Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier: XgdFHdgMFc9lOkc+XmTkmNPg8Q5Hg8mgHP4FF3jPGJo=
Subject key identifier: 96:1E:8D:44:37:71:E9:94:3E:51:49:E0:0B:4E:50:84:05:B2:42:9C
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 019F236A38E9C8E318E3C63493F4B2374938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number: 198E
Signing time: Thu 02 Jul 2026 15:19:51 +0000
Manifest this update: Thu 02 Jul 2026 15:19:51 +0000
Manifest next update: Fri 03 Jul 2026 15:19:51 +0000
Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: 7vHyD7VdshCscX2ylVgFUR3Mgrf/XuGFtS2nHAgAnL0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:6a:38:e9:c8:e3:18:e3:c6:34:93:f4:b2:37:49:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: Jul 2 15:19:51 2026 GMT
Not After : Jul 3 15:19:51 2026 GMT
Subject: CN=961e8d443771e9943e5149e00b4e508405b2429c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:0d:3a:b1:af:d9:05:cb:7a:5b:0e:66:f9:
25:bb:b5:2e:89:70:7d:a5:e7:1d:94:e1:25:8c:ad:
7b:b0:52:de:66:12:5b:ae:0a:29:03:77:ef:fc:51:
ad:96:b7:ed:e4:c0:f4:fe:3f:1d:3a:77:c9:0e:07:
77:a6:4b:63:12:0c:7f:29:7d:27:09:65:e2:1d:7f:
63:77:95:a1:7c:e6:a3:96:77:e6:cd:ba:bb:3f:df:
b1:66:7f:b8:c0:ab:ff:a5:40:3d:42:8a:0b:1c:ba:
c5:04:9b:32:5c:81:6f:5e:7e:7d:97:7c:76:58:0f:
71:d1:d7:a2:5c:c0:2d:4b:21:88:a0:26:22:6d:2a:
e4:02:f3:c8:4a:2d:ee:3e:06:67:e4:af:ad:fa:04:
a4:9c:ff:c0:1f:d8:c2:25:3c:d7:7d:9a:04:2c:3e:
eb:9a:cc:98:ae:9e:ce:8d:55:c8:d3:30:98:f5:a8:
7b:a0:9f:12:c2:05:6e:bc:20:9c:9f:ed:67:28:cb:
21:24:e9:a6:10:1b:b6:f1:5b:2c:05:9d:a3:b9:71:
14:f5:ae:59:32:52:7f:5d:53:dd:88:23:25:2f:09:
03:07:82:bf:35:9b:7a:30:ad:7d:00:2f:e6:df:23:
7d:12:a6:17:da:6f:88:d0:18:5a:51:ae:0a:d1:45:
7e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1E:8D:44:37:71:E9:94:3E:51:49:E0:0B:4E:50:84:05:B2:42:9C
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:92:4b:00:eb:39:4b:0a:42:53:6d:51:c5:7a:cb:d7:3d:b6:
01:58:09:e9:a9:66:d6:ae:89:fa:08:76:8e:97:a3:9f:23:d8:
00:b9:f2:1a:20:7d:7a:6c:1a:e1:ee:67:06:55:4a:79:6b:2e:
d6:63:5d:f4:84:41:38:fe:bf:82:3c:1a:d9:27:e2:df:98:cb:
01:81:5a:07:3c:37:98:e9:9d:7a:c0:a5:5f:bf:af:b5:f5:50:
da:02:24:7d:8c:6a:d3:49:5a:0c:d0:32:e7:28:e5:94:fc:e6:
10:65:bd:d3:01:79:0b:d3:0e:c3:9d:31:29:4b:8f:20:c8:ec:
d2:fc:a6:29:19:65:e1:87:48:d8:11:e3:c1:78:24:50:2f:97:
e4:43:4e:24:4c:fd:57:c4:a1:15:38:6c:d7:40:b1:60:82:de:
7d:ed:28:31:76:9f:6e:9b:cc:d7:30:bd:fe:75:e0:c8:d1:7e:
f4:38:b4:40:46:f4:88:0d:93:e5:5f:04:df:08:61:ab:b0:2c:
2a:8e:86:21:26:27:b1:82:36:05:45:34:37:6d:f2:bd:c1:35:
5c:62:41:c1:4f:45:f9:c8:d6:b3:42:75:df:b6:50:93:0e:f4:
43:e4:a4:31:73:45:0a:47:5d:ca:4c:02:61:57:9f:b2:8a:81:
50:43:48:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8jajjpyOMY48Y0k/SyN0k4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMGE2NzE4ZDUzOTE1NWMyNzMwMDQwMWYyYzQ2Njc1MTNl
ZWM1YjEwHhcNMjYwNzAyMTUxOTUxWhcNMjYwNzAzMTUxOTUxWjAzMTEwLwYDVQQD
Eyg5NjFlOGQ0NDM3NzFlOTk0M2U1MTQ5ZTAwYjRlNTA4NDA1YjI0MjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHkNOrGv2QXLelsOZvklu7UuiXB9
pecdlOEljK17sFLeZhJbrgopA3fv/FGtlrft5MD0/j8dOnfJDgd3pktjEgx/KX0n
CWXiHX9jd5WhfOajlnfmzbq7P9+xZn+4wKv/pUA9QooLHLrFBJsyXIFvXn59l3x2
WA9x0deiXMAtSyGIoCYibSrkAvPISi3uPgZn5K+t+gSknP/AH9jCJTzXfZoELD7r
msyYrp7OjVXI0zCY9ah7oJ8SwgVuvCCcn+1nKMshJOmmEBu28VssBZ2juXEU9a5Z
MlJ/XVPdiCMlLwkDB4K/NZt6MK19AC/m3yN9EqYX2m+I0BhaUa4K0UV+swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYejUQ3cemUPlFJ4AtOUIQFskKcMB8GA1UdIwQY
MBaAFAAKZxjVORVcJzAEAfLEZnUT7sWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMt
OWRkODU2MWNhZWRlLzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMtOWRkODU2MWNhZWRl
LzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZJLAOs5
SwpCU21RxXrL1z22AVgJ6alm1q6J+gh2jpejnyPYALnyGiB9emwa4e5nBlVKeWsu
1mNd9IRBOP6/gjwa2Sfi35jLAYFaBzw3mOmdesClX7+vtfVQ2gIkfYxq00laDNAy
5yjllPzmEGW90wF5C9MOw50xKUuPIMjs0vymKRll4YdI2BHjwXgkUC+X5ENOJEz9
V8ShFThs10CxYILefe0oMXafbpvM1zC9/nXgyNF+9Di0QEb0iA2T5V8E3whhq7As
Ko6GISYnsYI2BUU0N23yvcE1XGJBwU9F+cjWs0J137ZQkw70Q+SkMXNFCkddykwC
YVefsoqBUENImA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:46 2026 by rpki-client