Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.mft
File: ApB0VYXC5Lw17zN6Nughte5dDDI.mft (raw, json)
Hash identifier: fCqVaE+cH4g37AYT2xeZfsRyLcbsWRGilvdNbqKzQxA=
Subject key identifier: 3F:A9:61:22:5F:14:26:B0:60:4E:52:DA:36:AA:6D:69:8B:22:04:C6
Authority key identifier: 02:90:74:55:85:C2:E4:BC:35:EF:33:7A:36:E8:21:B5:EE:5D:0C:32
Certificate issuer: /CN=0290745585c2e4bc35ef337a36e821b5ee5d0c32
Certificate serial: 019F8F4783DCC639FDC8ADA2C5D01A1D8846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApB0VYXC5Lw17zN6Nughte5dDDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.mft
Manifest number: 09
Signing time: Thu 23 Jul 2026 14:00:56 +0000
Manifest this update: Thu 23 Jul 2026 14:00:56 +0000
Manifest next update: Fri 24 Jul 2026 14:00:56 +0000
Files and hashes: 1: ApB0VYXC5Lw17zN6Nughte5dDDI.crl (hash: 36IvV5bQMToO3v73URsm7cjG/W1BxxmPPAFTHVA4A7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ApB0VYXC5Lw17zN6Nughte5dDDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:83:dc:c6:39:fd:c8:ad:a2:c5:d0:1a:1d:88:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0290745585c2e4bc35ef337a36e821b5ee5d0c32
Validity
Not Before: Jul 23 14:00:56 2026 GMT
Not After : Jul 24 14:00:56 2026 GMT
Subject: CN=3fa961225f1426b0604e52da36aa6d698b2204c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:02:f2:e3:74:34:1b:d9:6b:8f:d0:97:6f:
b2:de:71:b5:28:dc:d9:61:bf:0d:ed:b5:92:97:9a:
98:4f:5d:10:2f:c1:b4:7d:c2:0c:23:5e:79:eb:91:
16:9d:4b:fe:f3:d8:d3:1d:e6:95:3f:e3:50:39:34:
cc:12:cd:06:2b:68:a5:12:3e:53:b0:0f:94:91:c0:
46:60:21:05:5a:d0:d0:cb:06:39:81:32:a8:8f:4f:
24:b7:7b:01:85:3b:32:4e:1c:62:c2:19:95:ad:f4:
9b:a6:05:e5:37:32:ac:e1:b1:50:59:40:9e:80:42:
60:c2:a0:c9:8c:26:6f:ce:9b:22:ba:26:eb:a0:68:
1f:93:1c:78:09:17:0e:3d:1f:5d:57:b7:b7:5c:0c:
34:94:5e:b1:b9:8f:6b:f3:4c:be:5f:aa:ea:0b:b0:
5b:6a:44:b0:f9:97:b2:35:64:dc:ae:0e:76:a7:6c:
7b:7b:1d:3a:e8:ff:f8:6d:9a:b1:e9:0a:c4:f5:85:
bc:f0:9b:0a:b4:2d:eb:2d:c5:01:f6:6e:2d:3a:a5:
20:8b:3c:61:d2:f8:b9:3e:07:ad:58:e9:7e:32:a2:
70:ce:5a:c4:4d:fc:24:95:2d:af:a1:18:ab:12:7c:
2f:e8:e3:04:dd:30:6d:be:a4:98:88:64:27:27:22:
37:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A9:61:22:5F:14:26:B0:60:4E:52:DA:36:AA:6D:69:8B:22:04:C6
X509v3 Authority Key Identifier:
keyid:02:90:74:55:85:C2:E4:BC:35:EF:33:7A:36:E8:21:B5:EE:5D:0C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApB0VYXC5Lw17zN6Nughte5dDDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2a79a3-b381-4cc7-bb47-b0c76d82dcb8/1/ApB0VYXC5Lw17zN6Nughte5dDDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:e5:21:52:99:ad:72:1b:e2:e6:72:18:41:37:6a:fe:03:e7:
2f:b9:f7:d1:83:68:25:ce:a7:c3:16:f3:ae:be:83:7f:a1:4b:
77:e5:46:a7:43:b1:db:0e:ce:50:78:99:0f:ae:fe:b1:4a:53:
44:d7:f4:a8:52:e0:2c:c9:b1:cb:27:89:8b:0e:d7:87:9f:0a:
a1:7a:23:7d:e3:58:3d:d0:37:a2:86:f7:a6:0a:0e:59:d9:f1:
01:1c:b8:26:55:bb:ba:2a:09:89:2b:34:b5:b9:9d:4c:ce:f8:
15:7f:27:a6:e7:38:21:7b:cb:4b:50:55:ea:76:bf:20:68:fb:
90:db:a8:94:44:4b:6f:60:86:45:22:b1:00:72:69:2f:bd:bb:
b8:da:11:26:c6:5f:cc:55:cf:42:7c:00:1b:2f:da:8c:43:45:
86:5e:ce:b8:f5:ac:68:d9:30:b2:ef:4a:f5:b8:1e:42:27:f6:
49:cd:cc:68:80:5d:58:1f:b9:f2:1d:b4:6b:16:5b:15:01:f6:
3d:93:af:19:40:e8:3e:78:42:1a:06:74:9e:09:f2:4c:f7:4a:
90:19:dc:19:fd:ee:8e:f6:05:b1:ec:f2:81:fa:05:47:c3:49:
4c:5d:71:ef:d6:48:7d:c7:a9:56:dd:42:1a:81:bc:f2:4b:78:
0d:ba:13:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:32 2026 by rpki-client