Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
File: APkIwDKKjpc_pArFL8M359PE_tA.mft (raw, json)
Hash identifier: MqKtz/my5pHGXg+ZXarJNii5OmaZG3+hdnG5sGqBw5o=
Subject key identifier: C9:48:42:E2:92:E5:6D:DF:D4:DB:C9:43:28:34:0A:7A:6D:D9:0A:EB
Authority key identifier: 00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
Certificate issuer: /CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Certificate serial: 019F92EDCC04C76BC0DAF913263B5D7BA2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
Manifest number: 19C3
Signing time: Fri 24 Jul 2026 07:01:25 +0000
Manifest this update: Fri 24 Jul 2026 07:01:25 +0000
Manifest next update: Sat 25 Jul 2026 07:01:25 +0000
Files and hashes: 1: APkIwDKKjpc_pArFL8M359PE_tA.crl (hash: hQpxoIGTpRYYqsBs11h2epf7GcyuhawHbsmSuIEJ0vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:cc:04:c7:6b:c0:da:f9:13:26:3b:5d:7b:a2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Validity
Not Before: Jul 24 07:01:25 2026 GMT
Not After : Jul 25 07:01:25 2026 GMT
Subject: CN=c94842e292e56ddfd4dbc94328340a7a6dd90aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:8c:5a:6b:5b:37:47:29:11:0c:fb:e0:49:
87:48:f0:4f:68:38:c5:ff:d5:bb:42:07:02:4d:4a:
fe:63:ca:d1:4e:38:82:5e:9b:0c:65:25:2b:8b:76:
8d:ca:87:91:7d:6f:9f:67:41:eb:e1:e4:c8:38:15:
3c:f9:6e:2a:61:69:ee:7d:3e:67:4c:5f:28:78:b8:
f1:03:70:4f:48:d3:45:03:78:d9:54:22:f7:1a:78:
c9:83:15:80:88:8f:e9:a4:77:5c:6a:92:24:70:b3:
6f:8d:9f:e0:b8:0a:aa:f1:76:73:a6:c7:e8:95:e6:
f3:e9:a7:9c:c3:ff:c8:97:e1:87:8f:92:70:90:1b:
e9:9f:14:f8:6b:69:f5:3f:ad:fc:71:10:ee:8b:49:
61:11:b5:8f:64:5b:5f:61:c0:00:a7:b1:07:9f:1c:
d5:95:c8:29:33:cc:c2:b5:43:fd:3b:c2:da:42:84:
71:b7:cf:ef:f3:96:2b:e5:b5:93:4c:8b:9e:6d:7c:
4a:2e:ff:02:89:63:d4:df:2b:19:5d:e0:82:f8:e8:
34:6f:82:79:e8:99:d0:29:ce:db:60:b2:a1:25:c2:
89:06:8d:94:72:47:a9:66:0f:d0:1a:17:e3:fb:3b:
3f:74:a1:dd:6c:13:e7:67:5a:b9:65:6e:96:78:78:
b3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:48:42:E2:92:E5:6D:DF:D4:DB:C9:43:28:34:0A:7A:6D:D9:0A:EB
X509v3 Authority Key Identifier:
keyid:00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fc:d6:5c:0c:3c:0d:df:e7:19:cb:89:95:9a:02:dc:16:f3:
38:08:44:4e:1b:d5:d4:24:78:06:d0:84:0b:0d:8f:d6:34:bb:
96:b4:89:a1:e5:9f:45:d6:02:a3:24:b6:81:4d:fa:74:b2:71:
