Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: Pn41mQxvUmEG8sKNlaLVoVXUbWz1iiqN3B4pQLp/3uQ=
Subject key identifier: 75:F8:07:FE:CC:C5:F8:25:DF:B7:E5:70:DF:34:21:6F:29:0B:E8:AB
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 019D277215E95F9C1EBF9514016191B69278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 1818
Signing time: Thu 26 Mar 2026 00:01:21 +0000
Manifest this update: Thu 26 Mar 2026 00:01:21 +0000
Manifest next update: Fri 27 Mar 2026 00:01:21 +0000
Files and hashes: 1: L0pkYoARJXEFc-gB4c5J8VXY3Mg.roa (hash: 1faOAUcr0h7qDHU3+7FacAnxC8gdfFMLQm2JVMNKznA=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: S8w58ClHVyyDLdaAwuoJZdpmoFLTwlHqAfbYlFM8iQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:15:e9:5f:9c:1e:bf:95:14:01:61:91:b6:92:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Mar 26 00:01:21 2026 GMT
Not After : Mar 27 00:01:21 2026 GMT
Subject: CN=75f807feccc5f825dfb7e570df34216f290be8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:bc:65:5b:ea:e8:ec:47:89:5e:5a:0c:9f:
7e:a8:13:38:24:48:15:0a:05:c2:b9:81:0b:7c:a3:
18:02:2f:04:c3:f8:13:4f:5c:b5:7f:72:f2:03:56:
85:8a:e9:18:20:fc:ce:ae:c1:15:68:7d:65:05:f7:
a5:a3:f3:b6:86:02:a6:6a:24:47:db:34:a5:a3:5c:
a1:2f:12:26:c5:ff:82:0f:16:23:56:c4:67:f6:0a:
2c:e4:22:5c:1a:84:a8:6e:3f:e2:be:2d:1f:ca:10:
c6:4c:de:19:0e:50:5b:db:e3:7d:61:49:0c:90:00:
77:3d:e2:f3:3a:ce:30:30:6d:39:bb:d1:12:25:34:
7e:e3:a6:90:b6:73:cb:7c:10:10:04:fc:5f:36:f3:
cb:ed:48:e9:36:15:27:b0:8d:e3:2d:73:29:41:2d:
29:86:d7:0d:75:eb:0b:6e:0c:c2:c1:22:e4:43:22:
7b:95:2c:d7:f6:75:16:56:7c:61:6e:72:35:54:00:
01:1c:d9:62:5c:f8:3a:1e:6e:44:7f:bf:4b:4f:2c:
80:98:f7:8a:12:0b:97:f6:00:c3:5d:38:b2:d8:64:
f9:38:37:17:fc:ad:e2:1c:d3:26:4f:a9:3a:09:72:
96:97:0f:b9:a9:8f:15:fc:e4:d1:46:e4:19:a4:8f:
70:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F8:07:FE:CC:C5:F8:25:DF:B7:E5:70:DF:34:21:6F:29:0B:E8:AB
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:68:fa:c7:20:9e:f4:69:ca:e8:7c:16:35:29:b1:fd:db:6c:
eb:6c:d5:82:38:37:3c:80:0f:42:58:80:b0:4b:fa:b9:4d:d8:
51:70:ea:8e:18:4b:60:a2:e1:70:2d:8a:7e:9b:02:d5:96:13:
9d:d6:44:41:39:7f:4a:87:a7:cb:40:d2:0d:7e:af:48:1c:51:
1c:00:02:00:2e:d6:de:c2:e9:63:ad:96:6d:2d:53:08:b1:19:
d3:13:66:b2:36:9b:7d:f6:37:50:41:75:0a:b3:29:ac:62:62:
bd:f4:ef:7b:7b:93:da:57:9a:0b:f8:f1:a3:22:b8:2a:2c:25:
86:45:09:65:86:b1:5e:12:40:21:21:84:bf:6f:0f:ec:9e:b7:
b8:d4:cf:da:b1:c1:76:e5:80:85:ba:84:f2:c0:b2:2a:b2:03:
63:ef:4e:06:7d:cc:20:5e:09:18:ad:69:e2:e5:69:15:8c:ef:
97:a7:d3:e3:ab:fd:ae:2b:a6:e6:82:de:40:10:1c:a6:15:3f:
9f:72:7f:41:2d:f7:18:dd:7c:2a:78:6b:e9:0d:9c:a2:d1:fe:
f7:b2:a1:e8:20:e2:d6:9d:7e:bc:dd:fc:43:d2:2b:a0:d3:03:
1e:a1:ab:47:69:64:0f:61:b7:31:c7:96:d2:d8:e8:5f:6e:35:
4c:92:be:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:43 2026 by rpki-client