Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
File: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft (raw, json)
Hash identifier: KPb9roydvpqgb1lbUN0QUB7CAlWupAYD2xUek33b04Y=
Subject key identifier: 31:99:A6:EB:48:E5:E5:EC:FD:22:B7:1D:26:7B:F0:4F:4D:43:51:FD
Authority key identifier: 02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
Certificate issuer: /CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Certificate serial: 019FAABF06FA305C5AAA87AB8C55C0952935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
Manifest number: 026E
Signing time: Tue 28 Jul 2026 22:01:13 +0000
Manifest this update: Tue 28 Jul 2026 22:01:13 +0000
Manifest next update: Wed 29 Jul 2026 22:01:13 +0000
Files and hashes: 1: Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl (hash: thSpCM83YicJwTa8V7nAgXhnxpUsNWP/7U731+PDKcM=)
2: NGyMHcBWRIkoIoJ_ncGJDqHCOTQ.roa (hash: 7EeVGxOBQ9n5FgZRMYhe7gBwkfF77z2pQwSgFDZNEOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:bf:06:fa:30:5c:5a:aa:87:ab:8c:55:c0:95:29:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02af3b635354b9757b9f2d68ea5d58c50742aab0
Validity
Not Before: Jul 28 22:01:13 2026 GMT
Not After : Jul 29 22:01:13 2026 GMT
Subject: CN=3199a6eb48e5e5ecfd22b71d267bf04f4d4351fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f8:6b:2b:fa:4b:34:8f:7c:2a:0e:db:76:9b:
84:61:d0:a8:83:4d:6b:06:26:62:8d:8c:c0:82:5d:
ce:d1:ef:7a:dc:bc:a0:e5:7e:de:69:3b:12:7e:09:
c7:34:26:ac:1d:80:f4:18:38:51:cb:3c:df:a6:c5:
76:8c:b5:47:86:8d:18:4e:52:e4:f5:fa:5d:a9:94:
ef:29:38:a5:aa:2c:45:dd:0c:b4:3a:09:8d:9f:b3:
5f:d0:b9:b2:5a:70:8c:00:57:4a:fd:93:1e:a4:b8:
58:7c:49:bd:ec:44:d1:b1:31:c7:b0:86:59:27:e5:
30:56:0a:26:7f:b9:33:d0:da:e9:69:71:7b:ea:e7:
31:e5:2d:1e:40:2a:21:10:ca:4b:cd:7d:b6:c3:f5:
90:0f:95:7e:e2:77:86:77:49:ca:2b:21:51:3d:3c:
ab:10:9a:b7:90:62:45:44:f1:2e:5e:7c:35:bb:8c:
9a:78:53:c8:b0:f0:f2:02:6b:fb:34:1c:9f:0e:c0:
22:f4:5b:dc:77:94:64:3b:e5:73:10:8f:25:6d:82:
f3:c8:57:fd:bb:90:33:4d:e5:bb:a5:b1:07:d6:f3:
45:d5:94:2f:a2:50:54:a0:17:06:de:b3:15:2c:71:
5a:05:97:ad:05:d1:6f:de:f4:ee:67:0e:25:c3:f6:
46:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:99:A6:EB:48:E5:E5:EC:FD:22:B7:1D:26:7B:F0:4F:4D:43:51:FD
X509v3 Authority Key Identifier:
keyid:02:AF:3B:63:53:54:B9:75:7B:9F:2D:68:EA:5D:58:C5:07:42:AA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/43d4ca-82cb-414a-b39e-86f88ce44793/1/Aq87Y1NUuXV7ny1o6l1YxQdCqrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:fb:bd:88:73:3b:9d:3d:74:8f:4d:03:e3:50:84:62:61:af:
b7:0a:61:59:d5:95:05:4a:b7:66:74:0a:fa:e2:4b:0b:9c:cf:
9e:f0:45:2a:ca:a9:40:d0:8f:06:72:9a:c4:3f:a0:10:25:dd:
53:55:95:5d:57:df:95:42:5f:2c:c8:e5:76:d4:3c:ff:f4:0c:
21:00:08:2f:2f:2b:98:29:85:80:45:1d:35:ec:fa:cc:89:1a:
48:c5:f5:da:eb:a0:87:7c:f4:9a:f4:67:60:fd:8a:66:c0:cd:
a8:bb:63:f7:15:23:c2:e5:3e:fc:a9:d1:25:89:61:ec:a9:ad:
da:b4:1e:94:f5:9b:d8:4d:57:c9:69:7f:51:9a:44:aa:dc:13:
61:fe:68:b9:c6:51:aa:83:d6:54:23:82:88:4a:39:8f:34:fc:
1c:00:cd:7e:fb:73:65:fd:4e:52:a7:6c:5d:11:60:fd:df:0d:
ad:02:e7:ed:d5:50:94:5f:74:c4:0f:f6:23:d1:f3:5a:e6:36:
58:8f:fc:7f:60:7e:aa:22:d9:69:5c:0e:a4:83:1e:08:7a:7f:
13:09:34:df:9a:7a:43:b3:21:93:0f:8d:ac:ab:c3:38:8c:6c:
be:9b:6e:d5:21:2f:24:ed:41:8b:35:be:4c:3f:1f:bb:82:ac:
54:40:d6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:37:14 2026 by rpki-client