Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File: A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier: qJOhcQO0hJSl0k2dHLnEU55xjKkMFwR0ocd91W6NxF0=
Subject key identifier: 7E:5C:17:F0:A4:84:B2:20:0A:E1:52:63:28:69:EA:C7:4D:0B:87:70
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer: /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial: 019D988625C4E3031E424A629DF124A2169A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number: 075D
Signing time: Thu 16 Apr 2026 23:00:21 +0000
Manifest this update: Thu 16 Apr 2026 23:00:21 +0000
Manifest next update: Fri 17 Apr 2026 23:00:21 +0000
Files and hashes: 1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: lfxIx4uihr/k0QPdXaOllUTVIevmiSW/hJwTjCnpsX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:25:c4:e3:03:1e:42:4a:62:9d:f1:24:a2:16:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Validity
Not Before: Apr 16 23:00:21 2026 GMT
Not After : Apr 17 23:00:21 2026 GMT
Subject: CN=7e5c17f0a484b2200ae152632869eac74d0b8770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:56:17:2c:29:21:c3:fa:f2:ae:7c:c8:54:
0c:f2:bf:75:6f:75:cb:7c:ce:69:85:49:72:47:14:
9b:1d:87:0a:09:84:a3:08:1f:47:86:d8:40:bf:95:
9d:ef:5d:6e:29:f0:41:ea:23:dc:3e:64:77:6d:d7:
82:e1:0e:24:b8:a9:61:4b:80:ca:ac:a8:d5:0a:5d:
2b:d8:16:48:9f:d5:a7:2a:80:2c:fe:54:3a:0d:6b:
f6:20:1e:2f:fc:32:1f:d1:7d:48:a3:3a:f3:da:fb:
e7:1c:01:9d:7e:c9:db:fd:62:ef:8c:ed:f5:3f:97:
17:61:16:d6:e5:f1:f9:19:04:b7:07:d5:e4:70:55:
d8:c8:cf:bb:45:cc:90:b3:ef:c9:8a:27:c0:c6:f0:
62:79:f4:73:26:33:33:9f:fa:f1:a4:2f:3d:3e:fa:
07:ae:7b:c4:b8:ce:65:9f:b7:5d:f6:36:2f:1c:5b:
77:51:63:83:fa:46:31:97:d4:d2:d3:21:9e:3b:e6:
9e:03:6c:d2:be:7e:fb:da:d2:17:7f:44:ec:9d:34:
eb:c1:00:cf:93:4a:11:c1:d1:9d:2d:09:66:c8:46:
48:a2:92:23:9c:e4:51:05:90:15:f2:3b:dc:1f:37:
48:6f:2f:f8:1d:f5:4d:4b:bd:49:f5:fd:d5:06:8d:
2e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5C:17:F0:A4:84:B2:20:0A:E1:52:63:28:69:EA:C7:4D:0B:87:70
X509v3 Authority Key Identifier:
keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:90:72:26:0b:9f:cd:f7:5e:33:37:7e:53:36:57:c8:4f:8f:
17:85:27:38:1e:ee:5d:f7:5b:6b:83:c3:e4:55:46:56:14:2c:
bc:17:02:37:68:05:1e:89:26:ac:db:64:f9:8e:36:33:d2:34:
eb:a5:77:04:71:d4:02:d0:1f:b3:d5:84:b2:1e:54:43:0e:b6:
3e:6c:13:94:e5:7b:17:84:36:b9:72:a8:47:d6:1e:a6:55:33:
15:b3:ca:2a:7f:20:c5:13:b6:0f:c3:f6:35:66:85:6f:f9:39:
63:7c:99:1a:bf:a0:b0:6b:2a:c9:ca:82:04:01:99:e6:3b:2d:
6f:56:7f:07:3a:06:75:b0:e0:d5:1f:63:3b:1e:34:93:95:66:
75:fa:40:2d:e7:5c:33:41:cb:5c:fe:55:62:d8:f0:19:a4:83:
d7:52:86:4c:1c:d2:ff:9d:19:0c:d9:4e:b5:e2:a7:62:bc:c6:
d3:49:4d:6b:d7:7a:b7:72:e9:72:db:ad:97:4f:f2:0e:be:19:
ee:6f:47:42:65:60:85:a8:a0:32:89:55:33:ac:4c:f7:99:59:
58:04:65:40:63:77:05:3f:40:f6:5c:be:fd:64:2a:b2:93:51:
e5:ad:11:25:2b:65:d2:10:6f:e2:61:e9:16:97:87:a8:97:1d:
5e:2a:bc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:31:13 2026 by rpki-client