Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
File: Ap6YM29qbMnbzx7LSJVYDwlOPis.mft (raw, json)
Hash identifier: rXzeiE2s7pYJJZDKIo0EWeQrohqV/IhZF9VfIhj5Gj0=
Subject key identifier: C0:5E:20:8A:12:2B:75:CC:1C:34:DC:97:2D:45:AC:00:A1:39:41:52
Authority key identifier: 02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
Certificate issuer: /CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Certificate serial: 019E1D906AAD454B761A1BA737CE897F6E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
Manifest number: 0FF7
Signing time: Tue 12 May 2026 19:01:04 +0000
Manifest this update: Tue 12 May 2026 19:01:04 +0000
Manifest next update: Wed 13 May 2026 19:01:04 +0000
Files and hashes: 1: Ap6YM29qbMnbzx7LSJVYDwlOPis.crl (hash: FVTPfi5Nbmg+uUN/PO3jYJkeyoJyoXWKK48cZRLYQv4=)
2: p_4t5r1LIVM__Crw-eZAOlvObAY.roa (hash: 5BvLVMvi5NBU8nHQD8cDw6h+veyzG8axQK09AoRrWAs=)
3: zBYtGjJx0SDgAamEQM20aTAainM.roa (hash: SpCq7G69+l1y5Xw0RtXWj3cYKHjMPmny1b0+UtkUplE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:6a:ad:45:4b:76:1a:1b:a7:37:ce:89:7f:6e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029e98336f6a6cc9dbcf1ecb4895580f094e3e2b
Validity
Not Before: May 12 19:01:04 2026 GMT
Not After : May 13 19:01:04 2026 GMT
Subject: CN=c05e208a122b75cc1c34dc972d45ac00a1394152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:39:17:8f:62:e0:b5:10:7a:6b:1e:3b:06:6a:
9e:66:16:1e:39:af:03:09:18:d3:9f:03:bd:c1:46:
d6:7d:a2:7f:97:a8:65:fa:f4:67:28:a2:34:e2:c5:
ff:8b:a8:a9:52:41:ec:38:40:81:05:1a:8c:71:5d:
ab:ad:e2:8d:92:93:18:7b:ef:2f:db:15:5d:a5:92:
5d:21:b8:f4:cc:08:b6:17:46:ef:4e:87:ef:bb:be:
1d:6a:7b:32:39:af:8f:a0:b2:b1:39:67:9f:e6:34:
1e:5b:7b:8d:28:e2:09:9b:f0:8a:f2:6a:c3:d2:20:
5b:56:a9:d7:96:fd:51:52:e8:76:f2:32:aa:26:65:
95:31:19:e5:15:a4:39:a1:ba:8c:8b:5d:54:03:32:
52:b3:81:57:55:86:40:3c:58:ea:79:b9:6c:a8:7c:
37:6c:12:f9:7d:30:40:03:a7:aa:af:b9:a3:08:f1:
b4:d2:ad:ad:61:66:47:ca:29:58:64:c4:41:c3:73:
b3:18:62:bb:4c:70:a6:e1:bc:39:49:32:c9:02:8d:
ed:4c:f9:8a:67:91:73:76:8b:8b:60:01:3f:77:5e:
6c:70:ec:10:09:44:58:51:61:60:0f:0c:72:33:f3:
8c:eb:4b:fe:53:8e:1d:e0:4f:2b:21:40:0a:e4:5c:
f7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5E:20:8A:12:2B:75:CC:1C:34:DC:97:2D:45:AC:00:A1:39:41:52
X509v3 Authority Key Identifier:
keyid:02:9E:98:33:6F:6A:6C:C9:DB:CF:1E:CB:48:95:58:0F:09:4E:3E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap6YM29qbMnbzx7LSJVYDwlOPis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fbc141-99fc-4f83-b585-0fe6f55db3f6/1/Ap6YM29qbMnbzx7LSJVYDwlOPis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:9e:ac:36:55:ab:bf:f4:b0:28:c8:55:de:c9:cf:b2:a2:2e:
08:c7:5f:6e:e2:b5:f3:5e:50:33:2f:f0:79:53:b9:fd:b1:48:
0d:c1:23:b7:47:fc:76:06:7a:68:29:88:c2:7b:20:1d:fa:4c:
a3:85:71:62:0d:3d:a5:be:f3:2b:92:10:d1:3b:c0:ac:f7:1c:
de:83:08:17:ac:9c:dd:0d:b9:df:17:0b:50:be:c3:73:7b:65:
ca:4e:1c:89:4c:83:ca:e7:ce:ef:2d:ee:d3:a0:be:31:58:82:
13:34:dc:fd:51:a6:71:30:bb:66:a9:2b:52:ef:94:5b:20:bb:
18:e7:43:8b:05:d6:9f:a6:b0:de:df:60:38:f1:91:55:25:16:
4a:d4:85:76:2b:5a:de:bb:9b:ca:9f:ab:5c:35:1c:7e:a0:02:
d4:b1:26:2e:3d:00:34:69:5f:e2:99:30:a4:ee:1b:4f:c8:6d:
98:a3:76:1f:28:fa:12:b6:7b:08:6a:f2:dc:3f:1f:26:0e:63:
e4:91:d4:ca:4b:67:44:38:7c:c0:45:0b:02:83:d0:c2:6f:d9:
31:42:68:ae:56:e9:06:0d:3b:e1:a2:0e:77:18:bc:96:e4:e5:
5b:88:2c:5b:75:8d:28:8e:53:5c:5b:a6:53:c2:e5:e4:38:ff:
9b:76:6c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:23:10 2026 by rpki-client