Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
File: Ap6YM29qbMnbzx7LSJVYDwlOPis.mft (raw, json)
Hash identifier: w8+QlzhoMhsdGr6xIJQIVJwzScCd3ChDBl9fMTgR7vg=
Subject key identifier: 63:F3:A0:AF:9E:D0:5B:71:D0:D5:68:CB:B9:F3:6A:C6:C0:DF:74:4B
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 019F14C20614EAA432E90353BD789F5B52E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
Manifest number: 1077
Signing time: Mon 29 Jun 2026 19:01:27 +0000
Manifest this update: Mon 29 Jun 2026 19:01:27 +0000
Manifest next update: Tue 30 Jun 2026 19:01:27 +0000
Files and hashes: 1: Ap6YM29qbMnbzx7LSJVYDwlOPis.crl (hash: B6jrRXEpnevGxw/8yYzvxkdMcjnggW8QrwRGArgpKCU=)
2: p_4t5r1LIVM__Crw-eZAOlvObAY.roa (hash: 5BvLVMvi5NBU8nHQD8cDw6h+veyzG8axQK09AoRrWAs=)
3: zBYtGjJx0SDgAamEQM20aTAainM.roa (hash: SpCq7G69+l1y5Xw0RtXWj3cYKHjMPmny1b0+UtkUplE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:c2:06:14:ea:a4:32:e9:03:53:bd:78:9f:5b:52:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: Jun 29 19:01:27 2026 GMT
Not After : Jun 30 19:01:27 2026 GMT
Subject: CN=63f3a0af9ed05b71d0d568cbb9f36ac6c0df744b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:48:37:3b:e2:85:17:13:87:fc:c7:68:82:89:
a7:5a:3c:ba:f0:b0:c5:cf:67:d7:4f:45:d5:f0:4e:
ac:b6:e0:80:0a:a6:c7:7f:d0:d9:6f:ed:a0:a1:fb:
48:d3:95:8e:f1:12:1c:a7:cf:8e:df:43:fa:b8:10:
bd:a8:a8:a3:6c:73:8f:08:58:0d:6b:65:89:69:69:
06:93:96:45:84:7a:73:42:6e:fb:80:78:bb:84:71:
0c:52:73:11:51:c4:72:02:e7:65:25:29:67:30:bb:
2f:36:e1:c7:5c:51:7b:d7:37:7d:b6:7e:29:65:61:
1d:21:a7:bb:e4:da:25:81:74:9b:d1:c5:e8:c1:0b:
71:98:00:36:57:77:34:bc:01:93:68:d6:3e:a7:8e:
0d:05:41:2c:63:28:ad:f3:68:15:99:db:a0:d6:27:
a2:e9:9f:04:0d:6c:bd:b5:da:4f:5a:a1:91:a6:22:
77:af:b5:9e:9a:4a:cb:b3:3f:22:22:5b:6a:28:ee:
c9:da:38:99:be:e1:4d:b5:5b:02:da:e8:98:85:70:
5c:5b:83:0a:d1:6c:1d:fd:3e:de:27:b9:28:91:14:
40:0b:3c:26:82:80:6b:7b:ae:c0:7a:8b:79:51:d4:
16:d9:7c:c4:67:37:83:7b:a9:23:43:01:8e:3f:6f:
bf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F3:A0:AF:9E:D0:5B:71:D0:D5:68:CB:B9:F3:6A:C6:C0:DF:74:4B
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:dd:24:08:17:39:b9:f1:21:7d:0c:63:d1:1f:59:43:a7:65:
23:0c:00:e2:f2:b7:ea:36:de:bc:06:42:80:64:7d:5e:11:48:
fb:e7:3e:c8:fe:4f:bb:8f:3f:12:d3:c4:5b:76:f3:87:ec:57:
58:c9:f0:b0:ec:be:e1:3b:b0:49:64:23:1a:67:96:d6:1d:20:
af:bc:b8:52:07:9b:22:86:e3:cf:cb:62:5c:28:4e:94:3b:65:
51:34:45:83:ef:e0:b6:35:4e:62:bf:e1:50:07:30:0b:bf:84:
74:71:83:8d:8b:5f:57:4f:74:b0:0d:5a:6d:c2:cf:04:11:f0:
33:e2:d5:02:bf:2f:ff:6d:45:d1:03:92:5d:f0:3e:69:d9:95:
24:0e:ad:35:87:cb:96:ac:16:50:db:ea:18:89:3c:be:74:d4:
58:b1:79:2f:5b:61:62:71:52:74:9d:ea:cf:6b:ec:39:d1:08:
e0:0a:6a:26:da:fc:50:dd:2c:f1:eb:fd:4a:8f:48:ea:dc:1a:
00:9f:10:c5:d8:5e:92:87:4c:70:74:5c:e4:4e:16:52:cf:73:
18:92:a9:67:e6:f0:53:dd:5f:1b:a3:dc:0e:af:cd:27:c1:88:
3a:a7:ad:c3:80:da:8f:9c:73:67:e5:23:4f:8d:66:c8:b6:30:
2f:ca:35:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 21:21:30 2026 by rpki-client