Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier: mSyxkv96bWpaYI3KKYAtuxczVWYZSlKWpEuwSxvclMs=
Subject key identifier: 24:94:D8:B9:8B:32:EC:D3:2A:E5:F5:2E:C3:6C:F5:0B:B4:2A:9B:0B
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial: 01A0C40E87DF38B839297ACC2E8149A8EFBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number: 1A60
Signing time: Mon 21 Sep 2026 13:01:21 +0000
Manifest this update: Mon 21 Sep 2026 13:01:21 +0000
Manifest next update: Tue 22 Sep 2026 13:01:21 +0000
Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: dVdrgVKHA8YUQtZUrvU9fD7QFbzZzxUKP6QsKqsA7VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:87:df:38:b8:39:29:7a:cc:2e:81:49:a8:ef:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Validity
Not Before: Sep 21 13:01:21 2026 GMT
Not After : Sep 22 13:01:21 2026 GMT
Subject: CN=2494d8b98b32ecd32ae5f52ec36cf50bb42a9b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:14:32:bb:84:eb:13:64:ee:b8:92:14:cc:
44:f7:00:e5:79:56:83:0c:33:81:1e:09:38:87:1a:
e2:ce:7d:0f:e6:fe:53:42:27:91:1a:72:d2:e8:ea:
e0:1d:d5:7b:91:fa:61:d1:7e:14:13:c4:30:0b:31:
49:37:8f:76:3a:eb:cd:c4:b4:a4:51:76:90:7e:9d:
62:ed:06:3f:47:56:1b:f7:a6:15:5d:9c:26:5d:1d:
3c:1b:ca:02:b4:1d:f7:bb:5f:c0:ba:5d:a8:22:ab:
6f:96:36:3e:6f:4e:03:0e:b8:6b:9d:2e:f9:67:34:
6a:e5:ab:36:37:5b:3c:71:6a:01:1e:da:f9:27:e8:
c3:5a:6c:91:1c:c1:e4:e6:f7:c0:38:d9:6d:7b:a0:
4e:b8:74:20:24:18:df:a3:34:9a:86:97:aa:d8:04:
93:a3:4c:e5:5b:d1:ad:1f:11:a0:38:20:17:af:3d:
a2:ff:c0:51:d7:0b:f1:d3:7f:db:67:13:5c:0b:d0:
aa:91:18:b6:60:21:32:e3:8a:e2:62:41:6c:42:f4:
e5:97:9f:94:f9:7f:d2:44:ae:94:ab:b9:5b:55:eb:
cf:45:99:43:70:b7:09:6b:b1:5f:28:8f:db:d2:6c:
fb:29:ff:12:d5:fd:bc:ba:cd:34:8f:f3:9a:c9:db:
04:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:94:D8:B9:8B:32:EC:D3:2A:E5:F5:2E:C3:6C:F5:0B:B4:2A:9B:0B
X509v3 Authority Key Identifier:
keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1b:33:7d:50:27:15:fe:69:20:7a:b4:01:28:d7:85:d7:fb:
51:df:86:0f:ee:87:9a:4f:65:fd:d9:1e:29:21:a6:db:7d:7f:
71:d7:67:d4:80:a5:9b:af:73:a0:75:68:b4:93:a6:e2:3b:9c:
09:81:a3:c0:cc:72:6c:c9:da:74:bb:a8:f5:13:1e:6f:b9:f0:
93:cb:c3:d0:ae:0b:0b:bc:05:af:22:df:ff:61:cc:c5:0c:3d:
ba:8d:40:fe:d4:29:46:bb:fd:ee:91:9b:f4:d4:96:ce:dd:7e:
bd:82:75:62:b3:32:bb:0b:b1:eb:a2:97:c0:1c:9b:3f:07:b8:
a3:99:85:02:a2:3c:78:45:aa:5b:90:a4:b7:73:4a:b5:fb:ed:
8c:7a:7e:47:6e:db:fb:0b:db:1d:75:a9:cd:0a:36:bd:55:e8:
dd:32:90:08:3b:af:2c:95:08:50:7d:4f:0f:2c:69:45:00:79:
a6:e5:63:c1:07:59:33:33:2d:6e:e6:c3:8a:a4:61:2d:6b:f7:
84:b1:89:73:71:8c:85:cb:16:b1:2e:2a:b2:b2:c4:5c:47:2a:
c1:29:ca:b6:5e:67:ce:c1:2c:da:6d:5c:ce:b5:6b:dd:5e:82:
af:b5:03:e8:cf:dd:09:26:de:7e:a0:d4:85:ce:64:b7:59:dc:
a2:78:43:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:32:30 2026 by rpki-client