Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
File: ApMPjGiMBNF0M6K5xySbxiW84xY.mft (raw, json)
Hash identifier: NCSBkAPuILaRvBi3dX9uN4kJUMgCDtgWu1HDE+rVzIc=
Subject key identifier: BA:0F:89:E4:7D:0F:4E:97:11:B8:C6:00:1C:A0:47:45:AB:53:8B:B1
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Certificate issuer: /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial: 01A1CAB2162FE9D5FCB73FD1EFEEC2CC541D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
Manifest number: 1AF3
Signing time: Wed 11 Nov 2026 13:00:31 +0000
Manifest this update: Wed 11 Nov 2026 13:00:31 +0000
Manifest next update: Thu 12 Nov 2026 13:00:31 +0000
Files and hashes: 1: 14ynEoJXV6cGESEueCUwh87gUXg.roa (hash: JZTxhgcbHYTEiHxAG17P9Cv6dpEw0XIS5Wi97I1GPsQ=)
2: 2ZltyCHDVI3o8f35qb479SDHuLI.roa (hash: zdh1zWwx2K8ElbVNeH4pG3Lkf0uwVj+CGjtuVDmvtEY=)
3: 4KH5oPqlph7SdgPsUcEksiUn8vI.roa (hash: lkUeA2Dm3n5cyMOdG1B7Cdcwz6ExvSxL9MH87e90v8c=)
4: ApMPjGiMBNF0M6K5xySbxiW84xY.crl (hash: bMj1tYeWeBGz61e8q1HDqDhiXsVxh8JFEIJdzT1USq0=)
5: MuW1vBLnQsOOOxKeFnBgdQx4Agc.roa (hash: 9v3FzvgOk0G6DAUkUFkW2Culw+ELff9ofWV2w3FNrHo=)
6: XgltObmtq_kTXFtSsqSj6GE9A_Y.asa (hash: BxUp3/b59izdMG8/cokFyVBT6gN6JuMgJGTEf42xwAc=)
7: ZRIHFb09Mm1K55dH2vncQglBaXI.roa (hash: WFUjrCrkcCkKZQJsNV3ho4q8qDbHnlkrC4J5Z75DuBs=)
8: oIK2Z-WZccXvLr2RG9gLfuLDl6A.asa (hash: mE+KHmijj5W8A3iZKivxhsc/epFskqz+kgA1sCsCW3M=)
9: wWTX7M2skLtK6c09950us11Gw7s.roa (hash: dUde1BEXiGue0SJ6on321asNs1mJmZR7Exs/hdG2AFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:b2:16:2f:e9:d5:fc:b7:3f:d1:ef:ee:c2:cc:54:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
Validity
Not Before: Nov 11 13:00:31 2026 GMT
Not After : Nov 12 13:00:31 2026 GMT
Subject: CN=ba0f89e47d0f4e9711b8c6001ca04745ab538bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:e4:16:62:55:00:97:ab:58:f8:cb:e1:82:
ca:50:f6:c7:c9:37:99:4d:11:e8:98:74:8b:e8:3f:
84:80:55:0e:bc:36:96:cf:53:7f:f7:c5:34:2f:76:
d8:6b:8a:a4:aa:9b:77:03:57:d2:5f:a0:cd:d5:15:
c8:43:f4:0e:66:78:ca:0d:6a:f1:f8:98:bd:f6:35:
42:76:1d:8d:1c:80:4b:80:f2:07:aa:93:be:d2:67:
d5:4f:5e:37:5c:de:be:7c:50:33:f9:63:77:00:34:
5a:d0:d0:5e:c3:71:06:bf:a6:80:d6:b4:83:ed:d0:
83:2f:36:72:32:38:16:b6:2d:13:fb:81:26:0c:82:
54:e2:c4:46:5d:7c:1c:0b:c6:38:59:1b:f6:5f:96:
50:c3:f1:26:59:ed:28:c8:da:8c:db:53:c5:fc:77:
04:07:36:e2:be:ab:c8:e2:a6:74:e3:89:28:41:a7:
dc:66:05:cd:88:32:09:cc:ed:44:51:51:1f:dc:a8:
c9:c0:0c:f2:a3:53:7c:7e:16:7f:2d:cd:e1:a2:53:
2e:f2:5d:19:d1:d7:07:eb:85:87:d8:6f:c8:c0:6b:
49:28:31:83:eb:62:41:43:70:47:bd:cd:52:22:75:
4d:eb:43:88:b8:56:1c:a4:78:a4:78:1c:4c:50:e3:
