Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
File: apc35u85FOD8zAaQI76XGYuRN5E.mft (raw, json)
Hash identifier: INr7JxYxZGbzYb/flbmyGtWxaAmg5TOuSoBsZ5sXFTE=
Subject key identifier: 6D:39:86:A9:5A:03:0C:4F:38:C7:2B:E9:8C:94:CE:78:A4:5F:D9:B9
Authority key identifier: 6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
Certificate issuer: /CN=6a9737e6ef3914e0fccc069023be97198b913791
Certificate serial: 019D27049516266F80F81242B080E27A1B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:44 +0000
Manifest this update: Wed 25 Mar 2026 22:01:44 +0000
Manifest next update: Thu 26 Mar 2026 22:01:44 +0000
Files and hashes: 1: apc35u85FOD8zAaQI76XGYuRN5E.crl (hash: xIZce95PcUX/43XmgYDdT8MO3pT7y/OEpsopVTdNfgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:95:16:26:6f:80:f8:12:42:b0:80:e2:7a:1b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9737e6ef3914e0fccc069023be97198b913791
Validity
Not Before: Mar 25 22:01:44 2026 GMT
Not After : Mar 26 22:01:44 2026 GMT
Subject: CN=6d3986a95a030c4f38c72be98c94ce78a45fd9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:d1:a0:11:13:d2:34:32:8f:fb:c7:25:22:
a9:49:90:b5:ec:c1:a1:56:9c:77:d6:c2:b9:74:9c:
39:c7:93:35:25:01:a1:54:19:37:8a:c0:ea:63:68:
84:64:28:4f:7b:12:6b:14:49:c4:8d:81:0c:f1:e3:
a2:a0:56:94:2b:7e:ac:7f:74:c1:26:09:00:0f:08:
2c:24:a7:c8:72:10:a4:a8:d3:9b:56:bb:ee:72:69:
3d:5d:07:14:77:37:60:53:9e:95:12:d6:c2:9e:d5:
ce:87:ee:2c:65:af:00:c1:33:1c:f2:3e:3c:d5:21:
48:c8:e4:11:88:b9:12:b3:fd:73:ff:1a:a3:19:28:
89:e6:28:28:2a:7d:56:c4:c0:e6:03:c6:7e:b6:a2:
ba:3e:89:79:ab:a8:6e:c1:6c:50:7a:a9:a8:f9:34:
a5:40:dd:fd:2a:3c:d4:e3:4f:f3:1e:a8:f3:07:b4:
3f:4d:61:83:8c:f8:d9:b8:7e:bc:f6:e0:d5:5e:24:
d3:3e:fd:71:2d:1c:32:72:6f:85:aa:a3:a1:1e:9f:
5a:37:da:e6:13:38:83:9b:60:a6:b1:f5:88:88:b2:
4e:e4:21:81:34:18:5d:a2:5d:2c:09:08:d3:40:1f:
cf:11:19:82:8c:49:e5:da:b6:9e:8a:8b:1f:13:dc:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:39:86:A9:5A:03:0C:4F:38:C7:2B:E9:8C:94:CE:78:A4:5F:D9:B9
X509v3 Authority Key Identifier:
keyid:6A:97:37:E6:EF:39:14:E0:FC:CC:06:90:23:BE:97:19:8B:91:37:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apc35u85FOD8zAaQI76XGYuRN5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8438f5-6c9c-4703-9fe2-015fde45d0ea/1/apc35u85FOD8zAaQI76XGYuRN5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:5f:98:0f:58:f0:f3:43:2d:18:28:27:c1:39:2d:45:cc:ca:
