Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: bRdcKpBhFdvc1CLy/qLnlXmuBHXGQtJERWVzZ90jfA4=
Subject key identifier: 33:68:12:21:39:47:69:EA:53:58:42:E0:8C:0B:15:FA:6C:21:00:55
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 019E1CB4694117133F9B2AA5B525DB6EB987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 1897
Signing time: Tue 12 May 2026 15:00:45 +0000
Manifest this update: Tue 12 May 2026 15:00:45 +0000
Manifest next update: Wed 13 May 2026 15:00:45 +0000
Files and hashes: 1: L0pkYoARJXEFc-gB4c5J8VXY3Mg.roa (hash: 1faOAUcr0h7qDHU3+7FacAnxC8gdfFMLQm2JVMNKznA=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: VFe67tQr+w1/VOlqUC02ir593qfGq9TJCdV+NBAXxP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:69:41:17:13:3f:9b:2a:a5:b5:25:db:6e:b9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: May 12 15:00:45 2026 GMT
Not After : May 13 15:00:45 2026 GMT
Subject: CN=33681221394769ea535842e08c0b15fa6c210055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:18:db:37:b9:63:1a:6d:94:c0:34:4c:bd:13:
0b:f5:75:fd:96:69:bc:aa:4c:dc:43:ba:75:fd:22:
81:4f:d8:b6:22:70:9f:56:09:2b:25:14:df:b9:33:
80:b6:b0:df:3b:28:c3:a0:48:41:eb:b1:aa:4c:64:
d1:fe:56:51:da:bc:17:37:f0:f8:5e:9e:9e:a9:22:
a7:db:c3:52:e1:e6:b0:b0:5f:7e:48:44:bf:41:37:
0e:93:fb:41:34:00:96:0c:1c:e9:3b:89:12:f0:a2:
2f:45:37:de:5e:7f:2e:3d:1e:a9:ed:69:01:28:47:
98:42:06:26:79:0c:da:06:d8:1b:60:2b:a3:05:f5:
50:2c:e3:b2:46:7e:c7:d4:90:4e:be:96:95:0c:f6:
6d:63:b4:a3:1f:f9:18:86:1f:a2:f4:3a:4a:f4:40:
d2:f4:fc:1c:ca:53:5b:0b:26:21:59:aa:08:b4:dd:
c7:fe:fc:b6:de:e1:aa:92:6a:06:72:af:45:71:ea:
5f:d4:90:b0:dc:25:b9:98:bf:64:22:15:df:05:75:
57:0e:10:16:37:f1:e5:ea:73:a4:be:88:83:c4:bc:
7e:e2:0d:2c:a9:e6:10:84:6f:4e:14:b5:d8:47:67:
bd:70:65:eb:e5:d8:de:7e:05:fb:19:9f:c3:17:a3:
ae:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:68:12:21:39:47:69:EA:53:58:42:E0:8C:0B:15:FA:6C:21:00:55
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:24:65:fb:c6:e5:e8:7b:ff:4c:52:c0:ca:06:c7:16:74:7d:
8a:5d:4d:98:df:a3:85:17:d9:02:f5:b9:9b:da:92:08:95:35:
f1:96:e3:26:a5:5f:53:21:e3:50:0a:1a:b4:cb:a4:e8:a5:c7:
d7:8a:a5:b0:c0:42:ce:81:f5:6b:57:3c:bc:19:df:77:11:de:
f4:c0:07:89:46:b1:9d:0f:09:c8:91:9b:94:c0:d0:7e:0b:67:
de:e8:87:aa:2d:74:09:10:81:5d:f1:33:d5:74:18:e4:de:7c:
ff:60:53:3d:ed:3f:60:91:35:09:d4:46:a7:f4:e9:11:f1:76:
5d:0c:bb:d4:80:0f:8b:8f:83:e5:8f:e2:d9:5b:7d:de:b1:ed:
bb:73:fe:d3:09:e2:3f:33:da:bc:31:8e:a3:7d:44:eb:24:d9:
2e:11:ab:b1:b3:45:23:b6:28:f7:01:e9:9b:a0:e8:93:d5:ee:
69:37:4a:80:b0:53:ef:5a:dc:5b:e1:b7:9f:9f:91:03:d8:82:
f7:74:26:ad:15:e6:b9:f1:a4:50:6d:fb:a9:b2:26:c5:6a:f0:
75:0d:3a:97:b0:05:81:0d:7b:63:7a:e7:a3:49:a6:06:f9:68:
8e:18:2d:77:72:50:32:f6:63:4c:94:85:ec:e7:0c:8f:fc:33:
2f:7c:a3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:40 2026 by rpki-client