Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: mW/OIynT4KT3L2id2lqnYb7spIKWWGWgeBzVsXp/tdk=
Subject key identifier: 2A:BC:D2:DB:BC:11:70:EF:ED:FC:9B:26:AD:25:7F:43:45:92:5B:D2
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 019FAAF56FD7D1336101A48A92D90754A5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 23:00:39 +0000
Manifest this update: Tue 28 Jul 2026 23:00:39 +0000
Manifest next update: Wed 29 Jul 2026 23:00:39 +0000
Files and hashes: 1: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: geE4rJZUlOdoJBQyRCxGXNtHCs3Af4WiHN+aVLVZK3o=)
2: pHyfE-IkMhxcPHPc-HwDzXsFVjQ.roa (hash: uyoFgMWyTuoY09i37tyWsmZah+QoAHk4CSzGk/eiO5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:6f:d7:d1:33:61:01:a4:8a:92:d9:07:54:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Jul 28 23:00:39 2026 GMT
Not After : Jul 29 23:00:39 2026 GMT
Subject: CN=2abcd2dbbc1170efedfc9b26ad257f4345925bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:a2:b8:09:ed:03:01:b7:32:68:e5:2c:ec:
9e:b7:28:fa:b5:ea:2d:7e:41:6f:db:97:82:54:9a:
bb:b5:dc:70:ae:86:84:1a:78:c5:f8:0a:8b:07:9a:
a7:6f:e4:8c:fa:fd:3c:07:63:05:6c:4b:67:cb:8c:
6f:fb:2b:27:da:18:eb:3b:b1:b0:b9:f6:23:10:c8:
6e:e2:c7:bc:ad:d1:3f:0d:72:22:56:a1:dc:8d:1f:
e6:fe:3e:a5:39:9b:a1:7d:14:0f:fd:9a:cb:a6:56:
1e:68:c9:5f:76:8c:52:ad:e8:e4:b9:fa:45:1f:6e:
b2:ec:69:2b:ac:28:f9:c8:d9:f4:26:50:d1:ad:71:
d4:24:63:2e:14:5e:cc:a1:9a:72:72:85:52:9f:ba:
28:ba:50:b8:48:38:ea:b0:92:4f:8a:ac:38:85:39:
b5:87:cd:53:44:65:89:8a:2b:5d:bc:b1:27:7e:e9:
20:5b:d7:c7:ea:bb:c9:ac:20:70:d5:24:55:5b:6f:
c3:33:40:c4:c9:39:61:b2:e5:46:e5:1b:9f:b4:59:
78:1b:75:3c:7b:50:6f:56:48:dc:b4:f2:e5:c7:b4:
6c:56:d3:7e:d0:f8:93:2b:d0:7a:d1:8b:15:e4:40:
c1:22:15:37:45:67:5a:f7:16:dc:ac:9f:22:97:60:
e0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BC:D2:DB:BC:11:70:EF:ED:FC:9B:26:AD:25:7F:43:45:92:5B:D2
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d2:a5:3d:38:4a:16:17:59:b3:f1:3f:d3:28:e8:b0:19:ad:
9f:bf:80:14:8a:10:b5:dd:73:ef:72:d2:22:0b:16:1a:28:aa:
06:09:95:86:70:24:24:88:52:cf:84:1c:1f:9a:9c:70:81:26:
57:1c:a4:ee:eb:50:84:03:e7:89:55:ff:84:e2:e1:aa:45:63:
0c:ab:1c:d6:a8:0e:6c:49:46:56:04:95:ba:56:1a:c8:d5:62:
d2:2f:4e:b6:02:82:f6:25:75:34:b2:58:3e:22:0c:9d:a7:44:
d3:8e:ec:1a:68:6c:32:54:6e:76:43:eb:fd:9b:9f:e3:99:5e:
cf:17:8a:d4:c1:b2:b7:76:20:1d:d0:62:d4:29:d9:bf:ae:c0:
4d:0f:3a:c4:05:68:cd:7a:33:35:06:57:32:f7:2e:77:28:20:
e3:d2:db:3c:37:2e:8b:4e:1d:51:08:5c:09:70:ab:47:71:a8:
6d:d0:1d:27:27:52:98:83:4c:8b:a5:77:15:29:41:eb:aa:4e:
7d:f4:24:73:e2:06:b2:f8:0a:94:31:be:90:67:c1:20:10:f9:
7b:8c:d6:38:a3:53:a8:d3:5e:38:1d:c3:a2:49:a8:36:ac:a2:
fd:54:33:f7:a4:f9:3f:7f:6a:5d:de:32:d6:bc:8b:0b:14:24:
83:6c:51:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:35:37 2026 by rpki-client