Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier: g1z2K+2vS0MgU173O40C+Oy+pxJmG2P+/XlA9klGQys=
Subject key identifier: 55:9E:7A:41:F4:EE:33:64:F7:1B:B5:30:1B:16:B7:DE:EA:8C:CA:3B
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial: 019FAA1A061AA6E3592112569B6E62F46823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number: 19CE
Signing time: Tue 28 Jul 2026 19:00:59 +0000
Manifest this update: Tue 28 Jul 2026 19:00:59 +0000
Manifest next update: Wed 29 Jul 2026 19:00:59 +0000
Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: z1tZiYPK+abgr3IUgZlW6a5It3q4sL+s5HsJ5ejKmmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:06:1a:a6:e3:59:21:12:56:9b:6e:62:f4:68:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Validity
Not Before: Jul 28 19:00:59 2026 GMT
Not After : Jul 29 19:00:59 2026 GMT
Subject: CN=559e7a41f4ee3364f71bb5301b16b7deea8cca3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:30:20:e9:17:d8:74:3d:da:73:5c:cb:ee:
13:7d:fe:56:82:c2:4d:21:48:9d:49:88:67:74:de:
e6:93:91:6b:30:f7:6a:15:74:7c:bd:98:8b:70:44:
95:fd:57:05:d8:f4:24:50:03:db:7f:76:5b:68:89:
6d:46:9e:c9:39:53:bf:32:6a:4c:66:13:96:9c:f4:
5e:c1:dc:aa:df:34:d7:3e:86:2f:9b:31:e0:17:05:
2f:36:be:8a:ac:ec:c6:59:cd:2e:e2:59:6c:38:bf:
50:98:c1:30:e7:86:37:58:38:ab:0b:76:13:36:4b:
38:32:1e:e2:a7:1c:15:6f:c9:c2:3f:26:fc:e5:a7:
2f:c3:f2:16:74:2c:1b:58:2e:fe:59:d7:95:c2:94:
f3:55:26:b6:98:3c:5a:3a:87:7c:c4:cc:92:34:28:
09:42:45:32:82:91:47:a2:34:c1:fe:de:6a:c9:ba:
6a:d3:9b:4c:01:48:7c:d9:c7:8f:e1:38:29:c3:22:
d8:1e:c5:88:ce:78:21:34:5f:44:71:f5:a4:f0:ca:
a2:89:d1:c4:44:9d:ad:d2:6c:25:5b:56:f5:35:87:
a7:5c:cd:96:54:8f:33:49:6b:f0:ef:be:53:fd:5a:
8a:34:3e:e3:3b:bd:e3:00:6a:50:39:37:2f:0e:8c:
c5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9E:7A:41:F4:EE:33:64:F7:1B:B5:30:1B:16:B7:DE:EA:8C:CA:3B
X509v3 Authority Key Identifier:
keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f6:93:d7:dd:78:48:b9:eb:64:c4:d9:bf:a6:67:7a:b5:05:
53:ef:c0:9c:eb:30:73:ae:cd:9f:26:57:89:fe:25:90:7d:04:
8a:d2:8a:68:87:c7:1f:a3:86:7c:ff:f0:c4:11:58:b2:ab:d6:
58:f4:67:6a:9a:93:04:c7:b9:93:16:42:20:96:b2:b0:07:33:
2f:f6:92:26:bc:ca:22:e4:b7:a7:c4:94:ef:62:10:ea:fa:5f:
77:db:ab:9f:6a:5f:11:dd:67:d5:b9:55:a6:ee:b7:fe:92:6b:
0b:5a:e9:44:a6:cd:61:43:d4:cf:02:6e:bb:34:fb:96:b0:cf:
b7:1c:94:1e:81:b2:c3:f8:db:e2:40:92:d1:15:e9:26:21:82:
9b:b1:fa:5b:43:14:12:10:07:3a:da:cb:5c:38:86:62:1f:e3:
09:73:73:85:6a:d0:cb:51:c4:1e:61:b9:ca:b5:7d:dc:d5:cf:
62:e5:b5:67:92:90:4f:f0:fc:1a:8f:43:8b:33:75:a4:19:c3:
6f:4f:8a:5a:45:f9:3d:69:42:24:95:a9:f1:56:82:17:6e:cb:
a0:1b:f8:84:97:6c:ef:f1:af:72:49:bf:b2:a6:7e:af:09:1f:
d2:64:62:80:cc:b6:6a:ac:5c:59:f1:68:be:a1:46:d0:bd:92:
ac:8e:67:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:30:42 2026 by rpki-client