Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
File: apBb7RAQVRrlUQyuXu4LuZnSh44.mft (raw, json)
Hash identifier: CJvK1x5UXCRwJF2+Tb7Zje5aLH12l94VzE/xS8pJ/lI=
Subject key identifier: 28:FB:73:8A:5C:78:35:9C:C1:30:F3:5F:A9:D9:B9:9D:E2:D9:C0:48
Authority key identifier: 6A:90:5B:ED:10:10:55:1A:E5:51:0C:AE:5E:EE:0B:B9:99:D2:87:8E
Certificate issuer: /CN=6a905bed1010551ae5510cae5eee0bb999d2878e
Certificate serial: 01A1DE70B613ECF38E87B0995277A6E21006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:01:30 +0000
Manifest this update: Sun 15 Nov 2026 09:01:30 +0000
Manifest next update: Mon 16 Nov 2026 09:01:30 +0000
Files and hashes: 1: 8WO4H3LLmQjh35Y1DhdVPcJaeWw.asa (hash: sduouSzb9jUwQP/768gaM8wQLqZouXh1WtsTxFHYtIM=)
2: apBb7RAQVRrlUQyuXu4LuZnSh44.crl (hash: 4mvjI+Wtbur3VokD7NKmY/NkWBWhCwV/kCb+8ZbBEmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:b6:13:ec:f3:8e:87:b0:99:52:77:a6:e2:10:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a905bed1010551ae5510cae5eee0bb999d2878e
Validity
Not Before: Nov 15 09:01:30 2026 GMT
Not After : Nov 16 09:01:30 2026 GMT
Subject: CN=28fb738a5c78359cc130f35fa9d9b99de2d9c048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1f:f8:d3:6b:36:08:3e:64:c8:65:92:30:c2:
3e:c1:98:ee:66:26:74:ba:ba:e5:8d:61:e7:ab:e9:
ef:58:3b:3f:df:81:6c:36:c7:1f:7e:a0:cf:1c:de:
4a:75:bc:91:6d:e8:c5:9b:1b:03:b1:d6:40:19:27:
7b:49:cf:07:e9:fd:57:63:ac:13:84:53:24:bc:4c:
76:f4:bf:90:71:24:ef:e5:d2:ca:91:bb:68:02:79:
0e:4f:de:b9:ec:78:db:45:b6:c8:95:0c:93:54:75:
61:f8:9b:bc:cb:48:6a:ab:83:23:d7:5a:66:6f:78:
80:84:bd:05:89:b5:58:33:9b:e4:d3:cd:f8:03:4d:
45:23:8f:c4:59:fb:a9:12:30:fe:77:15:82:59:73:
90:f7:b5:39:8a:66:92:e5:6d:d5:6c:fc:61:e5:1d:
3c:c3:dd:f3:04:ef:55:b4:75:72:f9:e6:0a:1e:9d:
06:c4:07:33:8b:02:ab:b8:0f:ff:fa:60:1e:f9:fd:
f6:a0:e0:f7:16:6e:81:f8:58:3c:ad:c2:ca:2a:5c:
32:c2:5a:26:e6:97:1b:9d:5b:76:e7:44:95:82:f0:
b4:cb:5a:be:34:e8:11:51:30:20:31:46:fc:d3:6c:
c0:48:fd:3c:2d:82:c9:74:83:60:5a:2a:f8:0a:19:
99:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FB:73:8A:5C:78:35:9C:C1:30:F3:5F:A9:D9:B9:9D:E2:D9:C0:48
X509v3 Authority Key Identifier:
keyid:6A:90:5B:ED:10:10:55:1A:E5:51:0C:AE:5E:EE:0B:B9:99:D2:87:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:17:24:80:ac:97:09:6f:6f:ba:37:49:39:a0:f4:6a:41:62:
b3:84:36:28:64:e6:d1:64:c5:89:e7:1a:a2:e3:3c:83:72:a2:
fa:51:c4:52:d2:02:db:93:1e:cc:cd:db:a4:e8:74:09:a6:5e:
99:1a:d2:ad:57:a9:e8:35:02:94:3b:9d:5f:34:ae:39:f7:fa:
be:6b:94:eb:60:75:c1:1d:a5:e2:c8:a5:9b:74:fd:51:7e:31:
42:34:e7:58:2a:f9:ae:39:83:0a:c6:bb:ab:81:eb:32:e1:59:
67:ed:c5:08:8c:56:ee:cf:16:bb:3e:06:16:bb:18:85:15:8e:
2b:f0:e7:c7:b0:4f:56:3d:19:4b:7e:21:4a:c8:71:0b:28:7f:
96:6b:6e:d5:ef:bb:a4:94:dd:75:6f:99:bb:9d:1d:21:d8:a3:
64:12:86:67:1e:bd:db:6d:3d:c5:c6:ac:8e:28:4e:26:d2:c6:
35:33:3f:f6:f4:a2:6e:ff:61:50:17:d0:3b:24:71:53:b7:2d:
7c:83:03:b0:b6:bb:a7:40:7d:90:12:64:a5:5d:12:db:ac:eb:
6e:b1:0c:f7:f6:86:1c:36:63:27:69:f1:5d:8c:6d:cf:db:aa:
97:b0:24:ea:cb:ba:0b:47:21:f0:88:1f:bc:85:2a:51:50:a0:
49:69:2d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:14:54 2026 by rpki-client