Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.mft
File: APmKcC-EdVZk2q0JVCRiEhJf1js.mft (raw, json)
Hash identifier: 153sMGrPKsS6bwom5Sq7+tG6j8zbCgn3e5tzS6GW7ds=
Subject key identifier: 61:A3:DA:97:14:74:1B:11:06:DF:F2:FF:58:CD:98:CA:68:50:AD:48
Authority key identifier: 00:F9:8A:70:2F:84:75:56:64:DA:AD:09:54:24:62:12:12:5F:D6:3B
Certificate issuer: /CN=00f98a702f84755664daad0954246212125fd63b
Certificate serial: 019F8F7F029D930E016003D4E0CE45719477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APmKcC-EdVZk2q0JVCRiEhJf1js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:33 +0000
Manifest this update: Thu 23 Jul 2026 15:01:33 +0000
Manifest next update: Fri 24 Jul 2026 15:01:33 +0000
Files and hashes: 1: APmKcC-EdVZk2q0JVCRiEhJf1js.crl (hash: YXFHSnQfjlVs3ZWsFvfHZS8spTPKKLHEayFN7coQ9hE=)
2: qZ9vCmktgVJOJlSmcCKZ_0Kss54.roa (hash: mVbDrPd9yE6i8GNPlAaQal/Zd89QBSi5kZ9wFmjX2kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.mft
rsync://rpki.ripe.net/repository/DEFAULT/APmKcC-EdVZk2q0JVCRiEhJf1js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:02:9d:93:0e:01:60:03:d4:e0:ce:45:71:94:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f98a702f84755664daad0954246212125fd63b
Validity
Not Before: Jul 23 15:01:33 2026 GMT
Not After : Jul 24 15:01:33 2026 GMT
Subject: CN=61a3da9714741b1106dff2ff58cd98ca6850ad48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:e6:84:5c:81:c0:e3:93:91:ec:65:8d:42:
de:fb:d1:b8:9a:1e:41:42:e5:13:e4:88:dd:98:8c:
4b:d3:05:1a:9a:3f:ec:ef:23:71:52:5c:9f:2e:a1:
c6:e1:3a:f4:f4:99:4e:99:aa:0f:87:42:d2:1b:7e:
e6:55:d7:80:27:7a:07:ff:ce:ad:1e:fe:92:4f:b3:
6a:c9:d0:5b:35:68:c7:b0:a2:81:db:06:46:2e:b5:
6b:e2:f8:b3:05:0b:b1:5b:17:e4:9c:37:91:34:da:
9b:8c:82:61:2f:df:f0:a6:b7:52:2a:3c:72:03:aa:
7c:31:58:9d:43:3a:c4:68:87:8b:00:47:0b:c0:ba:
c4:8f:3a:32:35:83:8e:b2:9c:79:78:40:42:d2:54:
6c:27:79:5f:54:06:1b:7a:78:fe:1e:d6:45:3c:ba:
a0:0d:21:e6:66:0a:45:8e:b0:69:0a:e1:8f:7c:3b:
52:fb:6e:b6:10:75:23:c5:34:66:9a:e3:ee:fd:58:
07:bb:60:f8:01:78:53:7f:9b:66:57:d7:80:a5:59:
aa:30:b8:2e:34:1c:4e:5b:56:66:d9:e7:3d:6e:1c:
7d:17:53:c2:68:38:77:e5:bc:51:4d:a9:31:50:14:
16:28:26:36:ca:09:bf:69:68:50:f6:bf:71:14:ac:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A3:DA:97:14:74:1B:11:06:DF:F2:FF:58:CD:98:CA:68:50:AD:48
X509v3 Authority Key Identifier:
keyid:00:F9:8A:70:2F:84:75:56:64:DA:AD:09:54:24:62:12:12:5F:D6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APmKcC-EdVZk2q0JVCRiEhJf1js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f8:15:9e:ef:31:36:42:85:85:f1:97:00:92:de:53:9c:fe:
7e:6b:6e:9c:0a:c8:4d:36:c5:47:af:93:3b:a6:0a:bf:f1:72:
16:69:47:5b:5d:81:d8:4f:d0:a2:bc:ad:a5:79:54:2f:b9:a0:
8c:19:3b:75:69:33:3d:d9:8e:cd:1e:dc:2a:3e:c1:79:bc:c8:
13:e8:d5:28:7c:46:eb:4e:8f:27:9f:0d:52:e7:e2:c5:bb:f6:
ad:4c:20:71:d1:d3:c6:9c:c0:0f:26:ed:13:7a:44:9a:de:bb:
27:42:1e:ef:8e:ed:6f:53:7f:de:0b:df:65:c6:07:32:bb:29:
6c:78:34:13:8e:fa:ee:65:1f:03:63:27:7c:c0:e8:e0:34:3b:
40:db:75:b4:8c:c6:7a:42:58:76:5c:6d:82:e2:af:1b:e7:f3:
77:81:d7:2a:b2:27:9f:30:59:d3:b5:80:ae:58:1f:2f:0a:6b:
85:41:42:d8:db:39:d3:eb:f0:49:f3:0e:6d:f5:e0:8e:d9:af:
32:a3:a3:eb:46:f2:38:ed:f3:49:cc:95:42:30:85:19:23:56:
8e:27:86:c2:1b:82:18:79:18:bd:8b:13:f0:30:93:eb:04:18:
df:31:23:8c:69:e9:95:8b:b2:1e:7f:d0:9b:06:ce:03:49:5a:
05:3f:de:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:46:15 2026 by rpki-client