Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: 94KXYfRwsMtXBpjbHHHoH4FnAv2I2yOyAm69zaLMPIw=
Subject key identifier: 1A:1D:71:43:92:28:0B:0D:CE:7F:70:3C:D2:78:F0:C4:5F:06:12:3A
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 019EB92205FC4A4B8BFE92AC34D0A727E02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 18E8
Signing time: Fri 12 Jun 2026 00:01:15 +0000
Manifest this update: Fri 12 Jun 2026 00:01:15 +0000
Manifest next update: Sat 13 Jun 2026 00:01:15 +0000
Files and hashes: 1: L0pkYoARJXEFc-gB4c5J8VXY3Mg.roa (hash: 1faOAUcr0h7qDHU3+7FacAnxC8gdfFMLQm2JVMNKznA=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: /2FvjD8z+NN6cV0fnpRGtWRUL1lAWYjO1E/r+1YMEKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:22:05:fc:4a:4b:8b:fe:92:ac:34:d0:a7:27:e0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Jun 12 00:01:15 2026 GMT
Not After : Jun 13 00:01:15 2026 GMT
Subject: CN=1a1d714392280b0dce7f703cd278f0c45f06123a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:5d:86:8a:33:40:46:cb:86:1f:b0:1c:b8:
42:60:bc:cc:e2:01:a5:67:9e:e4:64:c4:09:92:61:
55:a5:01:15:2f:68:fe:a9:c5:00:a7:70:ab:a1:f7:
36:9d:bc:89:fd:fb:d4:c5:9f:cf:cc:84:d2:f8:a2:
87:75:30:09:d5:cd:37:60:4a:83:3c:93:06:61:2f:
6e:89:53:9c:20:cd:49:84:10:b7:53:fc:70:67:aa:
42:f4:4e:07:b4:ad:98:6a:f7:81:e2:c1:f2:30:7d:
2f:f3:c2:a4:f7:81:54:cb:7b:23:51:f9:51:6d:6f:
0f:1a:3f:58:cc:e3:19:b1:c3:1c:97:53:7d:0b:d3:
ed:29:4f:e0:1b:5d:17:fc:66:44:fc:9c:55:33:38:
a6:ed:98:30:2b:aa:e3:98:be:1d:3e:09:3c:15:d3:
7d:69:0a:d7:a7:67:13:72:20:71:58:b9:2a:56:87:
cf:15:cc:87:3d:59:2d:a2:a3:e8:77:f4:16:f0:67:
98:25:dc:47:cb:18:7a:61:9a:ae:a2:60:76:ed:10:
04:48:6e:ad:a7:81:88:49:db:f5:5e:0c:64:3c:79:
34:63:b0:b3:23:df:60:cb:72:3a:ca:d4:ef:08:88:
9d:39:4a:4f:91:fe:fa:16:6a:f4:1a:5d:b3:50:65:
9a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:1D:71:43:92:28:0B:0D:CE:7F:70:3C:D2:78:F0:C4:5F:06:12:3A
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6d:0b:42:ea:a9:3a:28:2e:45:b4:26:15:b1:44:b1:5e:38:
89:bf:1e:3f:bb:29:6f:50:e2:76:ef:21:94:f0:d5:ed:a0:7b:
73:a4:7b:be:b6:c7:10:8f:b8:9f:ce:3c:3b:64:67:8f:26:b3:
4a:43:06:06:ac:8c:70:86:f7:1b:2c:8c:c2:18:a0:7b:76:38:
f3:08:3e:93:de:d1:c1:52:e5:98:9e:58:74:df:d7:49:f0:4e:
02:22:a2:38:da:5a:a6:0d:ee:ed:98:31:d6:b8:a5:79:84:ce:
95:66:6b:23:ca:a7:3f:27:9e:a3:81:ee:90:0e:d7:38:8e:18:
eb:c7:30:2d:fd:fb:dc:ce:67:56:3f:78:56:e6:f4:84:03:07:
5c:c1:e5:da:77:8a:c1:5e:6d:35:ce:7e:17:c7:56:db:44:f1:
8d:9c:cc:e3:57:da:b5:15:84:69:e9:1e:38:9e:43:ce:e6:9e:
73:9b:4d:e4:80:a2:cd:b3:e8:eb:e3:e9:68:0a:fb:3b:2e:61:
d6:49:57:1c:a9:58:38:04:61:14:f7:06:e4:0a:20:aa:71:09:
6c:b9:cf:96:49:6c:9d:a8:f0:b0:22:0a:85:f7:83:2a:1e:2f:
b2:4e:7d:e0:77:d0:d3:94:1e:25:5e:1c:8d:a0:c7:97:2d:d9:
83:e2:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:28:31 2026 by rpki-client