e9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0F:89:E4:7D:0F:4E:97:11:B8:C6:00:1C:A0:47:45:AB:53:8B:B1
X509v3 Authority Key Identifier:
keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:13:19:83:ea:70:01:84:a7:12:86:ba:24:1e:60:a7:96:d0:
50:92:45:9c:26:64:2c:a3:f9:f6:27:78:d8:8a:e5:6d:b1:e0:
c1:1a:01:e2:05:ee:14:19:8d:e7:ac:df:70:c6:06:04:79:b1:
38:fd:62:ab:67:a2:68:09:00:b5:e3:e7:20:e9:bd:f9:94:dc:
18:03:ac:38:28:1a:40:ed:ec:c5:c8:ed:5c:e4:13:49:f7:cb:
fa:b1:1e:e0:f7:13:ac:5a:7f:e9:cf:ce:bd:3b:9c:8f:c7:e8:
bd:6d:cd:08:8a:21:9b:79:75:94:97:a1:45:c0:18:55:f1:d8:
1b:0d:40:7a:e3:4e:1f:6e:20:64:07:f0:58:cd:05:fc:16:77:
f2:0c:66:b0:87:54:55:28:58:1a:bb:1f:66:67:0c:ae:87:60:
ce:7f:ed:aa:90:d6:7d:cf:1b:c3:a0:e7:ee:78:0a:cd:4e:e8:
7a:ac:7b:ab:46:6d:e5:37:de:0c:58:2d:ee:bc:84:d5:ca:73:
c4:c7:f1:66:2f:43:12:1a:a4:fd:fa:52:b7:02:d5:ca:91:57:
67:1a:e5:90:48:a8:1e:88:d0:21:d7:b5:e2:41:e8:9c:71:63:
1f:2b:c0:0d:99:9c:f9:3d:5a:a0:c9:bd:26:0f:21:a1:f7:c4:
25:62:63:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHKshYv6dX8tz/R7+7CzFQdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOTMwZjhjNjg4YzA0ZDE3NDMzYTJiOWM3MjQ5YmM2MjVi
Y2UzMTYwHhcNMjYxMTExMTMwMDMxWhcNMjYxMTEyMTMwMDMxWjAzMTEwLwYDVQQD
EyhiYTBmODllNDdkMGY0ZTk3MTFiOGM2MDAxY2EwNDc0NWFiNTM4YmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxXkFmJVAJerWPjL4YLKUPbHyTeZ
TRHomHSL6D+EgFUOvDaWz1N/98U0L3bYa4qkqpt3A1fSX6DN1RXIQ/QOZnjKDWrx
+Ji99jVCdh2NHIBLgPIHqpO+0mfVT143XN6+fFAz+WN3ADRa0NBew3EGv6aA1rSD
7dCDLzZyMjgWti0T+4EmDIJU4sRGXXwcC8Y4WRv2X5ZQw/EmWe0oyNqM21PF/HcE
BzbivqvI4qZ044koQafcZgXNiDIJzO1EUVEf3KjJwAzyo1N8fhZ/Lc3holMu8l0Z
0dcH64WH2G/IwGtJKDGD62JBQ3BHvc1SInVN60OIuFYcpHikeBxMUOPpUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoPieR9D06XEbjGABygR0WrU4uxMB8GA1UdIwQY
MBaAFAKTD4xojATRdDOiucckm8YlvOMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXBNUGpHaU1CTkYwTTZLNXh5U2J4aVc4NHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iMjA2NGItYmUwOS00M2Q5LWIwODct
YTRlOTkxYjBmMTQ0LzEvQXBNUGpHaU1CTkYwTTZLNXh5U2J4aVc4NHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9iMjA2NGItYmUwOS00M2Q5LWIwODctYTRlOTkxYjBmMTQ0
LzEvQXBNUGpHaU1CTkYwTTZLNXh5U2J4aVc4NHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRMZg+pw
AYSnEoa6JB5gp5bQUJJFnCZkLKP59id42IrlbbHgwRoB4gXuFBmN56zfcMYGBHmx
OP1iq2eiaAkAtePnIOm9+ZTcGAOsOCgaQO3sxcjtXOQTSffL+rEe4PcTrFp/6c/O
vTucj8fovW3NCIohm3l1lJehRcAYVfHYGw1AeuNOH24gZAfwWM0F/BZ38gxmsIdU
VShYGrsfZmcMrodgzn/tqpDWfc8bw6Dn7ngKzU7oeqx7q0Zt5TfeDFgt7ryE1cpz
xMfxZi9DEhqk/fpStwLVypFXZxrlkEioHojQIde14kHonHFjHyvADZmc+T1aoMm9
Jg8hoffEJWJj9g==
-----END CERTIFICATE-----
Generated at Wed Nov 11 19:44:53 2026 by rpki-client