Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
File: apwfqpeD36srelPaP7D970zP6uU.mft (raw, json)
Hash identifier: Y70UzrbUw29RUQJQYp1g0ShmcZmDSUNjocPAKwA3szI=
Subject key identifier: 38:70:0B:53:91:CC:81:3C:11:A9:E0:15:94:C4:5E:56:95:D2:ED:FA
Authority key identifier: 6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
Certificate issuer: /CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Certificate serial: 019D3940EBBA2553A45059B40496711D507E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
Manifest number: 03A6
Signing time: Sun 29 Mar 2026 11:00:48 +0000
Manifest this update: Sun 29 Mar 2026 11:00:48 +0000
Manifest next update: Mon 30 Mar 2026 11:00:48 +0000
Files and hashes: 1: 04qNzQFDeYtDWOQnUWzTpUuvB9k.roa (hash: JDVg+JID1CY+10mhtydqzj3KZ7OSSxyFlNU6MU9NGN4=)
2: apwfqpeD36srelPaP7D970zP6uU.crl (hash: JjCI7t/W00NZGHlNGi+nII44ZWsTCFDrAXbsBy+NZKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:eb:ba:25:53:a4:50:59:b4:04:96:71:1d:50:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9c1faa9783dfab2b7a53da3fb0fdef4ccfeae5
Validity
Not Before: Mar 29 11:00:48 2026 GMT
Not After : Mar 30 11:00:48 2026 GMT
Subject: CN=38700b5391cc813c11a9e01594c45e5695d2edfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:19:59:31:c1:14:6f:a9:51:30:76:37:11:8b:
31:41:c6:c4:42:4d:5d:33:a7:03:cc:62:11:17:79:
db:e3:d7:99:8b:b0:a8:37:87:10:e9:02:68:58:c2:
b8:c3:a1:6a:ab:c8:35:1d:97:b1:f3:23:ae:70:78:
ff:ea:d2:89:a4:67:1a:50:bf:eb:27:9f:2e:44:3b:
c3:63:8a:ff:48:a5:f2:20:f8:fa:48:41:96:e1:52:
e0:ff:09:f5:96:0c:ab:34:a5:00:c7:69:85:fd:a2:
3b:a0:2d:ce:d0:1b:e7:d9:9e:1e:e8:91:3f:02:bc:
03:21:9a:70:ff:0b:b6:5e:1a:ad:07:16:9d:40:4a:
f8:76:39:85:28:5d:d8:cd:4d:7e:ad:06:da:83:da:
53:78:c1:03:b2:ff:11:b4:60:da:bb:a4:10:be:c8:
d5:73:f3:53:f7:c4:ac:95:03:80:b3:e3:f4:26:95:
e7:53:21:10:db:18:73:c9:ff:6a:f8:f9:3d:a9:54:
27:c1:c3:43:a2:65:37:21:8e:a5:78:36:06:d3:b2:
45:df:ea:9d:68:4c:be:51:45:72:3d:29:83:79:95:
74:4c:a8:a6:61:0a:d0:07:e5:e7:d6:b0:ae:12:b4:
a5:de:70:a6:52:cc:7b:5c:6b:52:f6:21:2a:86:51:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:70:0B:53:91:CC:81:3C:11:A9:E0:15:94:C4:5E:56:95:D2:ED:FA
X509v3 Authority Key Identifier:
keyid:6A:9C:1F:AA:97:83:DF:AB:2B:7A:53:DA:3F:B0:FD:EF:4C:CF:EA:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apwfqpeD36srelPaP7D970zP6uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fd4b6-b414-4902-891f-d2bb7c795a86/1/apwfqpeD36srelPaP7D970zP6uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3c:f9:f8:6a:60:22:8e:1b:49:51:cb:d4:3a:7e:8a:9e:70:
37:c8:db:48:45:3a:f6:d5:0e:0e:30:ee:11:7b:0e:f1:a5:61:
2a:e2:36:cc:c3:3c:63:05:f4:30:0d:df:a8:8e:c2:44:c0:6f:
b4:90:a3:f9:88:ae:6d:e8:73:3f:11:95:9a:b3:a7:82:78:49:
4d:3c:0f:65:f0:51:62:6c:4c:de:a5:41:98:e7:36:c6:18:df:
6e:20:2f:70:75:aa:ce:49:7d:13:a8:21:be:73:a5:1f:4e:20:
f1:a5:55:b2:bc:8c:eb:ec:31:0a:89:c7:bf:32:87:a3:cb:28:
a9:25:c1:c0:f8:27:a1:16:b8:45:49:5b:59:38:6e:5f:c4:d7:
02:48:d9:b9:de:86:e3:88:4a:7e:31:d0:cb:2f:12:da:a7:5b:
2a:54:3b:e7:d3:fb:fe:4b:10:ec:e1:b7:37:bf:90:2a:9d:84:
68:4c:71:7a:b6:c6:20:df:65:20:43:49:32:2c:52:ee:ef:3f:
8f:33:df:b7:5d:9c:e4:42:c8:a5:b1:a0:2b:44:3e:e3:8c:1c:
95:e1:81:6d:38:64:c9:e4:50:02:ec:30:5a:2f:5c:cd:8d:7c:
91:39:dc:d2:af:04:2b:d4:87:7c:d4:51:f3:38:37:84:12:0e:
bb:35:ea:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:03 2026 by rpki-client