Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
File: APfVbNN-MeClJfW7GluvX0meQG0.mft (raw, json)
Hash identifier: ctG27aK6szkaX70hjAIdgKc8PHOesg3ZYZ2zUW/RfTs=
Subject key identifier: 61:F6:96:6B:E5:9C:F3:47:99:27:0D:ED:A0:E6:8E:23:02:20:71:A2
Authority key identifier: 00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D
Certificate issuer: /CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
Certificate serial: 01A001A64B3DE6A76B7B3F90CD34BAC879EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
Manifest number: 1955
Signing time: Fri 14 Aug 2026 19:01:10 +0000
Manifest this update: Fri 14 Aug 2026 19:01:10 +0000
Manifest next update: Sat 15 Aug 2026 19:01:10 +0000
Files and hashes: 1: APfVbNN-MeClJfW7GluvX0meQG0.crl (hash: syHmc9pjir1uv8RJ2cnk2LT9IODsLfG/l60BmzGSjf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:4b:3d:e6:a7:6b:7b:3f:90:cd:34:ba:c8:79:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f7d56cd37e31e0a525f5bb1a5baf5f499e406d
Validity
Not Before: Aug 14 19:01:10 2026 GMT
Not After : Aug 15 19:01:10 2026 GMT
Subject: CN=61f6966be59cf34799270deda0e68e23022071a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:86:dc:b0:86:f5:f6:76:4d:f3:62:10:01:
e1:1c:2f:18:61:c1:ed:a7:b7:8f:cd:0e:9a:fe:f3:
92:74:2a:ac:b8:b5:30:c7:dd:34:38:5f:32:2d:f8:
80:9b:30:a5:17:6a:84:20:c6:e1:59:9d:9b:ad:ac:
70:7b:3f:69:23:41:cd:df:b9:2a:3c:58:ac:ed:9c:
22:23:c7:b2:56:73:27:68:32:c5:37:3c:06:09:86:
40:0b:ed:1f:00:10:f5:4f:a3:a3:0c:5f:84:9e:e3:
c4:d6:e4:72:60:69:13:3a:a8:a8:29:16:88:c3:9c:
3a:ed:2e:21:57:c4:22:27:35:a9:72:6c:d0:53:53:
5e:4a:3c:16:fb:af:66:f4:4c:e7:56:a8:bb:76:79:
cf:36:f2:39:09:0d:7c:41:f6:da:ca:2a:ea:e5:24:
0f:dd:90:35:f4:2c:96:39:aa:26:62:0d:d7:54:d6:
c3:0a:c2:86:e3:69:8a:21:94:2f:e4:a9:e7:71:e7:
23:79:b4:74:30:7f:e6:34:58:6a:d3:1d:08:3f:bc:
12:de:4d:d3:e3:e1:98:b3:e2:bc:94:53:8b:e8:e5:
5c:4d:ad:f4:ab:20:cf:a5:06:97:a6:f5:b4:80:aa:
a7:f5:44:e8:ba:5c:bd:4f:78:8f:bf:f4:5f:31:b2:
ca:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F6:96:6B:E5:9C:F3:47:99:27:0D:ED:A0:E6:8E:23:02:20:71:A2
X509v3 Authority Key Identifier:
keyid:00:F7:D5:6C:D3:7E:31:E0:A5:25:F5:BB:1A:5B:AF:5F:49:9E:40:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APfVbNN-MeClJfW7GluvX0meQG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8cb7ea-d75d-46f6-a5c3-13b29eae19b3/1/APfVbNN-MeClJfW7GluvX0meQG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:7e:53:cd:51:e9:c1:59:b7:b5:3d:11:30:4f:5a:f9:07:03:
