Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
File: apBb7RAQVRrlUQyuXu4LuZnSh44.mft (raw, json)
Hash identifier: L9VyF0gZ5ltJ4UoTBqk2ypqPNWrwDFHarNPU4U0tvbg=
Subject key identifier: 38:53:DD:8F:C4:E4:86:39:1A:CD:52:C3:01:37:A9:47:97:3F:36:7B
Authority key identifier: 6A:90:5B:ED:10:10:55:1A:E5:51:0C:AE:5E:EE:0B:B9:99:D2:87:8E
Certificate issuer: /CN=6a905bed1010551ae5510cae5eee0bb999d2878e
Certificate serial: 01A0CE242CA9BE519A3BA2766414DE45A14C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:01:11 +0000
Manifest this update: Wed 23 Sep 2026 12:01:11 +0000
Manifest next update: Thu 24 Sep 2026 12:01:11 +0000
Files and hashes: 1: 8WO4H3LLmQjh35Y1DhdVPcJaeWw.asa (hash: sduouSzb9jUwQP/768gaM8wQLqZouXh1WtsTxFHYtIM=)
2: apBb7RAQVRrlUQyuXu4LuZnSh44.crl (hash: J01LDiIdAyaqqrA5QuyVtuSTWmxo36+MojhPrYJEpLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:2c:a9:be:51:9a:3b:a2:76:64:14:de:45:a1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a905bed1010551ae5510cae5eee0bb999d2878e
Validity
Not Before: Sep 23 12:01:11 2026 GMT
Not After : Sep 24 12:01:11 2026 GMT
Subject: CN=3853dd8fc4e486391acd52c30137a947973f367b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:99:f9:90:6c:89:b5:5b:bc:02:c2:bd:a3:
d3:20:b7:1e:38:b8:42:60:97:f7:ce:2c:7b:c3:c4:
3b:8f:86:df:ea:49:b4:80:69:25:5a:3c:79:b2:ab:
ec:c0:9c:b3:24:61:e3:74:3f:0f:41:ac:03:1e:ce:
e9:70:e9:4e:e7:79:5b:f3:68:a7:2a:70:dd:2e:4b:
23:cf:fa:45:e8:ec:88:c4:d8:1d:e1:f3:d3:2b:82:
bb:67:4a:97:ab:27:8e:1c:1d:75:03:81:e9:58:b9:
0e:a9:81:8b:b7:81:30:2f:d6:18:47:34:8e:84:0a:
0f:5b:eb:ab:f0:e4:6e:54:8f:2c:00:b2:e9:05:3a:
34:f4:4f:cf:52:45:b7:c7:22:e3:fa:1a:7d:48:22:
8e:52:d7:5c:13:48:41:7e:4d:1e:44:41:f3:e8:87:
32:79:cb:93:19:22:84:01:ec:35:c0:b1:48:da:31:
7d:76:13:43:fb:b7:20:59:e9:99:47:cd:df:8c:f1:
d9:c5:fb:5d:9a:c5:37:53:23:e9:37:b7:f0:a5:30:
31:e1:b2:8d:11:96:95:1c:57:43:6b:cd:f6:2c:af:
d0:5c:55:aa:81:e4:56:21:9e:64:ab:24:7c:40:59:
fa:d8:5c:1f:af:84:7b:74:91:9c:30:22:f4:3f:29:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:53:DD:8F:C4:E4:86:39:1A:CD:52:C3:01:37:A9:47:97:3F:36:7B
X509v3 Authority Key Identifier:
keyid:6A:90:5B:ED:10:10:55:1A:E5:51:0C:AE:5E:EE:0B:B9:99:D2:87:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apBb7RAQVRrlUQyuXu4LuZnSh44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c1a241-e95c-4f27-9992-624d87d82ee2/1/apBb7RAQVRrlUQyuXu4LuZnSh44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:06:3b:02:fa:58:d5:06:b1:8a:ea:98:b8:46:6b:09:a8:51:
13:3e:0e:cb:59:60:02:a7:2e:84:94:0b:5c:9d:0a:c2:8a:11:
cd:f8:9d:e5:de:7a:ae:90:ec:af:f1:e3:33:e0:22:26:0a:cd:
fb:8f:d8:d3:41:11:a5:6e:a8:52:2a:f8:15:ba:22:e6:c8:75:
d7:c6:37:19:0e:f4:41:7c:b4:b6:44:6b:30:4c:4b:dd:df:fc:
37:69:57:d5:85:c7:19:12:d3:39:8b:04:37:60:6a:bc:9e:f7:
08:1e:51:d4:63:77:92:3b:27:a0:08:b4:7f:7b:9f:cf:6f:cf:
80:f2:33:e0:6e:bf:2c:68:cd:95:10:96:ca:54:0a:31:a9:29:
9c:35:08:37:c0:d8:b0:66:da:ad:ea:d4:25:95:e4:39:86:cf:
4b:c1:b3:94:3e:71:cb:90:1b:57:2b:8e:b0:23:da:8e:a6:c9:
fa:a9:54:bc:79:e1:ca:c7:bc:88:8c:9a:cb:fa:cf:bb:7e:9e:
2a:06:ab:b0:0b:d3:97:ef:82:2a:d7:3d:24:17:df:fc:4b:2e:
13:32:37:85:9f:e3:3d:15:d4:cd:65:c3:33:60:6d:a4:49:00:
99:03:23:97:87:68:26:79:cb:64:43:26:cb:fd:49:50:05:33:
aa:4b:f1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:26:13 2026 by rpki-client