Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
File: DnSXlvuOtxaowjxHZJ0jvz0-apg.mft (raw, json)
Hash identifier: Or5Rh0S1ZJBebDO6LiOLhV19MwPyRbSIprt/UH88aE0=
Subject key identifier: 17:C4:AA:6B:0A:A9:33:2C:5B:44:B0:96:36:2F:AF:44:66:23:57:67
Authority key identifier: 0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98
Certificate issuer: /CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
Certificate serial: 019D284D30A32D9850A5F2D633F52B0A0CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
Manifest number: 044E
Signing time: Thu 26 Mar 2026 04:00:40 +0000
Manifest this update: Thu 26 Mar 2026 04:00:40 +0000
Manifest next update: Fri 27 Mar 2026 04:00:40 +0000
Files and hashes: 1: DnSXlvuOtxaowjxHZJ0jvz0-apg.crl (hash: QcYJdIV9GtpA00tnemT1Q5gYUITQEXLHEp7sxXprrIc=)
2: nqmWzH-tzCnzE93LuhfxRjm9wHw.roa (hash: L9/RTfwJkK0P4xFaKDfFjPQ7yNTzuYqZSZ9Mz6ikrfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:30:a3:2d:98:50:a5:f2:d6:33:f5:2b:0a:0c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e749796fb8eb716a8c23c47649d23bf3d3e6a98
Validity
Not Before: Mar 26 04:00:40 2026 GMT
Not After : Mar 27 04:00:40 2026 GMT
Subject: CN=17c4aa6b0aa9332c5b44b096362faf4466235767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:fc:9d:20:a7:5f:94:ed:36:f1:67:50:2b:
e1:4b:1b:08:75:8d:0c:71:88:db:cf:98:66:a9:5b:
4f:19:44:01:d3:af:4f:d0:20:64:8b:9e:a4:82:d0:
16:23:53:87:05:f2:4c:81:7a:50:b4:6f:0e:66:ec:
d9:49:64:3d:e1:cd:82:ff:02:dc:79:9f:f3:d3:31:
55:a3:ca:83:1f:ac:a6:69:68:3d:56:b2:e9:d6:fd:
49:c2:78:5c:a2:54:45:ac:48:f9:3e:76:b0:ab:f8:
7d:87:ac:c0:9d:96:6b:80:ad:97:22:8b:e2:c3:3e:
14:17:93:7a:5c:95:40:0e:a5:b2:3a:92:e6:fe:ad:
a5:74:4f:51:03:bd:db:14:ef:5f:58:4e:bd:33:08:
d7:76:3a:31:bd:99:bb:32:fb:c6:aa:84:4d:93:2d:
25:9f:a1:6b:93:eb:f7:56:8a:9d:ff:6a:d8:38:7f:
29:8a:16:4b:de:e0:49:0b:fb:35:33:17:57:e7:a4:
51:5f:eb:50:ce:92:44:79:67:df:57:cd:15:38:38:
63:63:07:ca:78:71:73:c4:da:98:9a:0d:be:5f:5f:
ff:3f:6e:88:89:fe:79:05:04:d3:13:9b:31:e4:32:
40:b4:cc:0a:07:ee:c2:1c:36:f7:4f:05:fa:47:97:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C4:AA:6B:0A:A9:33:2C:5B:44:B0:96:36:2F:AF:44:66:23:57:67
X509v3 Authority Key Identifier:
keyid:0E:74:97:96:FB:8E:B7:16:A8:C2:3C:47:64:9D:23:BF:3D:3E:6A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnSXlvuOtxaowjxHZJ0jvz0-apg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/17226b-32ba-48d1-b7e2-df8b2aa6bbe6/1/DnSXlvuOtxaowjxHZJ0jvz0-apg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:07:25:88:e7:fc:ba:6a:8a:ee:85:46:dd:19:83:d5:2d:33:
6d:99:23:4c:f3:ae:a7:a9:7b:c3:6f:96:c0:7f:f8:55:97:8b:
f2:19:bf:5a:93:56:f9:63:b1:7b:ae:63:85:51:71:0c:f9:68:
41:f1:19:3a:11:4c:06:b4:d9:d4:5c:88:97:90:3e:09:99:f2:
83:fb:0d:45:f6:62:c7:df:16:e4:a7:9d:13:2c:2c:0c:9c:d6:
39:5b:ee:ad:6c:a5:b7:56:4e:06:cb:dd:e4:e6:19:e5:4e:b4:
0d:c4:be:f8:14:03:e1:1e:88:22:90:36:c8:82:81:96:aa:9d:
21:45:0a:62:c7:f2:a4:cc:3b:81:22:50:2c:b1:3f:a6:cb:17:
7c:0d:26:fa:2c:ee:a4:f8:c1:61:fc:2f:9f:be:f2:58:62:51:
94:a3:6b:7e:6b:43:04:18:26:46:ae:f2:43:df:bc:e5:f5:86:
56:15:91:2b:53:56:8b:59:11:3b:cf:1c:f0:a1:cc:bf:76:12:
bf:6c:bc:91:29:5b:1a:08:38:a0:7f:b2:d1:2c:26:d5:a9:c7:
c4:af:e9:a7:42:5c:cf:2c:0d:0d:a1:f2:0a:6c:ca:9d:c9:ef:
f1:f9:e9:35:0a:d1:1c:81:ca:b5:06:75:72:46:06:a7:73:73:
8b:55:42:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTTCjLZhQpfLWM/UrCgyrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNzQ5Nzk2ZmI4ZWI3MTZhOGMyM2M0NzY0OWQyM2JmM2Qz
ZTZhOTgwHhcNMjYwMzI2MDQwMDQwWhcNMjYwMzI3MDQwMDQwWjAzMTEwLwYDVQQD
EygxN2M0YWE2YjBhYTkzMzJjNWI0NGIwOTYzNjJmYWY0NDY2MjM1NzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzET8nSCnX5TtNvFnUCvhSxsIdY0M
cYjbz5hmqVtPGUQB069P0CBki56kgtAWI1OHBfJMgXpQtG8OZuzZSWQ94c2C/wLc
eZ/z0zFVo8qDH6ymaWg9VrLp1v1JwnhcolRFrEj5Pnawq/h9h6zAnZZrgK2XIovi
wz4UF5N6XJVADqWyOpLm/q2ldE9RA73bFO9fWE69MwjXdjoxvZm7MvvGqoRNky0l
n6Frk+v3Voqd/2rYOH8pihZL3uBJC/s1MxdX56RRX+tQzpJEeWffV80VODhjYwfK
eHFzxNqYmg2+X1//P26Iif55BQTTE5sx5DJAtMwKB+7CHDb3TwX6R5etpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfEqmsKqTMsW0SwljYvr0RmI1dnMB8GA1UdIwQY
MBaAFA50l5b7jrcWqMI8R2SdI789PmqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xNzIyNmItMzJiYS00OGQxLWI3ZTIt
ZGY4YjJhYTZiYmU2LzEvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8xNzIyNmItMzJiYS00OGQxLWI3ZTItZGY4YjJhYTZiYmU2
LzEvRG5TWGx2dU90eGFvd2p4SFpKMGp2ejAtYXBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwcliOf8
umqK7oVG3RmD1S0zbZkjTPOup6l7w2+WwH/4VZeL8hm/WpNW+WOxe65jhVFxDPlo
QfEZOhFMBrTZ1FyIl5A+CZnyg/sNRfZix98W5KedEywsDJzWOVvurWylt1ZOBsvd
5OYZ5U60DcS++BQD4R6IIpA2yIKBlqqdIUUKYsfypMw7gSJQLLE/pssXfA0m+izu
pPjBYfwvn77yWGJRlKNrfmtDBBgmRq7yQ9+85fWGVhWRK1NWi1kRO88c8KHMv3YS
v2y8kSlbGgg4oH+y0Swm1anHxK/pp0JczywNDaHyCmzKncnv8fnpNQrRHIHKtQZ1
ckYGp3Nzi1VCwg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:38 2026 by rpki-client