e0:3a:85:2c:ee:d8:e0:a4:97:0b:51:56:49:b0:00:02:a7:a0:
02:5b:af:46:d4:f9:7b:b6:7c:45:cb:60:0f:3b:3d:46:b2:7f:
f2:8d:c1:f4:12:24:ee:49:cf:1a:43:a4:8f:2d:96:2d:02:43:
09:d8:d7:4c:0b:4d:e7:33:67:24:f8:99:1e:c7:4b:cb:f5:ce:
8e:13:3e:e9:8a:80:6f:e8:22:5b:ff:b5:ae:cd:27:04:f3:b8:
3b:da:c4:d3:60:39:80:45:1a:4e:4b:93:8b:44:2e:ec:67:d1:
90:79:61:6d:fb:d2:ef:ad:4e:d7:87:c2:7b:dd:38:71:37:2c:
54:43:49:40:01:ab:b9:5c:b4:90:a8:dd:86:af:10:9f:43:71:
b5:ad:62:63:23:db:2b:be:ad:f5:23:ca:7b:16:3b:6a:f6:dd:
f0:a8:2a:9f:83:1a:8a:ac:c5:ed:c1:a5:9b:81:e3:78:3d:3a:
89:ec:01:c3:b7:e8:4a:c2:ec:2e:d1:7b:cf:5d:f1:42:7f:f2:
f1:91:3d:3b:a6:ec:b0:d2:c0:15:93:d2:2b:34:d2:f5:13:10:
72:6c:6a:46:56:9e:19:54:b1:39:39:f2:ec:bc:89:39:f8:59:
db:81:71:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBJUWJm+A+BJCsIDiehtaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOTczN2U2ZWYzOTE0ZTBmY2NjMDY5MDIzYmU5NzE5OGI5
MTM3OTEwHhcNMjYwMzI1MjIwMTQ0WhcNMjYwMzI2MjIwMTQ0WjAzMTEwLwYDVQQD
Eyg2ZDM5ODZhOTVhMDMwYzRmMzhjNzJiZTk4Yzk0Y2U3OGE0NWZkOWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5jRoBET0jQyj/vHJSKpSZC17MGh
Vpx31sK5dJw5x5M1JQGhVBk3isDqY2iEZChPexJrFEnEjYEM8eOioFaUK36sf3TB
JgkADwgsJKfIchCkqNObVrvucmk9XQcUdzdgU56VEtbCntXOh+4sZa8AwTMc8j48
1SFIyOQRiLkSs/1z/xqjGSiJ5igoKn1WxMDmA8Z+tqK6Pol5q6huwWxQeqmo+TSl
QN39KjzU40/zHqjzB7Q/TWGDjPjZuH689uDVXiTTPv1xLRwycm+FqqOhHp9aN9rm
EziDm2CmsfWIiLJO5CGBNBhdol0sCQjTQB/PERmCjEnl2raeiosfE9xCwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG05hqlaAwxPOMcr6YyUznikX9m5MB8GA1UdIwQY
MBaAFGqXN+bvORTg/MwGkCO+lxmLkTeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84NDM4ZjUtNmM5Yy00NzAzLTlmZTIt
MDE1ZmRlNDVkMGVhLzEvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84NDM4ZjUtNmM5Yy00NzAzLTlmZTItMDE1ZmRlNDVkMGVh
LzEvYXBjMzV1ODVGT0Q4ekFhUUk3NlhHWXVSTjVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFF+YD1jw
80MtGCgnwTktRczK4DqFLO7Y4KSXC1FWSbAAAqegAluvRtT5e7Z8RctgDzs9RrJ/
8o3B9BIk7knPGkOkjy2WLQJDCdjXTAtN5zNnJPiZHsdLy/XOjhM+6YqAb+giW/+1
rs0nBPO4O9rE02A5gEUaTkuTi0Qu7GfRkHlhbfvS761O14fCe904cTcsVENJQAGr
uVy0kKjdhq8Qn0Nxta1iYyPbK76t9SPKexY7avbd8Kgqn4MaiqzF7cGlm4HjeD06
iewBw7foSsLsLtF7z13xQn/y8ZE9O6bssNLAFZPSKzTS9RMQcmxqRlaeGVSxOTny
7LyJOfhZ24Fxjg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:27 2026 by rpki-client