Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
File: Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json)
Hash identifier: kXxushRfkBp2hEXzpmN3j0t5ZqjNRsAGE93fdFP6Upc=
Subject key identifier: AD:CF:7E:C6:33:87:4E:94:D1:E1:B9:C6:2D:03:9C:F2:91:2B:8F:31
Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
Certificate issuer: /CN=029f93002d78e8e40da560c4291fb830d92dff66
Certificate serial: 019F17C32F4A940BA7869045613938628356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
Manifest number: 1916
Signing time: Tue 30 Jun 2026 09:01:35 +0000
Manifest this update: Tue 30 Jun 2026 09:01:35 +0000
Manifest next update: Wed 01 Jul 2026 09:01:35 +0000
Files and hashes: 1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: XVj08Ff9itc0TIiSkquvfNEHrrQwK0T0OCFY9xhsKQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:2f:4a:94:0b:a7:86:90:45:61:39:38:62:83:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66
Validity
Not Before: Jun 30 09:01:35 2026 GMT
Not After : Jul 1 09:01:35 2026 GMT
Subject: CN=adcf7ec633874e94d1e1b9c62d039cf2912b8f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:f4:83:8a:a2:c1:65:6e:b3:b9:2b:78:f2:
c8:0f:88:10:f5:6c:6c:f9:12:52:6d:5e:8c:36:0b:
61:ef:94:41:cb:da:bd:45:91:02:00:58:0b:f5:21:
5f:1c:d9:54:e6:60:f3:51:5d:d9:4a:5f:dc:92:31:
27:c6:0d:3b:39:59:60:73:50:39:02:13:47:69:b3:
cd:eb:3c:ed:77:d9:13:fd:cf:22:d9:10:42:8b:e6:
4d:56:c3:04:4e:0d:0f:f0:cd:ab:88:00:34:ee:b9:
05:5c:eb:7f:63:36:3f:a3:7f:8d:fe:9e:b9:22:76:
94:f9:9f:4d:c3:af:45:37:40:67:1d:db:c3:29:3e:
a2:5f:2b:7b:51:87:94:6a:d4:ce:e1:79:1c:3d:e9:
1f:d0:94:00:e2:6c:d4:8d:a1:40:f7:d5:64:27:cd:
b0:4f:e3:7d:f6:c4:d5:54:1f:49:8a:39:a9:74:da:
6b:86:ef:b4:8b:ef:1c:da:16:a5:53:d1:5d:2e:8b:
e3:fd:10:89:05:e7:02:f0:93:9d:b5:ab:b1:80:7e:
73:09:c2:49:c8:76:df:26:02:42:8c:14:75:2f:94:
e3:d3:53:f8:91:ff:9c:db:c7:6b:4c:3f:7a:0e:02:
6d:52:e0:2e:03:5b:90:c2:80:bc:c9:10:e8:4f:fa:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CF:7E:C6:33:87:4E:94:D1:E1:B9:C6:2D:03:9C:F2:91:2B:8F:31
X509v3 Authority Key Identifier:
keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:28:31:bb:df:c4:f8:b3:b8:3f:b1:05:ff:f6:00:c3:1a:ef:
6c:24:80:57:40:16:f0:62:8a:6e:eb:82:bd:e1:58:e5:34:ae:
78:db:c9:8c:5f:27:a7:d9:78:8f:0c:13:ef:53:4d:59:96:74:
b0:55:7e:8c:da:3d:b2:e0:e0:3d:14:2e:e2:a1:c8:2a:06:79:
81:95:87:24:7b:38:87:c9:4e:05:9f:42:7f:5a:fa:d9:1e:67:
69:39:30:44:c1:d9:7f:d1:59:85:24:b8:51:79:28:10:f0:85:
ba:79:45:ca:72:b7:47:49:be:7c:e3:cf:2e:67:32:ad:e2:ea:
26:a0:54:f5:0a:57:86:ca:a6:02:f7:b1:71:b2:32:8b:90:c9:
87:7c:7b:77:29:e8:ba:67:e2:40:f7:82:64:31:c9:9f:6d:3f:
94:03:10:99:b6:bf:7f:eb:94:0d:df:d9:84:4b:73:bd:d0:f5:
8b:93:52:07:d6:f3:12:cc:d0:ee:08:dc:da:02:69:ba:65:c6:
9c:89:3a:10:d0:4a:2a:c2:b8:1e:16:c5:35:3f:2a:66:1e:27:
55:8f:b4:0f:52:c6:d8:13:a6:d8:49:9b:35:2d:ec:57:3c:43:
9e:60:b4:fb:19:71:72:d2:12:0d:d2:3b:15:5a:9d:39:b6:4f:
59:6f:bb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:34:01 2026 by rpki-client