Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.mft
File: 1-vkiApgEfiQaYUx6gMMIdSa2QdQ.mft (raw, json)
Hash identifier: CYFY0HlmjO6rnOSidK5vvwMlaTzz0OycmR2sgrMGvjo=
Subject key identifier: 06:87:1F:18:2B:66:74:F6:34:B6:2C:98:C0:D0:68:30:9F:31:97:2E
Authority key identifier: FA:F9:22:02:98:04:7E:24:1A:61:4C:7A:80:C3:08:75:26:B6:41:D4
Certificate issuer: /CN=faf9220298047e241a614c7a80c3087526b641d4
Certificate serial: 01A0CF36216F6B2660BD7CC49F27761A9DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.mft
Manifest number: 60
Signing time: Wed 23 Sep 2026 17:00:26 +0000
Manifest this update: Wed 23 Sep 2026 17:00:26 +0000
Manifest next update: Thu 24 Sep 2026 17:00:26 +0000
Files and hashes: 1: 1-vkiApgEfiQaYUx6gMMIdSa2QdQ.crl (hash: iv1ujFB6STa6rHJbnyKaXNmuPmZ36+zVyB+ojcIq1/w=)
2: HyS9OeER7hDvhrpH9P3qgsXvBH4.asa (hash: diO6MtHxtcdNQErm9imCO+dWoxmH2EHMTqdPtM649Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:21:6f:6b:26:60:bd:7c:c4:9f:27:76:1a:9d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf9220298047e241a614c7a80c3087526b641d4
Validity
Not Before: Sep 23 17:00:26 2026 GMT
Not After : Sep 24 17:00:26 2026 GMT
Subject: CN=06871f182b6674f634b62c98c0d068309f31972e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:68:23:fe:76:0d:ad:b0:64:a4:2c:91:a6:
56:dd:44:2d:36:ca:34:cd:67:02:ac:63:88:3e:86:
b7:c0:ce:7a:c7:45:4c:42:db:2e:fe:c3:b2:bd:df:
2e:7a:35:c6:9c:a8:40:eb:62:42:50:65:5a:c4:64:
e3:a1:c8:f0:f1:10:2a:3d:61:d3:25:13:d1:1e:a4:
ea:da:50:84:f7:36:1d:ed:cd:ce:a2:a7:0a:39:d4:
03:b7:f8:1e:4e:15:84:81:e5:d4:89:a1:b4:00:fa:
93:3b:72:cf:d8:09:54:21:15:c5:6d:3e:7b:48:34:
5f:42:67:c9:82:86:7b:3c:0e:05:8c:c7:f9:e1:9d:
b5:91:57:26:83:29:0e:48:f4:d2:c5:6e:1d:c7:e3:
ab:60:fa:a9:30:9f:97:69:b1:06:f6:bb:d4:91:a4:
50:98:ca:b6:6f:1f:30:4b:c9:d7:b4:d3:13:bc:1b:
56:14:59:6f:26:64:3c:22:0c:5b:7e:61:2d:3e:94:
1f:9f:2f:4e:8a:dc:ca:2a:f0:19:81:32:f5:c8:70:
34:de:c2:65:05:bb:08:f8:0b:3d:fb:aa:4f:fd:b8:
b0:4c:33:79:cb:2a:8d:60:b6:8e:3f:db:4c:4e:c7:
f4:e6:a0:56:5e:99:d2:3d:ce:29:02:5d:d7:9c:06:
91:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:87:1F:18:2B:66:74:F6:34:B6:2C:98:C0:D0:68:30:9F:31:97:2E
X509v3 Authority Key Identifier:
keyid:FA:F9:22:02:98:04:7E:24:1A:61:4C:7A:80:C3:08:75:26:B6:41:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cd2f56-3ee7-4c06-8a12-1b8bc12961d2/1/1-vkiApgEfiQaYUx6gMMIdSa2QdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:35:a6:a4:09:e7:cb:1c:5f:65:91:c1:e9:7a:9a:38:cf:68:
