Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier: NdWQG461pajDyvfUDZNSijCzSL9afFRKimNQPkxOQLI=
Subject key identifier: 83:5D:FA:62:74:58:30:4A:35:7B:57:96:F0:CB:C4:6C:49:AE:31:0C
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial: 01A1C4E79AD51F6ED81D32C3B6B37297EC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number: 1AE5
Signing time: Tue 10 Nov 2026 10:01:15 +0000
Manifest this update: Tue 10 Nov 2026 10:01:15 +0000
Manifest next update: Wed 11 Nov 2026 10:01:15 +0000
Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: LK89l9WWxt6vfMJp3Z4QLkRdW/IVaMU89Oa5CLwGqJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:e7:9a:d5:1f:6e:d8:1d:32:c3:b6:b3:72:97:ec:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Validity
Not Before: Nov 10 10:01:15 2026 GMT
Not After : Nov 11 10:01:15 2026 GMT
Subject: CN=835dfa627458304a357b5796f0cbc46c49ae310c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:e2:67:21:0f:92:b7:c4:c9:3a:8b:95:22:
45:c0:e4:39:05:fe:b0:de:41:22:88:53:86:4a:e1:
ce:dc:59:22:85:2c:74:97:4f:8a:49:3f:0b:80:66:
54:fe:a5:b5:c2:06:59:87:07:17:39:ea:af:cd:d7:
68:22:fc:0d:a9:8e:fb:6c:3f:18:66:02:42:b7:e3:
e6:0d:83:e1:4f:7f:af:23:48:70:65:b9:6f:8b:64:
f5:50:03:44:92:04:5c:de:9a:3a:10:a0:58:ed:6b:
ca:ed:5b:68:49:33:b0:8a:31:05:62:0a:33:4d:7d:
ac:03:22:94:77:e8:02:98:42:3e:3d:24:cb:fa:cf:
48:82:eb:35:cc:86:7c:44:73:e3:44:a3:8a:0b:44:
30:22:39:31:f8:ef:75:ea:73:b8:a1:c9:74:00:78:
2b:e6:e1:04:82:a3:0c:86:48:df:e0:ee:ec:1e:5a:
3a:e0:52:13:15:f4:1c:ee:99:fe:bb:2c:79:e7:de:
e7:77:bc:a1:ae:79:98:71:f0:c9:06:7e:24:73:06:
e2:a1:b6:50:a2:c3:fb:db:fc:63:97:e1:90:de:9d:
ab:6e:e8:cf:20:6b:d1:8b:9b:b1:48:f2:e9:be:9a:
38:cb:bd:d8:02:98:82:81:b3:99:1b:ae:e5:46:ae:
ab:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5D:FA:62:74:58:30:4A:35:7B:57:96:F0:CB:C4:6C:49:AE:31:0C
X509v3 Authority Key Identifier:
keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fd:ed:30:38:58:84:7b:44:75:73:4a:58:85:13:7c:ed:8e:
47:08:45:6f:35:ab:1a:60:07:10:24:ed:c7:53:3d:05:64:1c:
90:d6:ff:a7:3c:78:06:1e:ac:e7:ce:92:17:3f:0d:b3:ae:5b:
db:88:b2:0b:11:8b:db:58:d2:28:ba:1c:a8:e5:27:14:83:a5:
47:82:73:6e:67:22:61:fa:e7:e5:1d:58:ea:df:66:e1:15:ac:
33:00:32:07:1b:4e:ff:06:a2:03:1a:84:d2:cf:43:58:c3:2c:
e2:cf:78:8c:82:e9:cb:77:e3:43:fb:fd:35:e1:13:57:6d:c9:
e5:01:45:b8:88:d4:c2:0d:25:29:c1:4d:8c:61:7e:e9:e7:95:
9e:75:dc:66:13:46:00:7b:08:2b:ca:be:df:2d:bc:d4:3a:40:
8c:55:06:f9:64:a7:c7:da:8d:76:3f:15:62:14:a1:45:fe:96:
87:6f:4e:fb:aa:ed:04:a2:d1:2a:83:a5:f3:86:08:47:66:34:
a2:04:1b:28:1e:72:15:88:eb:e9:79:df:1d:15:f1:57:ec:3f:
89:72:0e:5b:ad:71:48:b5:c6:12:a0:c2:bb:f2:f5:85:c0:c2:
8e:4a:49:2e:4d:6e:0f:dd:a9:4a:2f:f2:4e:1e:7f:b1:8d:c4:
60:e2:71:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:35:59 2026 by rpki-client