Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: EdGCegBfXRTmKPJmoDEKPTSbZPheksVTsD9HiaVmLOo=
Subject key identifier: 25:C9:15:AB:9D:48:47:3B:50:E5:D9:78:8D:B7:3A:C3:0A:B5:C2:9A
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 019CE5C8515829A74E9B396990A92E5FCDC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 17F6
Signing time: Fri 13 Mar 2026 06:00:36 +0000
Manifest this update: Fri 13 Mar 2026 06:00:36 +0000
Manifest next update: Sat 14 Mar 2026 06:00:36 +0000
Files and hashes: 1: L0pkYoARJXEFc-gB4c5J8VXY3Mg.roa (hash: 1faOAUcr0h7qDHU3+7FacAnxC8gdfFMLQm2JVMNKznA=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: fe0MaGx+aFQovQzF7bHXIfvliSXcPQZaL3sEEha+axA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c8:51:58:29:a7:4e:9b:39:69:90:a9:2e:5f:cd:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Mar 13 06:00:36 2026 GMT
Not After : Mar 14 06:00:36 2026 GMT
Subject: CN=25c915ab9d48473b50e5d9788db73ac30ab5c29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:93:28:9a:c6:95:59:60:b8:96:f5:75:fa:
62:12:63:6d:74:00:c5:ac:4e:8c:8a:c0:65:3a:2a:
06:28:db:c2:c5:5e:1d:bc:bf:6d:78:0b:3d:dc:5f:
9e:75:16:0a:48:9c:cc:bd:80:16:d8:24:f8:e0:5c:
71:df:c3:e2:dc:1e:24:1f:6e:70:05:52:2d:9e:c0:
15:77:fb:74:22:ce:14:60:6d:f5:88:64:f4:f4:e6:
07:a7:68:63:d8:80:67:80:16:49:83:21:2e:d3:0b:
56:c7:82:4a:d0:95:12:86:98:69:81:00:4c:ad:6f:
4d:2b:39:62:b3:f0:53:40:c6:39:76:d4:f5:bc:a7:
28:f6:8f:90:34:65:08:21:ab:a5:5d:ce:b3:d5:94:
27:1b:89:a5:a0:6e:41:cf:d3:a2:32:d9:db:d2:17:
7a:f8:c5:96:4f:49:f2:40:d8:c2:58:1f:67:ab:69:
f8:03:02:c4:c1:e0:e7:1f:36:50:38:5c:1f:87:ad:
e9:fa:c7:4b:db:52:78:87:aa:4e:be:49:87:d0:14:
24:60:0e:81:4b:c4:31:57:81:b0:54:f3:af:11:49:
51:2c:7b:06:90:b1:ab:1a:d1:97:f1:ae:50:0f:84:
5a:a9:8c:a9:47:91:b8:be:5d:2c:8e:af:06:ea:9a:
86:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C9:15:AB:9D:48:47:3B:50:E5:D9:78:8D:B7:3A:C3:0A:B5:C2:9A
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:88:00:41:e5:9c:36:e8:f1:b9:77:37:e5:21:9f:25:5b:d3:
40:b4:10:37:bc:05:ea:f0:af:ec:71:19:8e:3c:68:87:37:26:
40:7a:46:01:4c:b9:97:d6:47:32:df:ce:6a:2e:54:63:b0:3a:
d1:8a:e0:29:c2:d2:a7:3e:f4:35:01:f3:e5:ef:49:60:12:4f:
71:6e:c0:c5:16:65:fc:3d:c0:df:11:66:b9:1c:34:56:6c:b3:
0e:cd:e7:4f:c5:a4:01:68:a7:6a:42:d4:31:97:19:69:73:bd:
94:62:a8:d3:33:95:6b:80:10:4c:d4:5b:21:5f:5d:a5:da:5d:
66:48:85:08:35:8c:83:21:73:8b:b5:a1:d2:7c:26:85:35:a7:
4c:a9:56:19:77:19:1e:4a:9b:c2:3b:4e:5f:59:c6:d8:ba:45:
2b:67:2c:5a:99:7a:17:e5:ab:87:b8:26:f6:2e:10:a1:e2:58:
3d:77:b5:38:67:53:40:1d:54:93:dc:e4:95:66:87:ff:67:de:
ce:95:7a:54:b8:29:70:3d:14:89:30:2a:83:c5:4e:dc:78:a6:
74:24:3e:98:ec:42:5c:fc:ed:7a:cd:be:fa:56:e0:32:24:bf:
e2:69:34:df:8b:86:a2:6b:54:f4:1b:cf:54:02:82:39:a0:a0:
61:2b:74:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:20:37 2026 by rpki-client