8c:27:68:7e:bc:8a:66:28:4b:83:34:78:dc:83:45:e8:6b:8b:
a9:ef:c9:56:43:08:af:5b:a1:68:6d:c1:80:e0:e4:b3:9c:4a:
59:2b:70:0c:a4:65:d7:fa:c8:98:8d:65:6e:0e:92:79:94:71:
5a:28:a0:bc:72:6f:ab:c1:19:7c:40:a4:57:23:36:f8:ed:f0:
4a:93:eb:21:d2:7c:76:96:08:6d:5f:35:72:62:d0:13:87:91:
3a:ef:65:53:44:2b:e1:bf:c8:aa:99:7e:e5:48:0b:84:06:c7:
09:db:56:e0:ca:78:12:df:9f:ff:0f:49:c7:b0:bf:d1:76:00:
9a:16:0d:fe:d2:46:e2:42:f1:1b:86:60:f7:b6:80:02:7f:0b:
d1:a4:f9:48:97:3e:f8:95:b4:ed:23:e6:9c:cc:8b:a2:d0:42:
8a:db:92:15:6d:f5:b7:eb:8a:cd:2f:d9:e1:76:6f:7c:16:f0:
55:c3:c4:12:e1:85:ed:d2:e4:41:fa:0f:f1:e4:80:5e:5f:81:
28:cd:4a:20:34:a8:08:dd:a5:ca:42:d1:35:15:e1:5a:9d:97:
29:09:b4:75:bc:a9:25:f1:aa:0b:50:35:c9:f1:48:27:e2:2b:
ae:db:09:d8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDPNiFvayZgvXzEnyd2Gp3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZjkyMjAyOTgwNDdlMjQxYTYxNGM3YTgwYzMwODc1MjZi
NjQxZDQwHhcNMjYwOTIzMTcwMDI2WhcNMjYwOTI0MTcwMDI2WjAzMTEwLwYDVQQD
EygwNjg3MWYxODJiNjY3NGY2MzRiNjJjOThjMGQwNjgzMDlmMzE5NzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pZoI/52Da2wZKQskaZW3UQtNso0
zWcCrGOIPoa3wM56x0VMQtsu/sOyvd8uejXGnKhA62JCUGVaxGTjocjw8RAqPWHT
JRPRHqTq2lCE9zYd7c3OoqcKOdQDt/geThWEgeXUiaG0APqTO3LP2AlUIRXFbT57
SDRfQmfJgoZ7PA4FjMf54Z21kVcmgykOSPTSxW4dx+OrYPqpMJ+XabEG9rvUkaRQ
mMq2bx8wS8nXtNMTvBtWFFlvJmQ8IgxbfmEtPpQfny9OitzKKvAZgTL1yHA03sJl
BbsI+As9+6pP/biwTDN5yyqNYLaOP9tMTsf05qBWXpnSPc4pAl3XnAaR0QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAaHHxgrZnT2NLYsmMDQaDCfMZcuMB8GA1UdIwQY
MBaAFPr5IgKYBH4kGmFMeoDDCHUmtkHUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS12a2lBcGdFZmlRYVlVeDZnTU1JZFNhMlFkUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYvY2QyZjU2LTNlZTctNGMwNi04YTEy
LTFiOGJjMTI5NjFkMi8xLzEtdmtpQXBnRWZpUWFZVXg2Z01NSWRTYTJRZFEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFmL2NkMmY1Ni0zZWU3LTRjMDYtOGExMi0xYjhiYzEyOTYx
ZDIvMS8xLXZraUFwZ0VmaVFhWVV4NmdNTUlkU2EyUWRRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzWm
pAnnyxxfZZHB6XqaOM9ojCdofryKZihLgzR43INF6GuLqe/JVkMIr1uhaG3BgODk
s5xKWStwDKRl1/rImI1lbg6SeZRxWiigvHJvq8EZfECkVyM2+O3wSpPrIdJ8dpYI
bV81cmLQE4eROu9lU0Qr4b/Iqpl+5UgLhAbHCdtW4Mp4Et+f/w9Jx7C/0XYAmhYN
/tJG4kLxG4Zg97aAAn8L0aT5SJc++JW07SPmnMyLotBCituSFW31t+uKzS/Z4XZv
fBbwVcPEEuGF7dLkQfoP8eSAXl+BKM1KIDSoCN2lykLRNRXhWp2XKQm0dbypJfGq
C1A1yfFIJ+IrrtsJ2A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:46:52 2026 by rpki-client