Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File: A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier: bhDCRz6CI5IninJh5yW7VnkrHdmcBmhf9P61nc06xDs=
Subject key identifier: FE:14:5B:E5:F3:BF:54:BE:7F:14:F2:4D:CD:C5:F3:E4:B8:18:4A:7B
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer: /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial: 019FAB9A0F350BA5BE6BD8EB0B4ACEAD1FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number: 0870
Signing time: Wed 29 Jul 2026 02:00:28 +0000
Manifest this update: Wed 29 Jul 2026 02:00:28 +0000
Manifest next update: Thu 30 Jul 2026 02:00:28 +0000
Files and hashes: 1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: z7hodOJorb9oxIDINMzFJesdmw2mKHcKiDIF3lS2TBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:0f:35:0b:a5:be:6b:d8:eb:0b:4a:ce:ad:1f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Validity
Not Before: Jul 29 02:00:28 2026 GMT
Not After : Jul 30 02:00:28 2026 GMT
Subject: CN=fe145be5f3bf54be7f14f24dcdc5f3e4b8184a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:f6:d1:7e:bc:60:03:52:c9:a9:c0:7b:57:
77:cc:b2:e5:30:90:f4:ac:3f:9f:08:28:05:86:48:
5f:fb:d4:42:f1:b6:5f:59:18:79:bf:39:03:e3:19:
ca:cb:cf:5b:fb:f1:99:cd:73:6f:3a:1a:cd:de:a1:
56:7c:f2:46:9f:15:df:b0:b7:73:ac:64:60:36:d2:
13:4b:a5:92:fc:99:7d:f7:c9:aa:3d:48:e7:c6:a1:
f1:46:fb:ed:14:c3:40:b1:b3:1b:fe:46:d4:70:76:
0e:16:db:e4:4a:88:4d:9a:91:f3:1e:ea:5c:05:12:
04:6a:74:27:0b:fe:47:bd:4f:ab:94:0e:6c:23:40:
a9:77:02:57:db:12:c6:a2:f7:6e:c9:fb:32:ec:40:
50:4c:86:c8:d3:4f:71:ee:9d:8c:c9:8c:93:61:f0:
3e:b4:6e:9c:7b:9e:92:b8:3c:c6:33:35:1b:4d:c0:
58:0b:12:88:57:dc:2f:9a:49:d3:b9:92:58:ea:77:
72:26:b6:6c:bb:ce:a6:44:b6:fa:1b:25:46:2e:cb:
3a:9e:ab:e1:fe:42:3f:13:d2:48:a2:a0:e1:05:f6:
f3:ad:15:a5:fd:7b:68:f3:26:44:12:4f:bd:51:58:
ec:f8:ca:4c:05:ec:42:7d:c2:1e:65:c4:f1:70:ba:
ef:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:14:5B:E5:F3:BF:54:BE:7F:14:F2:4D:CD:C5:F3:E4:B8:18:4A:7B
X509v3 Authority Key Identifier:
keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e4:da:35:0d:4d:19:4c:71:06:90:da:e8:28:6b:5c:01:b2:
93:86:7f:b9:94:59:b7:61:81:61:7b:95:c5:4d:d8:78:cb:a8:
c6:2d:b6:4a:46:bd:76:e3:4e:bf:7f:23:19:61:7d:25:3a:00:
4d:9c:a8:5f:fe:46:59:83:67:0d:88:75:8a:db:a9:4f:a4:d5:
b7:c4:29:50:f3:cb:63:25:c8:da:32:ac:d3:3b:9c:80:5d:20:
49:11:bd:ea:45:b5:55:88:67:df:37:91:c9:bf:84:13:ce:fa:
fb:1a:8b:9b:3a:90:99:74:c3:df:c2:f2:d5:75:cd:8a:b2:a0:
2b:ba:31:23:1c:7d:46:77:0b:95:e1:fb:cf:ae:93:4e:ac:01:
1b:8f:e0:50:96:19:19:07:c7:3c:eb:00:46:d3:cd:a1:c3:f8:
50:2b:95:29:9b:51:cf:5c:3b:c3:30:67:31:2c:5d:c1:b0:66:
15:0b:7f:03:87:8a:65:2e:eb:d1:0f:18:72:15:b7:66:d8:8d:
c9:32:0a:cc:e2:b2:8b:26:56:33:db:7a:ea:1f:14:53:d9:54:
aa:f9:e5:22:1f:bd:82:6a:da:37:da:70:96:8a:74:7f:4a:94:
71:10:3b:b0:16:cf:ae:fa:c5:39:ec:ee:ee:ac:47:5d:65:05:
f0:dc:ca:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:04 2026 by rpki-client