Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: QXsLTuHNmcWETLvOghd4rcxb6Fo/d8sVzbjwlixhxo0=
Subject key identifier: 75:4A:C9:20:57:CD:7D:B9:76:2F:38:96:7D:47:BD:FE:90:DA:DB:2E
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 01A181BE4635F9B5B1B7A60B9EC45F962959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 1A59
Signing time: Wed 28 Oct 2026 09:01:33 +0000
Manifest this update: Wed 28 Oct 2026 09:01:33 +0000
Manifest next update: Thu 29 Oct 2026 09:01:33 +0000
Files and hashes: 1: L0pkYoARJXEFc-gB4c5J8VXY3Mg.roa (hash: 1faOAUcr0h7qDHU3+7FacAnxC8gdfFMLQm2JVMNKznA=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: c2syycuuPtUBRQE7F81uUNYVcu1yShxDdy0OXLlRUgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:46:35:f9:b5:b1:b7:a6:0b:9e:c4:5f:96:29:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Oct 28 09:01:33 2026 GMT
Not After : Oct 29 09:01:33 2026 GMT
Subject: CN=754ac92057cd7db9762f38967d47bdfe90dadb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:55:d7:52:48:d5:13:38:7a:95:fc:b2:07:
d2:f1:ed:f7:12:e0:1a:6d:89:73:06:a6:a9:1f:d8:
3c:0f:13:2e:aa:cd:89:2f:14:37:2b:33:ee:fe:28:
c4:30:d2:56:2f:b9:c3:1b:c2:88:78:e3:20:42:8e:
98:e0:13:60:27:8b:b4:83:1f:5e:43:4d:1b:42:22:
ad:d8:3d:ed:ff:cc:4e:b9:51:7b:d5:e6:43:12:75:
57:80:44:20:72:e4:b2:f0:c7:98:fc:1f:ff:6f:18:
b4:11:8b:b4:c9:e3:d8:be:89:4b:93:2d:51:2a:05:
e9:bb:78:08:b6:ad:30:9a:2c:ce:60:6b:63:9d:ff:
31:30:69:21:6c:76:d3:da:26:e6:de:b1:6a:ca:1b:
8a:ba:e8:05:f0:03:d5:2c:0f:c7:7d:3c:5e:53:13:
5d:9c:b0:ac:4d:d9:c6:4a:43:b1:4b:0c:13:69:d8:
bc:77:e0:a3:08:d9:89:67:ea:6b:92:79:00:34:51:
0d:98:99:ba:61:0a:d7:61:c7:94:6a:14:91:6b:16:
e1:0a:e2:dc:68:1a:69:2c:55:2d:3e:74:a6:2c:a3:
98:f5:eb:c2:f7:36:05:0a:36:e7:19:61:36:7d:ec:
99:58:25:ba:76:e2:77:fe:1f:b9:a3:4c:a0:64:e5:
66:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4A:C9:20:57:CD:7D:B9:76:2F:38:96:7D:47:BD:FE:90:DA:DB:2E
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:be:4e:a7:72:a1:b6:f4:fd:f6:80:f0:5a:6b:7b:c0:a0:60:
a6:55:f4:c0:97:93:c6:42:84:33:08:94:2e:8e:15:33:ce:fb:
23:df:95:68:7d:0d:f5:eb:fe:89:e5:24:a9:1f:48:7c:76:e1:
1b:f5:34:a7:9a:d2:75:7c:6a:17:92:ba:94:c6:ee:4c:d7:13:
40:48:ed:2a:56:30:a9:0b:97:b7:3e:d9:92:a8:10:12:e4:2f:
10:5e:03:6b:f6:11:a0:3b:43:ba:12:81:7e:ff:c0:11:f5:38:
ee:2d:9e:04:29:ee:24:41:a8:9b:a7:b8:ee:15:da:a0:cf:cf:
7a:e7:3f:d2:c5:aa:13:d1:60:77:7b:04:ea:97:ba:5d:13:14:
fd:7d:16:b1:a4:66:13:19:01:7c:35:57:c4:f9:56:64:5d:bb:
16:4d:43:c4:79:78:17:80:46:d0:79:9e:d4:25:b8:af:5d:96:
fb:ce:3d:b8:c6:31:54:4f:bc:b1:93:d4:16:20:b0:a3:8a:37:
6b:61:9e:51:b4:d2:14:07:90:f4:00:f6:1f:a8:1d:e0:68:f2:
06:cc:2b:93:9e:1e:9c:a4:1e:e6:46:c9:49:9f:a9:b2:00:8c:
7b:6a:21:a9:db:eb:fc:15:65:8b:10:20:1b:8c:bf:bc:f3:08:
b8:ae:95:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:50:34 2026 by rpki-client