Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: Ggb12QrPIEtp0FldFGEQWC6E1u+ZGj/tKWrR5sqU6Mk=
Subject key identifier: CA:F1:D2:FD:9B:99:29:36:35:68:7D:A6:4A:9F:B0:39:58:1D:9F:7B
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 01A0CA472849894C77FFCA3D09B157152C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 19FA
Signing time: Tue 22 Sep 2026 18:00:55 +0000
Manifest this update: Tue 22 Sep 2026 18:00:55 +0000
Manifest next update: Wed 23 Sep 2026 18:00:55 +0000
Files and hashes: 1: L0pkYoARJXEFc-gB4c5J8VXY3Mg.roa (hash: 1faOAUcr0h7qDHU3+7FacAnxC8gdfFMLQm2JVMNKznA=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: ayuCnEuCzgvHNxlm/Lj/QUGvIYGNVhCesn5S4JWojOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:28:49:89:4c:77:ff:ca:3d:09:b1:57:15:2c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Sep 22 18:00:55 2026 GMT
Not After : Sep 23 18:00:55 2026 GMT
Subject: CN=caf1d2fd9b99293635687da64a9fb039581d9f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:09:49:6b:88:bf:ad:6b:1d:a6:54:a4:19:
42:32:a9:b0:a0:16:e7:b7:32:f4:7f:68:2e:76:14:
41:ae:ed:47:6b:15:44:03:41:63:74:06:86:5b:f5:
01:22:69:5d:24:a4:50:ac:a5:27:d8:66:5d:10:3b:
4f:79:fe:bf:d4:19:e0:3c:f6:a2:b2:19:96:43:9c:
d4:6d:09:48:d3:ba:e0:cb:7d:64:17:1e:3d:8b:ea:
ad:27:2d:1e:9a:0d:9d:db:dd:7e:8a:15:25:c1:98:
1c:1c:7f:dc:0a:a7:d4:39:d4:f3:e5:0c:6a:72:21:
37:77:c1:bd:bd:53:5d:b1:c1:89:bc:34:f3:a3:a0:
f1:86:1b:2e:35:84:6f:3c:ce:da:1c:3e:94:aa:ec:
29:65:26:84:69:37:a5:44:32:d9:79:cd:f5:6c:31:
a3:7f:e5:23:3f:cb:79:0a:ed:10:7e:43:df:73:56:
23:8d:f7:4d:0e:99:67:f7:55:2e:51:75:e2:b8:fd:
ba:4a:7c:cc:e9:e4:53:f8:b2:69:ed:39:5c:bd:d0:
cb:fe:6f:12:99:4f:38:1f:36:65:10:4b:fb:ec:a7:
0a:cc:41:13:66:64:f7:4c:d4:b2:a5:81:d3:c3:26:
a7:39:14:76:b2:f6:43:b2:79:4b:19:5e:41:b7:b0:
d9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F1:D2:FD:9B:99:29:36:35:68:7D:A6:4A:9F:B0:39:58:1D:9F:7B
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fc:fe:5d:bb:e8:95:29:d2:2a:dc:40:54:a3:16:6d:68:2e:
97:42:b9:d8:4f:21:c7:4c:9f:7d:31:14:2e:64:3b:b1:58:2a:
ab:d2:51:6c:1a:7d:a1:32:b7:0e:53:93:27:79:96:76:46:10:
57:7b:c0:bd:68:92:2d:92:61:4c:17:02:62:f1:7e:42:67:05:
04:9f:99:23:9e:48:58:de:a6:0d:d0:37:b1:d1:93:0e:01:40:
45:f5:e2:2b:de:a0:de:f4:7b:d8:0b:83:a8:1e:3d:27:01:cd:
6a:19:18:a3:4a:02:41:e8:87:14:09:ff:cb:c2:b5:18:f0:83:
fa:8f:d9:67:63:14:34:55:2b:d1:39:57:74:f9:76:fb:c9:81:
a9:d9:90:c3:39:1a:f8:dd:9b:d4:83:66:fe:f3:31:8f:69:9f:
0b:3b:15:c2:c7:08:26:78:a7:b9:b5:9f:11:7d:7d:2e:59:ac:
12:ad:55:0d:47:69:e2:ac:91:81:f4:45:86:9b:4e:72:b5:5f:
21:8e:6a:06:af:7f:59:21:06:a0:a3:a9:e2:f0:61:dc:aa:7e:
24:2f:fc:a7:1c:15:e8:41:bb:32:02:f9:2e:42:6f:9e:df:0a:
39:bb:b2:a8:82:31:fe:79:dd:f1:9d:8e:50:b0:41:97:3e:c6:
92:1e:b8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:15:43 2026 by rpki-client