Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
File: AAtPqsebsZaQw69aB4xssUqRrUI.mft (raw, json)
Hash identifier: O8n5qymvjTux8OdZjb1zNfy37wuafijn037nLW8fLjo=
Subject key identifier: 77:6F:C4:C3:D0:05:FE:51:80:E5:B8:79:53:ED:C2:40:44:D9:E7:1F
Authority key identifier: 00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
Certificate issuer: /CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Certificate serial: 019FAB2C52632ABAC5D2D0CDEF55F496F66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
Manifest number: 144F
Signing time: Wed 29 Jul 2026 00:00:36 +0000
Manifest this update: Wed 29 Jul 2026 00:00:36 +0000
Manifest next update: Thu 30 Jul 2026 00:00:36 +0000
Files and hashes: 1: AAtPqsebsZaQw69aB4xssUqRrUI.crl (hash: L1CQ3Mmqdc1oiGhUH1I7JLSxmT1e/zoc9SdeQ/wXGz0=)
2: qkYI2TpaHCn0Rl7Zcn2B5GIJgQM.roa (hash: fcQ2Ei/HI72zlpQU19GPaQ5DdqwsBsYj6lbFhVkHW2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:52:63:2a:ba:c5:d2:d0:cd:ef:55:f4:96:f6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Validity
Not Before: Jul 29 00:00:36 2026 GMT
Not After : Jul 30 00:00:36 2026 GMT
Subject: CN=776fc4c3d005fe5180e5b87953edc24044d9e71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:eb:4a:c6:94:5e:8d:3c:7b:43:db:32:3d:f7:
f8:de:26:37:9c:3f:c3:89:a4:87:2b:76:d1:7c:e0:
35:22:61:3e:ee:7c:5f:73:49:f3:a2:05:9e:20:ec:
46:b5:7c:11:72:c5:9c:76:8c:fe:ec:2f:ff:10:b5:
d0:38:66:5d:ee:98:28:ab:c6:71:ad:1f:5f:47:fa:
27:aa:51:11:f7:51:f8:fa:df:dd:87:1d:cb:f6:af:
3f:6a:67:d1:e7:b6:aa:d5:3f:79:fd:c0:99:8b:bb:
6b:1b:ef:4b:3e:2e:a2:83:0d:60:b9:dc:ad:6f:1b:
a5:a5:49:ab:9c:52:6e:7d:14:9c:0b:27:e5:87:2e:
bb:21:8d:e3:91:5c:74:db:a5:90:c6:f4:c1:14:9a:
64:96:f2:aa:3d:cd:94:90:5a:c6:44:d3:ac:86:f7:
4b:c3:c2:7b:c8:3f:d9:2e:d7:bf:34:2c:82:23:51:
be:e9:8a:ef:19:f3:f9:d8:66:e3:e7:12:a6:16:bc:
06:10:7f:8a:b6:dc:df:37:3f:51:f9:7d:8b:34:a7:
b8:44:74:33:c8:66:b0:6f:c5:f6:a8:4e:fe:f9:af:
df:40:74:83:e4:a2:fa:1c:8e:07:ee:18:1f:a7:01:
51:7b:7c:76:71:24:f5:e9:9e:09:0d:4c:e5:50:34:
f2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6F:C4:C3:D0:05:FE:51:80:E5:B8:79:53:ED:C2:40:44:D9:E7:1F
X509v3 Authority Key Identifier:
keyid:00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4d:4e:c0:39:ad:bb:06:2f:d9:2f:b1:dc:6e:0b:a4:c1:f3:
35:99:f1:01:7e:9f:53:94:82:a5:69:8a:d2:51:86:8e:32:59:
03:45:5a:a7:b0:fe:25:25:29:93:d1:d9:15:22:fa:13:59:fb:
21:25:fd:2e:71:aa:b7:34:19:f9:22:9d:d9:6d:f1:a0:13:cb:
f1:e0:15:d8:7d:34:2f:07:f7:64:7b:23:77:01:5d:ef:b4:27:
34:7c:7b:b1:d6:55:a7:d1:a6:54:7e:96:83:08:06:bd:7f:62:
e0:ea:35:9d:c7:ba:22:f6:fd:ee:ba:d5:3f:a0:cf:f1:d8:57:
4d:3a:c1:d8:f1:c2:7e:23:bb:ac:bd:b1:69:37:ce:f1:3d:d2:
f9:48:01:a7:26:9b:25:0a:08:b8:1e:9a:71:b9:fa:da:58:cc:
17:08:98:b1:06:ef:83:74:19:0b:d3:ab:0c:2f:28:ec:1b:62:
db:e9:73:92:ff:c2:30:42:d3:d7:43:b8:b5:22:02:55:c2:b9:
d9:0c:31:85:04:6e:ae:96:fe:a9:07:da:b6:b7:a1:1d:7f:b0:
e8:77:d2:26:6d:f6:3e:6a:6e:c4:96:07:e6:9b:4a:a2:39:7f:
eb:01:81:d8:28:a6:33:37:5c:80:ab:27:9d:90:67:cd:a6:f0:
37:ca:1e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:12:55 2026 by rpki-client