Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier: 6kFmA0xYsQWZ+5Gw+iY/LLmC5Y4F3LtiJPXAHhn4a5A=
Subject key identifier: 0D:C7:23:62:86:C7:7B:DD:E2:5F:87:84:C2:FB:D9:46:6F:84:F7:41
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 019EBE7EEF29EC1611C044F84CC5424320E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 01:00:50 +0000
Manifest this update: Sat 13 Jun 2026 01:00:50 +0000
Manifest next update: Sun 14 Jun 2026 01:00:50 +0000
Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: XrkoMs/iKMhY3YWaYpA7Eu3fdEOYRJnEFaZF9AQNY2A=)
2: C3g4bPj0WpteooCh1kAuPYqRZBg.roa (hash: 0XrpEklayrORIBGmjGj7RMMjUbxEU4fiPGHiYSn1AmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:ef:29:ec:16:11:c0:44:f8:4c:c5:42:43:20:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: Jun 13 01:00:50 2026 GMT
Not After : Jun 14 01:00:50 2026 GMT
Subject: CN=0dc7236286c77bdde25f8784c2fbd9466f84f741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:55:c7:a5:fc:60:26:08:b4:a0:59:f8:68:
a4:3c:b1:b0:54:fc:fb:ef:65:b8:49:d2:45:97:e2:
bf:e3:5f:0b:72:a7:fc:cb:a6:01:69:66:f8:2d:3a:
18:42:76:8c:04:6e:4c:90:c2:fd:4c:7a:3a:7f:99:
1e:0a:19:5f:8c:9a:05:42:81:78:5d:0b:26:83:70:
f4:f2:90:72:8e:aa:7c:d4:e1:61:37:38:db:74:79:
ea:8c:ea:12:7f:5a:8d:99:82:cf:af:d8:90:91:d0:
da:00:1d:e0:a3:09:d6:21:d4:61:99:12:a0:b0:52:
94:04:44:05:32:e9:56:9d:b8:70:95:62:f0:c8:c8:
b7:9b:ad:98:61:d5:ec:24:fe:66:15:de:c1:b9:6c:
97:c6:53:b3:a4:fc:f3:9d:86:15:ec:4c:4d:3d:04:
d1:85:99:2c:0c:a3:5e:00:37:e9:51:1e:29:5c:da:
b3:03:90:d0:f7:13:0d:9e:12:bb:9c:07:a0:8f:6a:
bc:99:37:2f:bc:b4:a8:ea:23:90:86:b0:93:7b:6d:
d8:b5:7b:58:f4:fe:81:95:c6:64:f2:fe:bb:e8:75:
be:1d:59:c4:01:53:30:96:82:a7:21:75:71:25:a1:
90:05:dc:2c:cc:d6:a9:c2:21:da:ba:cb:ff:7e:9e:
a6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C7:23:62:86:C7:7B:DD:E2:5F:87:84:C2:FB:D9:46:6F:84:F7:41
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:70:e6:57:ab:96:0d:e7:f5:0c:81:9d:77:f0:cc:8a:07:02:
8b:be:58:46:2c:ff:77:c2:a0:7b:e1:68:34:e1:97:0c:43:3e:
7d:79:52:73:df:a2:19:b6:dd:d2:ad:45:75:5a:64:b1:0c:f5:
d0:c5:b0:8b:79:39:f6:c1:27:51:09:d5:71:db:a4:7f:af:fd:
96:42:ac:3a:36:7d:89:09:32:23:d3:fd:91:29:3d:49:71:52:
87:bb:c8:ad:23:e7:19:e7:49:28:04:af:7c:8a:fb:bf:a8:f1:
ee:eb:c1:21:9f:5a:f2:cb:40:a2:08:f2:aa:13:58:d6:51:53:
f1:27:36:2a:65:a1:9a:f9:fd:39:eb:cc:64:f1:b9:9e:26:06:
99:f1:73:ef:a9:8f:67:cb:29:98:12:10:6d:9c:5e:34:57:87:
bf:4d:91:a5:cb:3d:f8:83:f5:9a:12:ff:2c:91:39:15:a7:da:
e4:56:e1:9b:db:f4:23:fc:df:4b:cc:de:99:85:58:81:30:ac:
7f:9e:51:f1:ea:3e:a1:9c:3b:2a:f6:90:8d:d8:aa:66:f1:ce:
9a:22:35:37:e7:ad:3f:74:69:42:c8:c5:5f:64:e9:9e:9a:4b:
78:31:f3:f3:cf:6b:cf:cb:e1:05:2f:93:1b:c3:7f:4c:3f:e1:
58:09:67:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:22 2026 by rpki-client