Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.mft
File: ApB0VYXC5Lw17zN6Nughte5dDDI.mft (raw, json)
Hash identifier: PPfQ4mPvD0yTLFxlOyXXJhK4oKlbdMgz5ELurbpHjN8=
Subject key identifier: 15:1B:61:7C:86:83:89:B5:D2:65:40:11:3B:28:A8:B0:FF:CB:4A:E9
Authority key identifier: 02:90:74:55:85:C2:E4:BC:35:EF:33:7A:36:E8:21:B5:EE:5D:0C:32
Certificate issuer: /CN=0290745585c2e4bc35ef337a36e821b5ee5d0c32
Certificate serial: 01A0CDECA400C094BDD8D55C3234D36BFD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApB0VYXC5Lw17zN6Nughte5dDDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.mft
Manifest number: AE
Signing time: Wed 23 Sep 2026 11:00:32 +0000
Manifest this update: Wed 23 Sep 2026 11:00:32 +0000
Manifest next update: Thu 24 Sep 2026 11:00:32 +0000
Files and hashes: 1: ApB0VYXC5Lw17zN6Nughte5dDDI.crl (hash: pUGSPL+GJCNQoy6SlZEA3X4Dc1B/pBGetf0Uvf6Ms5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ApB0VYXC5Lw17zN6Nughte5dDDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:a4:00:c0:94:bd:d8:d5:5c:32:34:d3:6b:fd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0290745585c2e4bc35ef337a36e821b5ee5d0c32
Validity
Not Before: Sep 23 11:00:32 2026 GMT
Not After : Sep 24 11:00:32 2026 GMT
Subject: CN=151b617c868389b5d26540113b28a8b0ffcb4ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:9f:ee:48:d5:7c:51:33:d9:5f:f7:de:e6:
e7:78:0a:02:81:de:ff:a9:1a:33:98:17:7b:5e:63:
cb:fe:39:74:2f:e7:2e:9a:5d:95:7e:98:b1:9c:9a:
3e:44:ab:50:8a:26:fe:ca:1d:9e:cf:d6:ee:b9:cd:
1e:f1:2b:b7:39:61:0d:e9:06:ea:54:54:a6:40:b2:
da:40:09:24:29:b3:04:8e:6e:0a:fe:b9:2a:c2:91:
43:1c:85:bb:d3:98:e7:0f:87:d7:13:0c:55:0c:a2:
0c:3a:a9:82:90:89:1f:8d:13:96:5d:7d:a8:aa:ad:
0b:26:f4:8d:8a:62:81:a7:fd:d2:49:f8:fd:ae:b9:
53:22:25:45:ba:c9:fc:aa:7a:21:eb:90:52:24:90:
5a:11:fc:69:ef:56:87:52:f4:64:35:91:1f:df:77:
91:b1:67:72:59:32:87:cd:0b:3b:f5:94:db:a2:cd:
a4:c9:48:f0:a3:98:8b:e3:41:67:5a:d3:7d:10:2e:
7e:38:eb:31:80:1e:d0:40:cf:ab:27:c8:d8:05:2c:
12:58:02:b2:57:34:5e:47:d0:12:05:d6:f1:f3:6b:
1d:b6:e2:b3:77:b4:02:12:89:9b:f6:3b:20:d8:f3:
78:b3:a5:1a:f2:17:d6:b9:7f:6b:6b:25:7a:5b:a9:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1B:61:7C:86:83:89:B5:D2:65:40:11:3B:28:A8:B0:FF:CB:4A:E9
X509v3 Authority Key Identifier:
keyid:02:90:74:55:85:C2:E4:BC:35:EF:33:7A:36:E8:21:B5:EE:5D:0C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApB0VYXC5Lw17zN6Nughte5dDDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:77:8c:66:5e:54:68:5c:8b:61:08:b7:a8:df:85:ba:30:c6:
3a:f3:71:10:fd:10:10:e6:42:4f:a0:7b:91:0d:f0:89:64:fe:
0f:63:fd:84:9c:6e:a7:ed:bd:ac:18:16:d3:36:99:e3:d5:2c:
0f:68:ab:dc:a3:e5:a2:c4:f5:67:57:75:7e:5e:c0:6e:01:12:
4f:45:bb:88:0a:11:f1:f4:8d:a4:45:37:df:ad:d9:92:ea:03:
78:61:fa:69:0c:af:cf:6f:1f:27:a7:3f:21:63:02:df:4c:29:
b7:9e:39:b2:25:b1:08:e6:09:95:16:d8:97:2c:6f:45:5e:e0:
b1:f8:31:cd:2f:73:13:91:d8:7b:d4:7a:77:12:22:92:41:57:
4c:55:58:e1:b4:84:0a:29:25:e9:13:cc:64:23:6a:11:8c:5c:
35:98:fa:b9:28:9a:8a:00:c5:c6:85:10:e9:d6:04:c0:90:f5:
95:8f:df:de:05:e6:38:4f:11:01:5e:90:c3:8d:14:5b:e1:5e:
15:c6:01:62:3d:9e:70:4d:02:0f:33:5a:1b:29:eb:f0:77:af:
b0:bf:27:a8:3a:21:99:9a:27:2f:79:55:3e:b7:d5:bc:f7:f9:
a3:32:ea:3b:3b:a7:4d:ca:ec:1c:7d:c4:bb:b5:99:b0:9c:91:
af:de:54:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:11:39 2026 by rpki-client