Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
File: APTMQSzDD7L598N8PjkL7F5iVrA.mft (raw, json)
Hash identifier: uvK5f01ZBYCUkHmqqmJdmPCAlONZWvarwoM2TWiFgns=
Subject key identifier: 9D:1B:B9:6A:03:34:7E:1B:31:AE:5A:46:A9:0A:C3:40:EB:36:42:C4
Authority key identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
Certificate issuer: /CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Certificate serial: 019F90C7EF2C655B17FFBCDB1618741CA29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
Manifest number: 18F3
Signing time: Thu 23 Jul 2026 21:00:49 +0000
Manifest this update: Thu 23 Jul 2026 21:00:49 +0000
Manifest next update: Fri 24 Jul 2026 21:00:49 +0000
Files and hashes: 1: APTMQSzDD7L598N8PjkL7F5iVrA.crl (hash: 5bsWyx7EUTcCicACJf303zHaDtje1p3yWiMBLK00Bu8=)
2: e9d8j5pFRds2eyf7EtWu3Q1x5eg.roa (hash: CdFMDMixOpI+FPixrzk29327d47UICMJvvmv5LgznBY=)
3: kuiIDIypzpnRYSUj7glsmT4M63U.roa (hash: AhvHWn0Zw078JqRJpm27EiFTVl5Aqm3ouDehrx0PfD8=)
4: mxN2TKqQ4XDyt7g59_1xXJ2YiGw.roa (hash: gyYJydWjo49Ti2U/k5vphqLtIT2Tqis569ex6zcT+xk=)
5: s9ZJK2zje_SORtRoUS4vOJ62smg.roa (hash: W215uw89IUKrBniSDQnlmBxm007HZAFFpxBNjy0mZ7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:ef:2c:65:5b:17:ff:bc:db:16:18:74:1c:a2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Validity
Not Before: Jul 23 21:00:49 2026 GMT
Not After : Jul 24 21:00:49 2026 GMT
Subject: CN=9d1bb96a03347e1b31ae5a46a90ac340eb3642c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:ba:29:33:56:5a:25:f0:15:e2:09:72:cb:
a3:56:fe:c0:33:85:d7:71:84:7a:24:de:c7:c7:91:
56:e6:46:0a:8a:e4:bf:44:8f:a5:60:93:58:74:c5:
94:52:4a:a9:75:90:df:88:a6:cd:08:1d:df:3a:b3:
bf:8b:24:ef:23:91:78:d2:f1:f6:09:5e:ac:52:92:
2f:37:0d:47:7b:6d:62:eb:1a:b9:bf:71:6d:85:ea:
1c:0b:ef:cc:5d:9f:4c:7a:af:20:80:0d:ab:50:d1:
4c:94:70:b9:cc:77:e1:20:36:e7:2e:9c:5f:87:9f:
a5:27:a2:9b:37:a4:5d:9d:f2:f4:c8:42:c4:86:4e:
96:5d:86:20:3d:33:04:8b:90:ef:d1:1e:17:bc:c6:
92:7c:39:86:d6:e9:84:5d:39:b2:ec:d1:a2:bd:0e:
ec:a4:48:fe:4d:f9:e7:0e:42:35:a3:fc:76:2f:cc:
d7:7b:5e:5e:2f:06:86:51:54:90:92:58:81:bc:65:
54:8a:82:ce:30:d4:37:4d:4b:13:be:8f:14:a1:cf:
cf:b4:b9:d0:21:e2:f4:4b:6f:8f:19:e5:5c:2b:a7:
43:d7:06:f1:c0:1a:08:12:7c:52:f3:1d:8a:bc:9f:
f4:83:66:a1:b2:d9:b4:16:95:f4:9b:26:ec:41:55:
db:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1B:B9:6A:03:34:7E:1B:31:AE:5A:46:A9:0A:C3:40:EB:36:42:C4
X509v3 Authority Key Identifier:
keyid:00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3f:a7:ce:5f:b6:ea:31:df:9f:4b:5d:fb:a2:51:c8:2b:78:
51:78:9c:c6:b4:bc:aa:9a:58:ad:81:e6:72:c3:1c:47:dd:55:
64:69:8f:25:76:6b:1f:e6:41:a8:ce:4d:3d:8e:80:af:3a:cd:
26:69:6d:3d:33:d3:62:60:a1:9b:c0:5a:dd:96:9b:8a:9e:2f:
2b:fe:ef:71:2d:a2:f8:ee:c5:61:dd:75:b2:5c:77:c4:23:a0:
56:c7:d7:e3:d3:cc:eb:26:8f:74:7e:70:b1:98:7a:1a:90:79:
55:a4:3f:65:18:04:54:b4:3e:eb:5b:97:f4:b9:2d:ab:c1:67:
04:0f:8a:4f:04:a8:ce:2e:90:b5:4d:32:18:ea:2b:06:b7:6d:
12:52:4a:0d:16:ed:e0:a4:64:54:8c:36:b9:d9:ca:93:6e:8d:
d0:ef:29:21:64:91:11:be:fe:00:8b:ca:83:f6:05:e8:13:5b:
59:ad:3f:d9:c7:fb:61:54:41:91:8c:a5:23:60:b4:e6:9f:7c:
a8:14:50:28:06:a9:f7:a5:b9:05:03:64:77:5a:be:bc:e0:7b:
9f:d7:59:dc:11:9c:60:15:f7:08:2f:48:3f:bc:24:13:b3:92:
fd:14:c4:4b:0c:b5:a4:b1:72:bb:3d:5e:55:b6:01:d5:e8:c3:
5c:d6:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:37 2026 by rpki-client