Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
File: APkIwDKKjpc_pArFL8M359PE_tA.mft (raw, json)
Hash identifier: JeY3PcbGyM5h2837s+IGGVzCuOzd805FxixAzcrhrRo=
Subject key identifier: AC:ED:E5:86:9C:E0:2C:2D:6E:2E:70:FE:2B:B9:FC:98:EB:D3:7E:D4
Authority key identifier: 00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
Certificate issuer: /CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Certificate serial: 01A0C9D96A3D64E3F5D4EC2E3C1B79842C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
Manifest number: 1A64
Signing time: Tue 22 Sep 2026 16:01:03 +0000
Manifest this update: Tue 22 Sep 2026 16:01:03 +0000
Manifest next update: Wed 23 Sep 2026 16:01:03 +0000
Files and hashes: 1: APkIwDKKjpc_pArFL8M359PE_tA.crl (hash: jdxusj1MMWqkTVOin/noKHGJ4lPjFs0dv15+CBSgdEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:6a:3d:64:e3:f5:d4:ec:2e:3c:1b:79:84:2c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f908c0328a8e973fa40ac52fc337e7d3c4fed0
Validity
Not Before: Sep 22 16:01:03 2026 GMT
Not After : Sep 23 16:01:03 2026 GMT
Subject: CN=acede5869ce02c2d6e2e70fe2bb9fc98ebd37ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b3:06:17:d7:6e:83:f2:3a:56:2d:37:b6:fd:
55:99:64:4a:66:44:2d:e4:3b:86:db:65:07:3a:c7:
b5:ae:28:6c:7e:ef:f8:84:2e:68:05:1e:a2:02:d3:
b9:f2:71:bc:fb:bb:5c:0c:2f:89:92:b9:d0:2a:5f:
fb:08:ec:40:d1:45:d9:b5:72:50:16:f3:86:39:3b:
6b:a7:a6:46:4e:c6:2f:9e:4f:4e:a8:ad:d3:8e:ab:
28:43:6b:ac:d1:1b:a1:c4:4c:72:f0:fd:79:d5:28:
1b:1f:2d:db:cd:73:8b:63:a7:48:a5:29:9c:75:75:
de:a0:43:35:ca:10:65:ce:e2:f6:9c:7d:f2:2b:7a:
a5:b2:7a:0f:0e:f6:2f:0d:97:8f:4f:95:a0:5f:bf:
55:94:1e:d0:df:d8:5a:2f:2a:68:0e:9e:c3:83:0f:
32:50:26:61:fb:ba:89:61:f0:96:93:4e:12:92:64:
8e:68:33:45:51:30:ae:fd:c0:b5:f0:c3:38:92:65:
b5:eb:98:71:d7:bd:cc:c3:37:a6:31:b5:ee:f4:91:
57:f2:78:7b:d9:82:8a:83:c2:30:04:b0:29:a2:1f:
74:da:9e:2e:87:20:19:dd:ab:f8:18:a5:63:95:14:
bb:df:05:b6:c8:d5:f3:35:bd:15:e3:0d:e6:62:f2:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:ED:E5:86:9C:E0:2C:2D:6E:2E:70:FE:2B:B9:FC:98:EB:D3:7E:D4
X509v3 Authority Key Identifier:
keyid:00:F9:08:C0:32:8A:8E:97:3F:A4:0A:C5:2F:C3:37:E7:D3:C4:FE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APkIwDKKjpc_pArFL8M359PE_tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ea2c50-afca-40b1-9381-7decf1e47865/1/APkIwDKKjpc_pArFL8M359PE_tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:48:f5:69:a6:27:ff:df:d5:89:62:73:70:4a:23:a9:00:5a:
8e:a5:9c:d1:8a:30:e3:d2:05:48:93:e9:a2:81:80:0a:29:e8:
29:84:c9:22:37:89:44:8d:40:e0:a4:df:00:05:1b:50:92:e0:
de:f5:0d:a7:ca:fb:40:f8:83:47:25:fa:3f:b1:df:27:1f:31:
4a:fc:3b:3d:1f:a8:a3:cc:47:4d:7b:2a:c7:a6:a3:44:ae:e9:
07:7c:09:0a:f1:3e:1b:06:c7:e5:b4:af:ec:69:6b:09:83:d2:
59:0a:75:34:e1:97:d7:df:34:f5:24:f4:d9:52:00:3c:38:25:
b4:70:4d:dc:7e:f4:db:79:a8:39:e7:df:3e:92:38:67:8b:5d:
d7:ef:62:f4:c3:00:b8:59:7d:37:61:37:4a:28:9b:16:13:98:
9f:9f:fc:ec:82:e9:5b:78:e8:bc:24:c1:0a:60:1a:82:6d:3d:
65:4e:0d:e6:b0:50:03:08:b8:22:16:9e:13:26:e6:2b:98:09:
24:ce:85:c0:e2:5a:1a:aa:e6:99:98:ce:57:35:e3:4d:fd:34:
78:29:c7:00:85:83:59:a5:a0:e2:9c:9d:88:bb:6d:81:46:e8:
68:5a:d0:10:5b:de:36:fe:75:d1:6e:ad:af:f1:8d:8c:f8:7e:
c7:fd:bf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:15:34 2026 by rpki-client