ab:a4:f0:c0:86:17:98:64:f8:e4:ff:a1:76:35:c5:01:e9:75:
84:45:b1:da:fb:d3:f8:a4:e1:61:d6:d6:78:49:cb:4f:6a:c6:
bf:06:af:af:1b:cf:e8:10:da:2b:cb:d9:fd:6d:e1:eb:67:41:
ac:00:23:25:f9:ee:f3:7f:d5:82:2a:11:2c:dd:c6:d0:c7:24:
bb:f9:c0:d8:73:9f:45:67:82:47:27:ff:3e:f8:a5:6a:9f:ce:
47:f4:1d:bb:77:7e:3b:d0:e2:09:a7:3d:48:9c:01:5b:0b:66:
f9:c1:f4:81:d6:3c:05:7f:20:99:a5:5a:3f:96:ba:77:e3:cb:
a8:5f:bc:4e:85:bf:81:6c:0a:1b:d8:44:4a:4f:ce:a1:a5:cf:
b2:3f:d6:0c:a4:ee:3b:99:a4:47:da:27:59:71:45:f7:1a:f6:
7a:5c:39:06:a2:38:f2:0e:39:77:ce:02:80:7f:48:31:5e:2e:
0f:ac:ef:fb:57:2f:f8:03:f4:0d:96:42:2d:93:f7:ca:5d:36:
d3:99:79:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7cwEx2vA2vkTJjtde6LXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZjkwOGMwMzI4YThlOTczZmE0MGFjNTJmYzMzN2U3ZDNj
NGZlZDAwHhcNMjYwNzI0MDcwMTI1WhcNMjYwNzI1MDcwMTI1WjAzMTEwLwYDVQQD
EyhjOTQ4NDJlMjkyZTU2ZGRmZDRkYmM5NDMyODM0MGE3YTZkZDkwYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxSMWmtbN0cpEQz74EmHSPBPaDjF
/9W7QgcCTUr+Y8rRTjiCXpsMZSUri3aNyoeRfW+fZ0Hr4eTIOBU8+W4qYWnufT5n
TF8oeLjxA3BPSNNFA3jZVCL3GnjJgxWAiI/ppHdcapIkcLNvjZ/guAqq8XZzpsfo
lebz6aecw//Il+GHj5JwkBvpnxT4a2n1P638cRDui0lhEbWPZFtfYcAAp7EHnxzV
lcgpM8zCtUP9O8LaQoRxt8/v85Yr5bWTTIuebXxKLv8CiWPU3ysZXeCC+Og0b4J5
6JnQKc7bYLKhJcKJBo2UckepZg/QGhfj+zs/dKHdbBPnZ1q5ZW6WeHiz2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlIQuKS5W3f1NvJQyg0Cnpt2QrrMB8GA1UdIwQY
MBaAFAD5CMAyio6XP6QKxS/DN+fTxP7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVBrSXdES0tqcGNfcEFyRkw4TTM1OVBFX3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lYTJjNTAtYWZjYS00MGIxLTkzODEt
N2RlY2YxZTQ3ODY1LzEvQVBrSXdES0tqcGNfcEFyRkw4TTM1OVBFX3RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lYTJjNTAtYWZjYS00MGIxLTkzODEtN2RlY2YxZTQ3ODY1
LzEvQVBrSXdES0tqcGNfcEFyRkw4TTM1OVBFX3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/zWXAw8
Dd/nGcuJlZoC3BbzOAhEThvV1CR4BtCECw2P1jS7lrSJoeWfRdYCoyS2gU36dLJx
q6TwwIYXmGT45P+hdjXFAel1hEWx2vvT+KThYdbWeEnLT2rGvwavrxvP6BDaK8vZ
/W3h62dBrAAjJfnu83/VgioRLN3G0Mcku/nA2HOfRWeCRyf/Pvilap/OR/Qdu3d+
O9DiCac9SJwBWwtm+cH0gdY8BX8gmaVaP5a6d+PLqF+8ToW/gWwKG9hESk/OoaXP
sj/WDKTuO5mkR9onWXFF9xr2elw5BqI48g45d84CgH9IMV4uD6zv+1cv+AP0DZZC
LZP3yl0205l5ow==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:14 2026 by rpki-client