be:9d:38:3e:8f:b3:db:6c:ed:5c:ad:ac:c2:f8:89:7a:c7:f2:
0a:3e:2b:36:10:b2:70:7d:6f:6e:0b:f2:7d:59:a4:ca:4f:f5:
bc:1a:b0:4e:52:91:76:2a:f1:e5:49:ba:2c:66:e7:22:3b:3a:
fe:86:b9:ee:5e:0b:2f:1c:9b:f4:76:3e:d9:7e:20:76:67:59:
b6:29:41:da:8a:a2:55:0e:33:d8:df:8c:a1:bc:01:37:61:01:
42:99:5e:bd:98:10:94:74:6e:d9:a5:c5:9c:6b:7f:42:26:72:
a6:4c:fc:7f:93:af:d1:e8:74:72:06:f0:be:d2:54:2d:69:36:
02:44:99:d7:ac:bb:33:ea:59:01:58:89:8a:db:16:2b:17:78:
62:01:0a:6d:a6:9f:d9:d1:a3:e2:fb:3a:db:8d:43:8c:3b:fc:
c0:07:f5:09:dc:7c:45:cf:ae:01:e8:18:ed:cf:f6:d4:8b:32:
41:85:69:47:50:bd:13:50:5e:1d:5e:86:3a:66:56:39:b1:6b:
71:ca:eb:39:f3:07:a4:7f:19:5e:78:3a:67:97:00:08:03:51:
ca:7f:19:40:6f:bf:d0:b2:fc:14:b1:d2:2e:c6:55:78:a6:f6:
3e:c7:27:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpks95qdrez+QzTS6yHnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZjdkNTZjZDM3ZTMxZTBhNTI1ZjViYjFhNWJhZjVmNDk5
ZTQwNmQwHhcNMjYwODE0MTkwMTEwWhcNMjYwODE1MTkwMTEwWjAzMTEwLwYDVQQD
Eyg2MWY2OTY2YmU1OWNmMzQ3OTkyNzBkZWRhMGU2OGUyMzAyMjA3MWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeWG3LCG9fZ2TfNiEAHhHC8YYcHt
p7ePzQ6a/vOSdCqsuLUwx900OF8yLfiAmzClF2qEIMbhWZ2braxwez9pI0HN37kq
PFis7ZwiI8eyVnMnaDLFNzwGCYZAC+0fABD1T6OjDF+EnuPE1uRyYGkTOqioKRaI
w5w67S4hV8QiJzWpcmzQU1NeSjwW+69m9EznVqi7dnnPNvI5CQ18Qfbayirq5SQP
3ZA19CyWOaomYg3XVNbDCsKG42mKIZQv5KnncecjebR0MH/mNFhq0x0IP7wS3k3T
4+GYs+K8lFOL6OVcTa30qyDPpQaXpvW0gKqn9UTouly9T3iPv/RfMbLKbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH2lmvlnPNHmScN7aDmjiMCIHGiMB8GA1UdIwQY
MBaAFAD31WzTfjHgpSX1uxpbr19JnkBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVBmVmJOTi1NZUNsSmZXN0dsdXZYMG1lUUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84Y2I3ZWEtZDc1ZC00NmY2LWE1YzMt
MTNiMjllYWUxOWIzLzEvQVBmVmJOTi1NZUNsSmZXN0dsdXZYMG1lUUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC84Y2I3ZWEtZDc1ZC00NmY2LWE1YzMtMTNiMjllYWUxOWIz
LzEvQVBmVmJOTi1NZUNsSmZXN0dsdXZYMG1lUUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH35TzVHp
wVm3tT0RME9a+QcDvp04Po+z22ztXK2swviJesfyCj4rNhCycH1vbgvyfVmkyk/1
vBqwTlKRdirx5Um6LGbnIjs6/oa57l4LLxyb9HY+2X4gdmdZtilB2oqiVQ4z2N+M
obwBN2EBQplevZgQlHRu2aXFnGt/QiZypkz8f5Ov0eh0cgbwvtJULWk2AkSZ16y7
M+pZAViJitsWKxd4YgEKbaaf2dGj4vs6241DjDv8wAf1Cdx8Rc+uAegY7c/21Isy
QYVpR1C9E1BeHV6GOmZWObFrccrrOfMHpH8ZXng6Z5cACANRyn8ZQG+/0LL8FLHS
LsZVeKb2PscnPQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:12 2026 by rpki-client