Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier: +mejDUbieniVahMeIKm2acm01Mqhjox3ZvbsJ/T+JSk=
Subject key identifier: 2B:55:49:A8:73:09:61:69:3F:C7:CD:47:F1:7C:60:B1:51:0C:77:B8
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 019CAD594D11326145F8F35EBAE1219B7444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 07:00:36 +0000
Manifest this update: Mon 02 Mar 2026 07:00:36 +0000
Manifest next update: Tue 03 Mar 2026 07:00:36 +0000
Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: RMDg4F2dAJleIZ378JcZg+vjtFVRe2ZqgBVVn826NLk=)
2: C3g4bPj0WpteooCh1kAuPYqRZBg.roa (hash: 0XrpEklayrORIBGmjGj7RMMjUbxEU4fiPGHiYSn1AmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:4d:11:32:61:45:f8:f3:5e:ba:e1:21:9b:74:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: Mar 2 07:00:36 2026 GMT
Not After : Mar 3 07:00:36 2026 GMT
Subject: CN=2b5549a8730961693fc7cd47f17c60b1510c77b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:65:b7:9b:bb:ab:b5:d1:c0:6d:d5:0a:76:de:
b2:40:8a:86:e6:de:ff:de:f5:40:bc:95:08:0b:9d:
9e:fc:0e:0d:bb:bd:ac:e9:b1:37:ef:48:d0:a1:12:
09:46:df:9e:34:43:9f:9c:46:5c:c0:a2:ad:fe:a6:
31:6a:a9:a7:c5:8c:a3:60:29:42:a8:2f:7d:bc:62:
b4:2c:24:85:b0:4e:d6:b4:21:65:54:7e:ca:97:23:
2c:10:43:54:1d:08:a9:99:24:61:05:f3:16:26:60:
b6:cd:57:4a:ad:f0:ef:5e:9c:5e:70:48:bd:3f:d2:
2f:2d:53:ed:06:de:0b:19:af:36:e8:84:77:7c:1e:
af:d1:d1:43:41:ac:d2:c1:5a:6f:0f:25:ab:04:ff:
0d:5c:e7:18:19:08:8d:a2:d4:87:97:d1:c7:eb:9d:
77:b6:1e:04:e5:fa:3a:69:ad:48:37:22:d7:3f:9c:
f3:c6:72:29:75:b7:80:10:f7:c4:fe:b6:dc:3b:27:
22:19:51:49:b8:0a:d0:68:45:3d:0a:22:ab:a0:85:
b9:66:ec:46:fd:75:df:cf:61:cb:8c:0c:87:11:20:
2a:85:b4:4a:3d:f2:2d:8d:7c:f8:e3:a4:e1:c8:42:
82:9f:a5:f4:8b:63:f4:de:fa:37:47:2d:07:3b:66:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:55:49:A8:73:09:61:69:3F:C7:CD:47:F1:7C:60:B1:51:0C:77:B8
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d9:ef:b1:e4:cb:dd:7f:30:81:64:6e:b5:53:c4:38:2c:ae:
59:0e:3c:b7:e1:70:43:0b:8c:03:db:85:9d:4d:c2:12:d9:91:
c3:2f:24:67:cf:d0:b1:03:e2:0a:04:6f:61:47:14:8d:c1:76:
d6:79:51:0a:ba:ab:9f:65:67:84:d5:ee:9b:24:af:cc:14:cf:
6d:15:a7:93:df:a3:bf:36:da:32:95:9b:b5:6d:f5:70:44:75:
61:8c:85:ef:b1:9f:48:95:7a:0c:a8:8e:a7:6d:a5:c7:af:25:
50:ac:c7:79:e0:e0:f5:bd:af:4a:e6:24:1a:cd:05:11:1e:24:
67:57:c9:51:c8:34:0d:b2:b0:f3:98:3d:8b:ee:4a:82:e8:94:
aa:7d:09:94:7f:33:0d:7c:63:81:97:c0:c6:a0:31:d6:74:94:
b6:33:01:85:05:dc:54:bd:e2:8e:f9:91:7f:b8:2b:0a:ad:0f:
37:4f:29:d3:fb:13:52:a0:cd:89:ce:fe:df:9a:13:86:11:0a:
f4:df:81:52:a4:b8:a3:51:0e:b0:7b:87:5e:16:97:ae:0d:56:
29:f7:43:11:7b:4f:5f:5e:e3:92:76:79:43:d6:09:d7:c8:3e:
10:1e:f0:88:9b:36:be:08:2e:4c:82:19:97:0d:9c:c1:21:58:
94:6e:c3:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWU0RMmFF+PNeuuEhm3REMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMGE2NzE4ZDUzOTE1NWMyNzMwMDQwMWYyYzQ2Njc1MTNl
ZWM1YjEwHhcNMjYwMzAyMDcwMDM2WhcNMjYwMzAzMDcwMDM2WjAzMTEwLwYDVQQD
EygyYjU1NDlhODczMDk2MTY5M2ZjN2NkNDdmMTdjNjBiMTUxMGM3N2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2W3m7urtdHAbdUKdt6yQIqG5t7/
3vVAvJUIC52e/A4Nu72s6bE370jQoRIJRt+eNEOfnEZcwKKt/qYxaqmnxYyjYClC
qC99vGK0LCSFsE7WtCFlVH7KlyMsEENUHQipmSRhBfMWJmC2zVdKrfDvXpxecEi9
P9IvLVPtBt4LGa826IR3fB6v0dFDQazSwVpvDyWrBP8NXOcYGQiNotSHl9HH6513
th4E5fo6aa1INyLXP5zzxnIpdbeAEPfE/rbcOyciGVFJuArQaEU9CiKroIW5ZuxG
/XXfz2HLjAyHESAqhbRKPfItjXz446ThyEKCn6X0i2P03vo3Ry0HO2b6GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtVSahzCWFpP8fNR/F8YLFRDHe4MB8GA1UdIwQY
MBaAFAAKZxjVORVcJzAEAfLEZnUT7sWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMt
OWRkODU2MWNhZWRlLzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMtOWRkODU2MWNhZWRl
LzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9nvseTL
3X8wgWRutVPEOCyuWQ48t+FwQwuMA9uFnU3CEtmRwy8kZ8/QsQPiCgRvYUcUjcF2
1nlRCrqrn2VnhNXumySvzBTPbRWnk9+jvzbaMpWbtW31cER1YYyF77GfSJV6DKiO
p22lx68lUKzHeeDg9b2vSuYkGs0FER4kZ1fJUcg0DbKw85g9i+5KguiUqn0JlH8z
DXxjgZfAxqAx1nSUtjMBhQXcVL3ijvmRf7grCq0PN08p0/sTUqDNic7+35oThhEK
9N+BUqS4o1EOsHuHXhaXrg1WKfdDEXtPX17jknZ5Q9YJ18g+EB7wiJs2vgguTIIZ
lw2cwSFYlG7DAA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:07 2026 by rpki-client