Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
File: Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json)
Hash identifier: o7wHZnTA2IssfOcogdA9pRinZ15VEA3PZbiM94TASko=
Subject key identifier: A4:5A:FD:AE:FC:5E:D6:18:2D:B2:92:53:4A:22:06:14:67:5A:39:82
Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
Certificate issuer: /CN=029f93002d78e8e40da560c4291fb830d92dff66
Certificate serial: 019D38D31B6C9739922129A91E1F0933FF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
Manifest number: 181E
Signing time: Sun 29 Mar 2026 09:00:52 +0000
Manifest this update: Sun 29 Mar 2026 09:00:52 +0000
Manifest next update: Mon 30 Mar 2026 09:00:52 +0000
Files and hashes: 1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: AmowAhECHWOEJxokVsQjteGm52JDJCZrUjkX9j4jlWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:1b:6c:97:39:92:21:29:a9:1e:1f:09:33:ff:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66
Validity
Not Before: Mar 29 09:00:52 2026 GMT
Not After : Mar 30 09:00:52 2026 GMT
Subject: CN=a45afdaefc5ed6182db292534a220614675a3982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:44:78:a2:e0:d4:6b:ac:b7:e4:47:65:4b:39:
87:6c:45:c9:21:9a:94:2c:13:5e:f7:8e:a9:94:42:
15:bf:59:46:6a:f5:b7:94:0c:71:da:35:66:70:f8:
01:39:61:b9:45:dc:4d:6c:73:cd:d7:5b:8c:b3:c0:
c9:70:59:fb:c0:9b:74:e1:27:ba:8d:1e:e1:0e:18:
5f:8f:8c:7b:80:14:be:ca:56:f5:61:57:21:1d:95:
a7:54:2e:d0:1e:6e:d8:66:95:17:7f:f8:51:60:fe:
f7:e2:4f:93:23:5f:cb:2b:2c:d3:95:b1:fb:28:0d:
5c:60:b9:84:a8:6a:8c:f0:34:a0:38:ee:49:b4:2b:
55:2e:fc:33:74:4f:0a:4b:37:00:73:bc:0e:8a:83:
a6:b7:3f:a2:4c:bc:35:c9:84:f2:4f:bf:73:64:f6:
d0:4f:e0:d1:4e:af:a2:1f:9b:77:24:b6:e6:8a:22:
0c:a7:2f:08:8c:71:ef:b4:99:ef:24:9d:2d:66:2f:
2d:b0:14:af:91:ad:6c:4c:af:e4:1f:da:d9:8f:3f:
e5:f4:4f:9d:18:4e:33:a6:4d:53:0e:ca:f4:99:4c:
e4:b3:ef:8d:2e:d9:18:9e:66:2c:aa:5f:84:7b:44:
f4:7a:d3:92:82:73:90:d9:5e:af:6c:30:a4:cd:ef:
af:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5A:FD:AE:FC:5E:D6:18:2D:B2:92:53:4A:22:06:14:67:5A:39:82
X509v3 Authority Key Identifier:
keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6d:a5:13:eb:5d:70:03:20:6b:f5:d5:1a:a2:a4:3b:d7:21:
35:61:2e:3c:49:bc:ff:30:60:d5:ef:a3:8d:2f:c2:11:db:b1:
60:36:30:96:0f:f1:f6:64:b3:cf:0b:58:b3:3c:25:06:c5:77:
04:0c:54:cf:6b:a0:f6:56:b4:1d:88:d5:40:a2:ef:0a:8f:8e:
82:0b:27:db:3c:0f:76:59:b5:88:7d:2e:b6:db:cc:4e:63:89:
1e:c0:df:76:7e:0c:83:c9:01:74:29:09:ea:22:96:6d:d7:94:
32:2a:fa:83:6a:99:da:ae:5f:1e:df:aa:9f:ca:d1:fa:ee:ad:
7b:0b:a4:d5:2d:19:dd:cd:b2:84:3a:a9:47:fe:2e:62:b5:de:
bb:a9:28:50:ed:61:3b:e9:7e:e9:6d:a5:02:f0:09:58:88:bb:
4d:97:91:a4:98:71:0a:11:6f:ae:02:79:1d:eb:fd:81:c5:1f:
bb:62:b8:c0:d2:70:da:82:15:a0:70:57:4c:e2:71:87:31:c7:
d9:0f:33:0d:f8:8c:83:d9:1d:ac:34:c1:84:d1:0c:bb:f7:0d:
71:44:49:78:07:15:8b:cf:f4:ec:a7:1f:da:6a:fb:fd:2a:2d:
75:72:4b:ff:c3:9e:b5:3d:e5:9b:54:95:3e:4d:d7:54:e1:49:
6a:76:6f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:18 2026 by rpki-client