Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: 05zoG7fAZH8oHS2SlrLvcpNCZCScZRwHqgY8YLiAYJ4=
Subject key identifier: 52:95:93:C1:12:5B:6D:19:BA:D2:9E:B9:EC:FD:2C:40:74:B3:B9:50
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 01A14083305F1C5A1D0B7AD14BF217A9BDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 17:01:41 +0000
Manifest this update: Thu 15 Oct 2026 17:01:41 +0000
Manifest next update: Fri 16 Oct 2026 17:01:41 +0000
Files and hashes: 1: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: 2Yu9xs70jAkPDbI4fN1W7dAhEwWgQQzqQ7dPmH/2AJg=)
2: c_alN_JA7apsyl_BS-E6Z48h5Lo.roa (hash: 9m6A8du+wfSb5HoPz+iZYyejsTIMn6Cv42VUwR2/YnI=)
3: pHyfE-IkMhxcPHPc-HwDzXsFVjQ.roa (hash: uyoFgMWyTuoY09i37tyWsmZah+QoAHk4CSzGk/eiO5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:30:5f:1c:5a:1d:0b:7a:d1:4b:f2:17:a9:bd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Oct 15 17:01:41 2026 GMT
Not After : Oct 16 17:01:41 2026 GMT
Subject: CN=529593c1125b6d19bad29eb9ecfd2c4074b3b950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:71:bb:35:ca:28:91:89:e1:69:bc:db:68:
f0:a7:39:0c:7d:56:79:48:ed:90:34:ad:ac:96:24:
cc:5b:65:66:ec:05:ad:82:81:e9:a0:cf:c4:d8:13:
2c:7c:63:22:92:8d:7b:2c:46:88:e8:79:48:59:68:
79:94:fd:6b:bf:3c:9b:97:12:3b:40:ef:70:6a:c9:
32:6c:6c:bf:85:79:b4:92:cd:45:c8:21:40:aa:57:
21:17:bb:7a:38:8b:06:fc:9f:fc:82:32:5b:73:58:
cb:45:d4:f7:b2:c3:87:44:f4:03:85:25:ed:49:44:
db:a7:39:06:1c:ff:3c:00:95:2d:dc:6c:17:e5:7c:
c0:81:a2:fb:b3:e2:ec:6a:09:43:43:bd:f0:19:0a:
1b:6f:30:70:93:9b:9f:4d:d3:82:b3:0b:c7:8e:fc:
0d:8e:83:4a:b4:a6:f4:c8:f8:e2:00:9a:22:da:38:
38:c7:fb:59:04:67:6f:a1:eb:71:99:f2:3b:ca:18:
49:33:d1:4b:7f:be:9d:27:1f:1b:85:a1:88:f9:59:
9d:c0:dc:0b:5a:32:2f:6f:47:3d:f1:8b:d9:f7:97:
36:2f:f5:46:cf:5e:2d:0a:c8:55:09:71:9a:0a:b3:
3f:40:c0:a3:ef:98:90:6a:32:fb:92:59:f3:57:41:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:95:93:C1:12:5B:6D:19:BA:D2:9E:B9:EC:FD:2C:40:74:B3:B9:50
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:92:30:ce:67:d8:58:c1:64:37:2f:fd:ed:29:b0:12:64:02:
84:65:96:60:6a:7f:f9:d7:fb:7b:2a:ef:15:38:f2:53:b2:f9:
8e:0d:33:1e:9b:a4:d8:a3:49:6f:73:5e:1f:f9:71:4a:45:74:
92:e6:da:2f:82:2e:78:f7:d1:9f:fb:09:69:0f:28:d3:7f:76:
76:73:bc:d4:7b:ac:3b:e8:b7:d5:a8:a9:17:5c:a7:c3:b5:ee:
d7:ba:6e:f1:9b:21:2f:be:68:94:d3:d3:8a:85:85:5a:a1:bc:
11:0a:e5:92:77:30:f1:34:15:65:12:12:3e:e4:1f:28:b2:89:
29:3f:45:cb:df:8c:ab:b8:5a:4d:05:b7:95:c4:59:f5:59:32:
18:32:d7:e9:01:73:a8:6a:00:58:8b:ff:13:ef:08:1a:1a:73:
c7:36:04:21:4d:cb:25:64:10:9d:c1:ae:5e:fd:58:a8:75:7e:
8d:af:b2:f8:0e:e8:bb:ba:f9:cc:52:3d:89:40:a2:14:b3:76:
fd:f3:d0:d1:dc:5e:eb:22:ba:12:0c:1d:98:9e:f0:ef:98:f2:
54:a4:91:3a:cb:b2:db:97:14:5d:aa:ae:1a:67:b2:fd:6c:eb:
50:6a:f0:32:ba:e7:66:39:e4:23:33:4d:c7:1a:10:4f:23:28:
93:d1:ba:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:58:02 2026 by rpki-client