Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.mft
File: ApB0VYXC5Lw17zN6Nughte5dDDI.mft (raw, json)
Hash identifier: mvl2UG+siHsCWr/eJBzNOfqDiACdL+JeNjgJ4tBlUnM=
Subject key identifier: 14:4F:61:7D:07:AE:26:B7:C2:F6:DC:3F:5C:8B:05:8E:0A:6F:62:3A
Authority key identifier: 02:90:74:55:85:C2:E4:BC:35:EF:33:7A:36:E8:21:B5:EE:5D:0C:32
Certificate issuer: /CN=0290745585c2e4bc35ef337a36e821b5ee5d0c32
Certificate serial: 01A040F29F84511FED6DED4F91324138B92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApB0VYXC5Lw17zN6Nughte5dDDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.mft
Manifest number: 65
Signing time: Thu 27 Aug 2026 02:00:37 +0000
Manifest this update: Thu 27 Aug 2026 02:00:37 +0000
Manifest next update: Fri 28 Aug 2026 02:00:37 +0000
Files and hashes: 1: ApB0VYXC5Lw17zN6Nughte5dDDI.crl (hash: G0nJds3UfrJnt4t0m7Eq9uIo9xBM8V1CGqsDf0J7ZH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ApB0VYXC5Lw17zN6Nughte5dDDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:9f:84:51:1f:ed:6d:ed:4f:91:32:41:38:b9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0290745585c2e4bc35ef337a36e821b5ee5d0c32
Validity
Not Before: Aug 27 02:00:37 2026 GMT
Not After : Aug 28 02:00:37 2026 GMT
Subject: CN=144f617d07ae26b7c2f6dc3f5c8b058e0a6f623a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:ed:1f:af:c9:5c:52:68:49:a5:be:73:7c:
40:e7:e7:14:aa:9e:fe:65:cc:9a:b6:64:09:bd:98:
57:d8:db:d8:08:d3:a7:8f:af:a4:1a:41:ef:f8:ca:
71:fc:0c:05:d5:4d:56:4f:e5:31:28:60:ae:c6:f4:
71:96:f4:c2:ff:ab:72:00:aa:37:19:11:8f:8c:67:
1f:08:ae:06:37:18:cd:8f:5b:7e:cf:b3:08:f8:29:
50:92:c6:7a:23:01:20:41:40:bc:7f:61:9f:a2:bb:
1c:83:60:74:37:c0:22:05:2f:4d:30:ef:4f:76:e2:
26:cd:ab:25:15:a8:bb:87:88:80:79:90:c0:15:f2:
86:37:ce:50:13:4a:d5:04:38:ae:dd:65:99:dc:57:
de:51:9e:b5:5e:28:34:67:9d:6f:bc:1a:93:77:c2:
a9:ff:fc:9d:46:3e:82:32:e3:fb:61:38:2c:ff:e6:
ea:b8:ca:a0:24:0c:a8:3b:34:c6:fe:b8:28:d8:dc:
37:75:ff:bc:51:64:89:6c:ad:25:a8:29:66:bd:aa:
11:23:9b:79:37:71:0f:14:a9:b7:83:c7:f6:0e:af:
55:87:ca:0b:54:c4:52:ed:75:4c:c5:b4:6a:03:bb:
46:90:b9:24:69:f1:24:82:15:60:fe:99:b3:7d:01:
d3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4F:61:7D:07:AE:26:B7:C2:F6:DC:3F:5C:8B:05:8E:0A:6F:62:3A
X509v3 Authority Key Identifier:
keyid:02:90:74:55:85:C2:E4:BC:35:EF:33:7A:36:E8:21:B5:EE:5D:0C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApB0VYXC5Lw17zN6Nughte5dDDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e1:45:c3:76:81:c4:b6:97:a7:bc:49:c4:ec:0e:25:0b:24:
8a:9d:d9:b1:0a:6c:fe:93:9c:30:f7:87:ab:e3:d3:40:4c:61:
61:90:0a:a5:2b:00:92:05:53:4c:6c:e4:76:c9:6f:55:37:29:
7f:f3:83:8d:29:b5:0c:4f:9f:2f:ac:2f:c2:24:97:c0:3f:58:
f4:ea:99:4e:3e:81:d3:ff:08:1d:2d:0e:f1:9c:50:af:e6:b7:
76:99:82:88:7a:7a:8a:7c:e2:d4:74:66:1e:38:a9:e7:e4:a0:
26:ae:c7:a3:24:8c:5b:a8:74:9d:d5:5b:49:85:f4:34:6b:88:
62:ef:75:7a:57:6f:1a:2d:7e:44:df:52:19:1b:ee:ce:e1:1b:
56:c2:1a:10:96:e8:17:37:42:2e:af:14:2f:e6:ef:78:e1:83:
e6:ab:fc:67:99:fe:cb:ce:7b:d7:72:ab:df:03:5c:e1:f2:0c:
f7:40:53:d7:d0:61:77:fb:64:b1:f7:86:f1:d7:3a:be:7f:20:
a1:74:9b:0b:06:ed:72:56:ed:0f:58:36:33:15:6a:66:d7:c7:
13:52:cf:bb:58:43:98:9f:70:72:c9:45:ee:3d:87:13:3d:38:
b3:ea:d8:ac:f2:45:df:a8:7a:1e:f0:d7:f0:b1:7a:e1:24:d3:
8b:00:c1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:22:46 2026 by rpki-client