Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File: A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier: cgDg9MnFXy/Sl/+nufw+Wsuu9oDm1QftPpcigoUPbRI=
Subject key identifier: FC:74:1A:24:35:47:F3:C7:40:03:0A:6F:EB:3D:34:CF:11:6B:20:FF
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer: /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial: 019CACEBFB1E6E6309D058DDB002F9432198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number: 06E3
Signing time: Mon 02 Mar 2026 05:01:12 +0000
Manifest this update: Mon 02 Mar 2026 05:01:12 +0000
Manifest next update: Tue 03 Mar 2026 05:01:12 +0000
Files and hashes: 1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: x7/jTCgFn6iqTyBFctHmSpueOvnwQAS0ji+QS6OR+sM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:fb:1e:6e:63:09:d0:58:dd:b0:02:f9:43:21:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Validity
Not Before: Mar 2 05:01:12 2026 GMT
Not After : Mar 3 05:01:12 2026 GMT
Subject: CN=fc741a243547f3c740030a6feb3d34cf116b20ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e0:71:50:9a:14:fa:35:ce:b2:02:43:88:4f:
69:f9:f4:d3:f4:ee:22:3d:93:83:75:9b:d7:1c:82:
f9:15:f4:86:a7:51:d7:11:bb:10:23:65:6a:5d:1a:
8c:65:04:1e:80:76:ee:a1:a1:c9:7c:11:3c:0a:69:
aa:09:84:75:09:0a:cb:de:b2:f5:96:74:39:9d:61:
97:61:e1:b0:05:69:5c:cf:25:f0:63:98:b2:a9:bc:
c3:74:93:c5:2d:b4:d5:a5:03:bf:de:cf:46:46:3a:
51:20:a6:ea:83:59:74:69:b1:9c:c7:f2:bc:bf:4a:
03:b8:73:d2:7f:b9:bc:0d:89:0e:ca:2e:bf:fa:df:
77:c8:59:70:a3:06:2c:49:b8:ba:0b:56:34:18:91:
01:f0:b5:4d:57:5c:37:42:d0:eb:66:71:b4:0e:90:
91:50:4c:28:3c:97:6a:70:21:fd:c6:d0:0e:6f:53:
6c:e2:42:45:15:0e:b2:57:b7:7b:37:a3:b6:4f:d7:
6f:66:a9:87:40:b9:a5:09:c7:2d:76:cd:fe:7e:1f:
21:86:c9:88:96:bf:d0:8d:3c:b6:b3:87:42:69:cf:
0d:25:2a:e7:e7:7d:ff:a5:a6:ba:f0:fa:97:f4:5a:
df:16:7b:41:2f:ed:02:45:54:59:c2:da:60:50:0c:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:74:1A:24:35:47:F3:C7:40:03:0A:6F:EB:3D:34:CF:11:6B:20:FF
X509v3 Authority Key Identifier:
keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b1:72:4a:88:e5:05:d1:bc:78:18:45:93:a4:27:aa:8c:9c:
b3:34:d3:fa:6e:25:8d:35:ca:81:db:3d:0b:b1:c6:73:ce:1e:
ba:f4:ac:ee:cb:44:37:67:11:66:dd:aa:02:f2:18:c9:c4:3a:
39:d1:74:23:d5:a9:2f:71:05:f7:17:dd:4f:88:d0:d2:d4:42:
06:18:c7:ab:31:dd:aa:5d:55:7e:3c:63:6e:1d:3f:ae:8f:75:
fe:5e:f2:74:86:73:ec:c7:54:87:35:ca:c7:ec:90:b4:f5:4d:
85:30:d0:13:cf:a0:f1:d1:be:44:e1:c1:88:fa:ad:78:9c:00:
6b:f6:8f:36:12:63:11:dd:ec:c5:be:81:43:68:2c:4b:94:33:
32:bc:e9:cd:a2:48:69:59:e7:68:64:51:59:23:22:26:18:88:
c2:df:17:73:c7:98:a0:24:d0:25:06:fc:7a:0e:29:15:79:a6:
0a:4a:e1:17:95:6f:88:34:30:38:95:ba:28:5d:c7:ff:3c:ee:
46:e5:4e:49:ed:65:fd:d4:3d:8a:9a:13:eb:b1:16:ee:fc:97:
3f:5e:3d:8c:6f:14:e8:cf:89:55:4e:ae:ed:e3:bb:ac:59:44:
2b:c8:38:f7:26:15:5a:76:3f:ad:7a:bc:d5:50:5c:30:7b:21:
71:57:67:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:20 2026 by rpki-client