Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.mft
File: APmKcC-EdVZk2q0JVCRiEhJf1js.mft (raw, json)
Hash identifier: SkDZlNKEHmv0jGjKSgFkoUAef/ViZIopU68J9TkgkFk=
Subject key identifier: A4:FB:88:C3:30:B1:9F:18:9B:9E:35:4D:BA:42:B2:83:6E:F1:C0:18
Authority key identifier: 00:F9:8A:70:2F:84:75:56:64:DA:AD:09:54:24:62:12:12:5F:D6:3B
Certificate issuer: /CN=00f98a702f84755664daad0954246212125fd63b
Certificate serial: 01A0CC35BAC38B06EB1ADA78E000430FD745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APmKcC-EdVZk2q0JVCRiEhJf1js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.mft
Manifest number: E3
Signing time: Wed 23 Sep 2026 03:01:08 +0000
Manifest this update: Wed 23 Sep 2026 03:01:08 +0000
Manifest next update: Thu 24 Sep 2026 03:01:08 +0000
Files and hashes: 1: APmKcC-EdVZk2q0JVCRiEhJf1js.crl (hash: Z/9BrGKC+HH4E3IysBJPD/gy6KS2y/tecdF/gYN4oNs=)
2: qZ9vCmktgVJOJlSmcCKZ_0Kss54.roa (hash: mVbDrPd9yE6i8GNPlAaQal/Zd89QBSi5kZ9wFmjX2kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.mft
rsync://rpki.ripe.net/repository/DEFAULT/APmKcC-EdVZk2q0JVCRiEhJf1js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:ba:c3:8b:06:eb:1a:da:78:e0:00:43:0f:d7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f98a702f84755664daad0954246212125fd63b
Validity
Not Before: Sep 23 03:01:08 2026 GMT
Not After : Sep 24 03:01:08 2026 GMT
Subject: CN=a4fb88c330b19f189b9e354dba42b2836ef1c018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:0e:66:6d:25:61:ff:bc:1c:74:57:89:bf:
90:c9:88:df:a0:1c:49:72:ca:d5:ad:36:13:9c:51:
64:46:86:39:7a:c0:f8:d4:4c:96:1d:e5:5f:d8:8e:
98:b7:06:b2:ac:3a:19:6c:a1:69:d2:38:f4:6b:19:
46:2f:6a:34:f4:50:a7:a7:07:b3:aa:c6:ed:43:dc:
6e:d0:54:50:93:e9:1a:d2:66:65:ba:17:82:a4:ba:
34:4e:b6:18:4f:da:3a:d7:a4:d6:da:f0:01:28:31:
3f:9d:50:9f:41:59:af:cc:e7:69:18:be:25:cf:85:
6f:56:24:34:02:e5:0b:f7:b3:02:cb:98:e9:d7:41:
ed:bf:02:6d:ce:74:54:9e:40:2f:11:a8:0b:7e:47:
b3:64:10:9d:e2:c4:3d:4a:f3:ce:95:2c:35:04:cd:
f9:eb:fd:fe:18:33:f5:e2:9a:13:f6:4f:9c:6c:4a:
b6:fe:28:d0:b0:64:7d:28:96:36:99:b5:7c:c9:bc:
c8:ab:6f:ba:91:5d:7d:32:e7:4b:5b:70:0e:5f:79:
8f:c2:6c:3f:e0:ed:6d:c8:b5:57:7e:d3:be:25:2b:
12:70:ca:c0:3e:cc:81:50:ed:32:48:f7:9f:8b:56:
b4:f2:46:3c:b6:02:c8:ec:69:d6:07:d4:24:3d:e1:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FB:88:C3:30:B1:9F:18:9B:9E:35:4D:BA:42:B2:83:6E:F1:C0:18
X509v3 Authority Key Identifier:
keyid:00:F9:8A:70:2F:84:75:56:64:DA:AD:09:54:24:62:12:12:5F:D6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APmKcC-EdVZk2q0JVCRiEhJf1js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:46:94:57:a4:fc:c5:a8:69:56:50:25:5b:45:72:bc:4d:94:
76:ed:11:8d:4b:fb:d3:4d:58:a2:42:3f:31:ff:01:a5:cc:58:
89:4c:00:22:ed:7e:40:a7:7e:61:06:c8:34:03:c7:8d:e5:b0:
b0:cc:d7:3d:82:89:87:2a:c0:7a:51:5c:9d:8a:a4:62:66:43:
c4:d5:b1:ab:b5:59:33:64:3c:a8:96:15:f1:0a:1d:25:a5:88:
70:2a:1e:6c:04:8f:ea:de:62:59:48:a7:41:57:e0:f9:27:c8:
02:5d:82:30:15:97:d2:1b:e7:8d:3c:8d:79:f0:39:12:12:0c:
a6:3b:dd:b4:07:d2:c1:99:21:0f:a3:fb:32:5b:1b:41:23:04:
e3:ae:64:ab:72:03:bb:a6:48:b3:99:68:01:88:18:98:fc:38:
73:d2:56:05:32:22:0d:f7:95:03:04:3b:e2:8e:0b:78:21:89:
f7:86:4b:55:01:b1:5f:52:7c:3d:91:fa:73:91:5e:ef:45:2b:
a7:f7:24:b0:aa:b4:cb:64:f8:f3:c0:18:ae:fe:81:c8:d0:a1:
02:f5:90:99:54:58:fa:8f:e9:07:a5:ba:f4:05:86:e1:3d:99:
bc:53:07:d5:17:d9:f1:a8:7d:4b:c3:c6:3a:4e:8a:bc:6c:06:
4e:b5:a2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:12:53 2026 by rpki-client