Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
File: Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json)
Hash identifier: 07geoOmxK83n8/UYXReUPJ4Y6GfWoofI9a6IKqNfPh4=
Subject key identifier: 5F:0E:DF:D0:CE:B5:73:B3:EE:BE:C3:9E:B0:97:3E:25:94:87:4C:DA
Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
Certificate issuer: /CN=029f93002d78e8e40da560c4291fb830d92dff66
Certificate serial: 01A13E25C97D897C065035108E28035F6C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
Manifest number: 1A33
Signing time: Thu 15 Oct 2026 06:00:26 +0000
Manifest this update: Thu 15 Oct 2026 06:00:26 +0000
Manifest next update: Fri 16 Oct 2026 06:00:26 +0000
Files and hashes: 1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: M79k1TuItzVPIebU9o9pqWFrBYA9B4Trj0qGRYsIRJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:c9:7d:89:7c:06:50:35:10:8e:28:03:5f:6c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66
Validity
Not Before: Oct 15 06:00:26 2026 GMT
Not After : Oct 16 06:00:26 2026 GMT
Subject: CN=5f0edfd0ceb573b3eebec39eb0973e2594874cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:b3:b6:61:20:27:8a:14:60:3d:4c:e4:32:
19:41:89:fe:26:5c:64:63:51:70:95:50:c0:9f:19:
8f:72:4e:8d:30:fd:90:a6:5f:27:3a:40:1d:81:44:
a1:4c:94:bb:29:b8:09:55:75:20:45:f1:5b:1a:ac:
4a:3f:bd:1a:88:cc:e6:ae:01:98:b8:f7:a3:1c:b8:
c7:08:99:34:de:e5:dc:80:41:58:80:89:b2:35:8f:
00:9d:75:cb:fe:0c:fc:81:4f:20:84:9c:a6:35:30:
13:f1:13:17:44:09:b4:d2:81:1b:9f:88:6d:8f:c2:
47:c2:96:aa:69:eb:cd:01:d6:29:ef:d6:28:bf:94:
f2:9c:29:d3:55:56:16:2a:cd:80:a1:c3:04:9a:5b:
6f:00:fb:dd:1b:c2:05:3c:cc:6d:e0:9d:34:fc:4c:
ea:79:d5:49:42:ab:75:47:c1:6a:50:21:05:47:74:
22:4c:f8:d3:2e:b5:07:15:bd:a5:70:e2:a8:34:f0:
14:c9:b5:cd:a7:b2:0c:ae:fb:15:c3:de:cc:0c:46:
6e:d8:40:64:be:db:ee:65:62:23:60:88:e0:3a:84:
4e:66:1a:c7:e6:2a:96:ab:f9:f0:ea:c0:62:7f:15:
4b:be:08:d7:36:62:9a:92:8f:1a:d6:25:8e:4c:cb:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0E:DF:D0:CE:B5:73:B3:EE:BE:C3:9E:B0:97:3E:25:94:87:4C:DA
X509v3 Authority Key Identifier:
keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d5:46:50:a9:44:91:49:16:dd:5c:a7:f4:38:12:d6:55:bb:
df:8e:35:53:49:73:99:8a:41:4f:56:38:70:f3:6b:58:22:7f:
07:e0:b8:9f:ed:38:2a:d5:ef:10:25:c6:c7:35:db:02:e6:71:
ad:83:14:0e:80:aa:c6:8e:2f:c0:e4:db:b9:5b:ab:70:5f:cf:
c4:5f:a6:8e:e7:8a:a4:b9:08:03:e3:dc:05:81:a7:e6:85:bb:
e7:a9:3f:ae:b9:9c:cd:f4:2d:54:2a:88:9b:be:92:d7:a3:a5:
2e:61:b7:55:b6:ed:4a:c7:a5:b7:fe:02:ea:6b:a9:f9:6f:8a:
78:70:bf:44:40:5b:4e:61:eb:94:be:2f:7e:38:b2:03:f3:ba:
cc:1f:b3:5c:77:ca:a0:4a:1a:3c:d8:7d:24:e3:fb:ce:30:13:
ee:43:41:bf:e7:fb:04:42:90:a1:30:e2:e9:d3:c8:8f:8a:74:
c7:6d:54:12:70:a7:1a:81:d5:71:d8:e5:22:f0:06:0f:ae:a4:
67:38:73:d9:f7:29:07:cc:18:f2:7d:13:d1:b8:64:2a:a4:1b:
e8:ff:ef:d9:c9:10:b2:7f:29:13:90:6c:ec:fa:d6:1f:8c:9e:
b6:98:bf:11:e1:f1:4a:47:aa:cb:b3:c7:76:18:3c:5a:9f:d9:
30:28:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:47 2026 by rpki-client