Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
File: ApMPjGiMBNF0M6K5xySbxiW84xY.mft (raw, json)
Hash identifier: 5XXptvjacnzMNdhkL2Pd2o8rh7OxO7X4F10bSkFoj5Q=
Subject key identifier: D8:3F:A0:14:4A:2F:98:6D:6A:11:81:D8:96:7E:85:C4:AC:0A:34:14
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Certificate issuer: /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial: 01A0C9D91C90E764E866B064A403936329E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
Manifest number: 1A6E
Signing time: Tue 22 Sep 2026 16:00:44 +0000
Manifest this update: Tue 22 Sep 2026 16:00:44 +0000
Manifest next update: Wed 23 Sep 2026 16:00:44 +0000
Files and hashes: 1: 14ynEoJXV6cGESEueCUwh87gUXg.roa (hash: JZTxhgcbHYTEiHxAG17P9Cv6dpEw0XIS5Wi97I1GPsQ=)
2: 2ZltyCHDVI3o8f35qb479SDHuLI.roa (hash: zdh1zWwx2K8ElbVNeH4pG3Lkf0uwVj+CGjtuVDmvtEY=)
3: 4KH5oPqlph7SdgPsUcEksiUn8vI.roa (hash: lkUeA2Dm3n5cyMOdG1B7Cdcwz6ExvSxL9MH87e90v8c=)
4: ApMPjGiMBNF0M6K5xySbxiW84xY.crl (hash: CWnQ9NKSZjAoHxIS8vmSr6yCQcSUHG7m3HWlE6D9AIA=)
5: MuW1vBLnQsOOOxKeFnBgdQx4Agc.roa (hash: 9v3FzvgOk0G6DAUkUFkW2Culw+ELff9ofWV2w3FNrHo=)
6: XgltObmtq_kTXFtSsqSj6GE9A_Y.asa (hash: BxUp3/b59izdMG8/cokFyVBT6gN6JuMgJGTEf42xwAc=)
7: ZRIHFb09Mm1K55dH2vncQglBaXI.roa (hash: WFUjrCrkcCkKZQJsNV3ho4q8qDbHnlkrC4J5Z75DuBs=)
8: oIK2Z-WZccXvLr2RG9gLfuLDl6A.asa (hash: mE+KHmijj5W8A3iZKivxhsc/epFskqz+kgA1sCsCW3M=)
9: wWTX7M2skLtK6c09950us11Gw7s.roa (hash: dUde1BEXiGue0SJ6on321asNs1mJmZR7Exs/hdG2AFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:1c:90:e7:64:e8:66:b0:64:a4:03:93:63:29:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
Validity
Not Before: Sep 22 16:00:44 2026 GMT
Not After : Sep 23 16:00:44 2026 GMT
Subject: CN=d83fa0144a2f986d6a1181d8967e85c4ac0a3414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:e4:bb:90:af:24:7a:4d:d6:27:c8:55:30:
38:ee:5d:6a:90:2c:1e:eb:21:26:b1:9f:bc:48:54:
d3:46:17:f9:19:62:de:b3:81:0e:a6:f7:08:20:5e:
ba:90:54:23:53:c1:99:c7:22:8f:8d:29:9c:5e:32:
71:cc:87:9d:aa:af:32:9a:7a:85:fe:1a:c9:6d:45:
8c:b9:f0:4d:85:f7:ab:ad:78:dc:e4:3d:49:21:50:
1e:1d:eb:85:43:f0:40:4c:a7:99:fd:ca:3a:85:7c:
d8:d0:e2:63:30:22:a8:b6:5b:48:c9:ad:1b:d9:20:
a3:76:0a:6a:3d:d0:19:f0:74:1d:39:d7:5d:5e:10:
d7:69:db:63:de:3b:2d:74:21:2e:86:fd:13:64:ee:
e8:3e:c3:f1:e4:ee:37:d6:de:e8:d4:bf:ea:ae:c2:
d1:34:4f:92:bc:7d:86:48:5f:18:c7:6d:44:68:c3:
6a:7e:a4:9b:9e:14:0c:df:70:14:85:a6:27:20:1a:
ab:85:d9:ac:c7:7c:53:4e:43:0b:7a:8f:ca:e3:09:
43:af:c9:0e:95:aa:2c:90:36:bd:be:8b:c6:3c:85:
79:9f:66:3a:2c:0e:bf:d3:3f:f2:a2:9b:33:09:8b:
e5:41:da:a9:95:45:18:65:b1:8b:06:c0:b2:60:40:
f4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3F:A0:14:4A:2F:98:6D:6A:11:81:D8:96:7E:85:C4:AC:0A:34:14
X509v3 Authority Key Identifier:
keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f3:fe:f7:60:88:f0:38:02:13:bb:a3:ac:1f:44:75:92:77:
8e:45:b9:30:7f:ca:3b:79:cc:24:6f:42:82:c0:7a:48:e9:df:
1e:ec:d1:72:57:ea:c5:0a:e9:a6:ea:f3:07:9a:7b:1d:f9:02:
45:8c:d4:be:da:19:98:0b:0f:b0:a8:66:3b:a6:9c:dd:4b:af:
d9:8d:99:e2:61:49:7b:a4:1b:67:83:cc:1f:b1:45:ea:48:67:
9f:ad:b0:fa:85:1f:cd:fc:18:67:70:d1:5f:c9:2a:38:1d:40:
ab:52:2a:4c:90:8d:80:11:36:f9:c6:0f:9a:70:18:90:bb:17:
0a:29:7e:d6:78:bc:08:c6:dc:ed:d1:3d:26:f1:64:e7:2d:d5:
27:e1:a0:39:04:ba:51:f4:dc:35:2c:d1:a0:af:72:ef:f5:bd:
98:eb:c6:b3:b2:66:5f:73:77:06:dd:66:1d:64:d7:0f:7c:61:
c9:db:2c:f5:27:8c:f5:54:03:aa:2a:00:a9:7d:79:bb:eb:d5:
92:72:b1:af:ba:74:8f:3f:9d:19:ed:fa:26:6a:09:78:60:a3:
be:45:fa:dc:cb:92:44:5e:8e:f5:40:9a:47:60:fe:70:84:bc:
19:48:0b:06:bf:c8:c0:05:e5:f5:61:4e:d2:16:5c:07:23:b2:
f9:da:ac:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:07:46 2026 by rpki-client