Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
File: Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json)
Hash identifier: M4DZuuV0oYsUdgR/M6kpKj+4L3zxt9BgI4cIjlt7Ge0=
Subject key identifier: 56:8E:75:63:37:98:9B:23:F9:4A:0C:E3:42:9B:F4:08:77:50:A6:B5
Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
Certificate issuer: /CN=029f93002d78e8e40da560c4291fb830d92dff66
Certificate serial: 019F8F7EB756F993DC2948C219C8F034517A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
Manifest number: 1954
Signing time: Thu 23 Jul 2026 15:01:14 +0000
Manifest this update: Thu 23 Jul 2026 15:01:14 +0000
Manifest next update: Fri 24 Jul 2026 15:01:14 +0000
Files and hashes: 1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: tfxDT87Uzow7mwo77MEomwSQy3IfnnoKEapOw75Y8HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:b7:56:f9:93:dc:29:48:c2:19:c8:f0:34:51:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66
Validity
Not Before: Jul 23 15:01:14 2026 GMT
Not After : Jul 24 15:01:14 2026 GMT
Subject: CN=568e756337989b23f94a0ce3429bf4087750a6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:08:7d:99:68:ed:98:98:92:c3:4f:b9:d3:
36:4a:99:30:35:aa:2b:5e:2d:4b:41:f8:3b:ba:8c:
e1:31:fc:af:72:fe:8b:af:0f:d9:61:34:9a:ac:de:
6f:7b:5f:7b:e2:41:7d:c5:2f:6e:96:0d:95:39:a5:
2d:c4:bf:5c:de:5e:46:bc:c9:16:cb:ff:95:f6:30:
e5:1c:77:c6:48:43:8a:c6:23:5a:48:3b:5f:57:3e:
8c:1d:89:5d:b9:bf:8d:c5:83:ce:1a:df:45:22:42:
cd:57:1e:0c:20:02:2c:30:bf:24:d0:17:72:2c:28:
ba:b6:98:75:b7:11:1c:db:0a:0f:fd:ab:c0:83:02:
23:1d:3e:3e:9d:e8:ab:73:3c:aa:26:40:1a:56:73:
1e:2c:9e:3e:7f:ef:68:79:f4:dd:46:7c:6a:5b:5e:
fe:c9:36:77:70:9d:2b:dc:f0:e9:09:a6:33:47:e5:
66:65:48:d5:12:cc:8f:b9:94:de:7d:ac:6d:00:37:
28:97:a9:db:68:9b:f1:02:db:d5:0c:24:6f:b2:c5:
c9:84:c3:f3:5f:5d:74:98:05:0f:56:20:17:1f:7e:
f3:3d:4f:68:5a:a4:cb:0d:fb:e6:80:06:2b:e3:5a:
e7:72:bc:dd:8c:84:b6:e4:c8:73:52:c1:30:11:f1:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8E:75:63:37:98:9B:23:F9:4A:0C:E3:42:9B:F4:08:77:50:A6:B5
X509v3 Authority Key Identifier:
keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5a:a5:82:f5:3e:06:a1:14:c0:9e:90:b6:a7:10:78:dc:f3:
52:e3:83:ad:d4:b2:f2:33:ec:81:84:db:38:26:08:78:50:12:
62:52:93:3c:10:63:52:7a:f5:80:fa:35:1b:5e:cf:36:bf:0a:
3a:e5:4f:c7:16:75:8f:73:09:21:4d:83:ef:51:cd:6c:7f:75:
3b:4f:da:84:7f:b0:7f:e6:78:65:c6:32:e1:15:cf:01:d4:9d:
9c:63:6e:e7:7b:71:50:83:21:86:3b:54:a8:08:b5:1a:e4:61:
45:34:20:d7:3a:0d:36:71:0b:c2:16:14:ae:c5:80:03:08:9c:
d9:97:94:01:e9:5d:b5:0e:11:e5:e3:61:aa:23:95:a0:82:c3:
d0:20:5d:53:1c:9a:1d:c3:52:65:71:ab:8b:49:cc:54:c0:cf:
7b:a6:91:6b:5b:92:cd:5f:c5:db:68:99:0a:55:90:5d:76:10:
47:16:c2:5b:a1:b3:3b:b0:c4:d7:62:2f:7e:98:80:30:33:e9:
65:38:29:b0:e6:37:b2:00:65:8f:e2:08:56:15:36:40:ff:35:
67:d3:de:d0:d9:c5:88:db:f1:b4:5f:37:93:cb:56:d5:6b:7a:
a4:8d:33:1d:db:9c:aa:98:bf:0c:1e:70:d3:87:5f:77:74:08:
0c:68:86:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:03 2026 by rpki-client