Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
File: apN9la67vmK5DyTepNZjFwpmWew.mft (raw, json)
Hash identifier: qHYxbMASMXGLKFa86gwqcu9iemSExn63SFrVkL3157M=
Subject key identifier: 10:CA:0A:64:AA:89:42:D1:A5:D8:0E:34:A1:09:EE:67:A2:46:F0:09
Authority key identifier: 6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
Certificate issuer: /CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Certificate serial: 019D273ADA943FF79420350104DAF1D21FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
Manifest number: 0F55
Signing time: Wed 25 Mar 2026 23:01:01 +0000
Manifest this update: Wed 25 Mar 2026 23:01:01 +0000
Manifest next update: Thu 26 Mar 2026 23:01:01 +0000
Files and hashes: 1: apN9la67vmK5DyTepNZjFwpmWew.crl (hash: Urj9f/m3OBFbSoMXDOzuAIpuAB7eQ/nqr8BY+kBUnoQ=)
2: atbvOkPcslJHbkU3uvvlUOmO5QA.roa (hash: m8lm+LEVDg93zlIOjeA/ZuskWIypJuSv0WG7IFYzhxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:da:94:3f:f7:94:20:35:01:04:da:f1:d2:1f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Validity
Not Before: Mar 25 23:01:01 2026 GMT
Not After : Mar 26 23:01:01 2026 GMT
Subject: CN=10ca0a64aa8942d1a5d80e34a109ee67a246f009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6d:4b:ee:38:5e:c7:69:07:c2:1e:19:92:87:
64:a0:b2:70:fd:87:08:15:2c:0a:bb:f6:06:c2:67:
0a:25:f3:bf:c6:62:de:3d:69:51:ee:dd:37:f0:97:
1a:54:76:29:74:f3:31:76:1f:1e:29:d4:e5:74:22:
95:a7:4d:0c:32:80:b1:04:42:95:71:f4:4a:8c:76:
bc:0e:49:7c:1a:6b:ba:64:f6:0a:88:47:20:22:4c:
08:9b:5a:47:ed:0b:93:5a:82:e2:df:9e:89:25:70:
a2:95:20:8c:59:4d:1e:04:d2:45:2d:c8:37:ba:8e:
bb:54:6d:6d:ae:a6:51:e5:ab:12:08:ff:c1:e1:6d:
1b:c9:76:83:48:48:10:38:24:dc:9e:8a:90:3e:86:
c7:58:4c:98:7b:1d:3d:b5:b1:4e:95:b1:8a:27:ee:
70:59:3a:29:5e:58:8f:13:3d:13:62:ec:92:ab:7f:
4d:91:67:f3:4f:0d:b4:cf:9b:e6:a8:d8:3c:d3:43:
9e:0c:52:24:14:01:07:ca:de:76:d9:19:b6:41:6d:
a9:9c:db:f1:e1:96:6a:df:02:d5:15:59:1a:85:8e:
bf:e3:2b:28:37:37:fb:80:87:f2:4e:8f:ae:19:bc:
6e:0f:47:0a:ad:08:52:6a:3d:58:30:05:a5:98:f9:
3d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CA:0A:64:AA:89:42:D1:A5:D8:0E:34:A1:09:EE:67:A2:46:F0:09
X509v3 Authority Key Identifier:
keyid:6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:05:9c:7e:32:7a:59:8c:65:d5:5b:00:7a:cf:19:6c:36:b2:
d7:05:8f:21:b1:fc:1a:14:12:b6:46:bb:91:a3:8e:f1:34:16:
6b:e4:39:0e:44:45:88:31:22:02:23:7f:57:99:68:e5:46:92:
a3:fd:80:b3:2e:5d:93:36:7d:db:b3:a6:80:2b:5a:d8:24:18:
c9:2c:3d:0f:86:45:d1:e6:a6:c0:59:84:78:49:ab:07:07:19:
82:10:90:43:0e:a9:e1:e9:71:3f:aa:ac:45:3a:7b:c5:f4:8c:
db:80:3c:82:7a:33:bf:28:e6:5e:15:d2:d4:a1:fb:93:94:14:
a4:f9:8f:57:0e:eb:00:d3:f6:84:66:1b:c1:b5:2b:04:d3:f6:
3e:9e:7d:de:4c:b9:b3:02:5f:46:2b:bf:73:22:56:ae:2f:79:
3f:c8:6d:fb:c8:a6:38:88:d6:92:e7:91:23:ac:f8:b8:7f:76:
be:90:24:00:0a:c7:fe:ba:dd:ce:7b:a6:95:f7:57:28:19:9f:
e7:40:8f:ae:55:90:6e:3f:68:f3:94:46:a6:6f:df:82:19:f2:
52:78:ae:d8:8c:71:ad:5f:d0:9e:dc:a2:6f:c4:09:b1:f4:78:
56:6c:bc:01:52:64:64:08:8c:de:b6:5c:7a:6a:97:ca:84:ce:
ef:aa:dd:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOtqUP/eUIDUBBNrx0h/VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOTM3ZDk1YWViYmJlNjJiOTBmMjRkZWE0ZDY2MzE3MGE2
NjU5ZWMwHhcNMjYwMzI1MjMwMTAxWhcNMjYwMzI2MjMwMTAxWjAzMTEwLwYDVQQD
EygxMGNhMGE2NGFhODk0MmQxYTVkODBlMzRhMTA5ZWU2N2EyNDZmMDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn21L7jhex2kHwh4ZkodkoLJw/YcI
FSwKu/YGwmcKJfO/xmLePWlR7t038JcaVHYpdPMxdh8eKdTldCKVp00MMoCxBEKV
cfRKjHa8Dkl8Gmu6ZPYKiEcgIkwIm1pH7QuTWoLi356JJXCilSCMWU0eBNJFLcg3
uo67VG1trqZR5asSCP/B4W0byXaDSEgQOCTcnoqQPobHWEyYex09tbFOlbGKJ+5w
WTopXliPEz0TYuySq39NkWfzTw20z5vmqNg800OeDFIkFAEHyt522Rm2QW2pnNvx
4ZZq3wLVFVkahY6/4ysoNzf7gIfyTo+uGbxuD0cKrQhSaj1YMAWlmPk9GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDKCmSqiULRpdgONKEJ7meiRvAJMB8GA1UdIwQY
MBaAFGqTfZWuu75iuQ8k3qTWYxcKZlnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YzVjZDItMTkyMC00NTY0LWJjMmMt
OTQxNzdmOGQ4NzdjLzEvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82YzVjZDItMTkyMC00NTY0LWJjMmMtOTQxNzdmOGQ4Nzdj
LzEvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAWcfjJ6
WYxl1VsAes8ZbDay1wWPIbH8GhQStka7kaOO8TQWa+Q5DkRFiDEiAiN/V5lo5UaS
o/2Asy5dkzZ927OmgCta2CQYySw9D4ZF0eamwFmEeEmrBwcZghCQQw6p4elxP6qs
RTp7xfSM24A8gnozvyjmXhXS1KH7k5QUpPmPVw7rANP2hGYbwbUrBNP2Pp593ky5
swJfRiu/cyJWri95P8ht+8imOIjWkueRI6z4uH92vpAkAArH/rrdznumlfdXKBmf
50CPrlWQbj9o85RGpm/fghnyUniu2IxxrV/Qntyib8QJsfR4Vmy8AVJkZAiM3rZc
emqXyoTO76rdIA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:59 2026 by rpki-client