Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
File: DnSXlvuOtxaowjxHZJ0jvz0-apg.mft (raw, json)
Hash identifier: 6FstVAdq1PXgsqpFmSHy3kS5rpE9Lc//SfPyeiSaH/E=
Subject key identifier: 1D:0F:86:C7:87:04:70:6E:D2:E5:C6:83:B3:86:6B:92:FA:07:89:14
Authority key identifier: 0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98
Certificate issuer: /CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
Certificate serial: 019D37C0725D8F40D1589FDC56BE95039DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
Manifest number: 0456
Signing time: Sun 29 Mar 2026 04:00:52 +0000
Manifest this update: Sun 29 Mar 2026 04:00:52 +0000
Manifest next update: Mon 30 Mar 2026 04:00:52 +0000
Files and hashes: 1: DnSXlvuOtxaowjxHZJ0jvz0-apg.crl (hash: ijy/YPJk5DXwcK0VHp5Iw70aKZZJyapXiNi3XiTpAwg=)
2: nqmWzH-tzCnzE93LuhfxRjm9wHw.roa (hash: L9/RTfwJkK0P4xFaKDfFjPQ7yNTzuYqZSZ9Mz6ikrfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:72:5d:8f:40:d1:58:9f:dc:56:be:95:03:9d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
Validity
Not Before: Mar 29 04:00:52 2026 GMT
Not After : Mar 30 04:00:52 2026 GMT
Subject: CN=1d0f86c78704706ed2e5c683b3866b92fa078914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c2:31:be:0f:b5:98:4b:87:6f:b0:c1:64:9f:
63:83:59:13:74:1c:79:21:bb:4c:10:e4:ff:6d:9d:
ca:23:1c:60:53:2a:9c:57:81:18:e9:cd:97:77:ff:
92:05:d7:61:38:18:13:31:05:c6:93:92:11:d3:9b:
b9:e2:3a:10:79:a7:13:3c:2e:28:d2:f6:53:c6:9c:
b2:51:2f:17:87:25:9b:76:44:21:9b:ad:f9:35:55:
21:df:f9:cf:e5:c8:d4:af:c1:e0:f8:36:80:fc:24:
d3:20:27:ea:2d:48:5a:2f:3e:01:0d:92:e4:a1:c6:
d2:70:dd:f8:e9:83:89:a8:b9:2f:70:4e:01:c7:68:
31:c1:7f:b9:3d:b7:f7:81:38:2a:48:bc:de:40:e9:
13:08:c5:aa:11:b0:b1:18:c1:60:46:19:c7:da:ab:
ed:bd:73:74:8f:a4:78:4a:04:ea:87:41:bb:bb:bf:
c0:38:44:fa:05:24:53:24:9b:01:8b:2c:1e:c2:0e:
cd:33:e7:cd:02:28:d7:47:24:be:e7:25:43:39:fa:
5c:5a:4d:3f:f8:54:60:a7:53:65:d3:28:6e:09:d2:
e0:fb:64:35:d4:2b:f0:f1:96:e3:da:5f:4e:9a:2f:
f1:a1:e8:52:4a:d4:0e:75:cd:32:2f:53:7d:dd:9a:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0F:86:C7:87:04:70:6E:D2:E5:C6:83:B3:86:6B:92:FA:07:89:14
X509v3 Authority Key Identifier:
keyid:0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0e:90:77:9c:3e:f9:2f:81:9c:26:90:51:2d:e5:31:ab:d7:
d6:8b:64:cf:07:1d:20:0a:8e:8f:da:b7:6e:60:b2:9b:83:db:
6c:73:91:d1:32:58:a1:f8:66:f7:09:5b:37:9d:13:7a:79:f6:
1a:c3:53:36:9b:51:65:d0:a2:ea:6c:38:ef:2e:d2:15:32:f8:
df:19:d5:a2:a8:48:ca:66:8c:1f:57:e4:7d:a2:d5:84:45:30:
77:68:91:79:8f:fd:4c:70:ef:53:0c:ab:dd:98:41:6c:e4:62:
0e:6b:b9:b5:c0:0d:30:03:17:d5:84:d8:aa:41:05:bf:54:cc:
f5:14:16:2e:1e:6d:b9:58:ed:08:d9:6f:74:fd:21:b1:b3:1f:
ec:5d:e4:a4:61:60:c2:86:c3:a8:f3:53:68:8b:e2:8a:e9:2b:
23:41:e1:5e:a0:07:85:d8:01:e6:f8:41:39:67:78:30:f9:49:
78:c7:b4:00:e4:7f:21:fa:db:bc:14:b0:92:b2:e8:49:8e:46:
58:86:6d:a3:59:04:f6:5f:c3:28:56:eb:6e:6b:ad:c8:db:5d:
68:85:5e:72:48:53:4f:4b:d4:68:54:4d:b2:93:8a:4c:b1:7c:
53:fb:f7:71:52:9f:23:89:77:97:36:37:f6:68:89:36:93:d5:
bf:62:a3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:55 2026 by rpki-client