13:8b:8a:5f:9d:10:01:9b:da:2f:92:
8d:2e:98:67:d8:3c:65:18:fd:2f:e6:05:ee:56:c3:8e:bd:a2:
1a:d3:30:7e:d1:6b:f7:77:d6:84:25:1e:ef:a0:e1:51:00:c4:
91:d9:00:16:45:44:c5:6f:e6:3a:36:92:fc:3a:c8:82:7a:5e:
ed:4e:9c:85:66:14:ba:f7:54:a1:3e:eb:b3:27:eb:a3:33:04:
9b:4c:78:ac:dc:7d:22:6c:59:92:fd:a1:74:fd:c5:71:2a:96:
2f:96:7c:6d:b6:e5:cb:7d:f8:b0:31:89:89:6f:2d:b1:c3:f9:
31:38:36:14:ec:a0:bc:de:54:14:66:cc:5d:74:6f:60:03:5b:
c7:ab:58:83:76:68:97:41:0a:2f:a6:14:d7:2e:97:99:75:95:
46:35:06:b1:62:17:b0:6d:14:90:c9:61:11:df:b9:b4:fb:c0:
27:1b:57:93:a4:70:dc:9f:f3:a2:90:66:ec:40:77:7b:a4:37:
87:2a:a7:13:f3:a3:99:ca:a3:79:5a:65:b5:f0:53:3f:cf:29:
ed:59:0a:d2:f9:2f:a8:70:e2:18:35:a9:9d:15:af:42:56:69:
9c:de:15:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:56:18 2026 by rpki-client