Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier: MHyDnnqSncMDbpqrvVMtW9c717sAJd++z1c/poiE92k=
Subject key identifier: B7:66:17:43:F9:88:47:9D:11:1B:3E:6C:FF:26:CC:84:36:32:3A:1D
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial: 01A13FA72331B2B29A4605785416F2675DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number: 1AA0
Signing time: Thu 15 Oct 2026 13:01:20 +0000
Manifest this update: Thu 15 Oct 2026 13:01:20 +0000
Manifest next update: Fri 16 Oct 2026 13:01:20 +0000
Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: Tr/1CHR08mICSsDAxVVj4jXnRnLoG+a1Mr4OSfrcnMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:23:31:b2:b2:9a:46:05:78:54:16:f2:67:5d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Validity
Not Before: Oct 15 13:01:20 2026 GMT
Not After : Oct 16 13:01:20 2026 GMT
Subject: CN=b7661743f988479d111b3e6cff26cc8436323a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:2b:cf:ac:97:b3:3c:23:f1:46:d7:be:7c:
76:c7:17:cb:e0:41:50:77:f5:a9:ee:0e:5b:83:aa:
77:95:da:83:74:9a:d4:2d:96:7f:7f:dd:df:87:b2:
60:52:58:85:4d:6f:c7:ec:11:29:d4:a5:6c:d1:9a:
50:74:60:53:a8:d7:44:c0:98:e9:40:5c:e8:07:8e:
8f:15:cd:8f:4a:00:e6:56:4a:e1:b3:a8:83:00:4e:
70:00:e6:d6:69:55:6b:52:dd:1f:c0:67:98:38:10:
d9:c0:29:d4:fa:ba:7e:0c:bf:df:ae:24:6f:65:1c:
20:aa:a6:a3:ec:42:38:a4:a3:be:53:13:98:2a:f7:
35:dd:47:08:8b:6b:79:8d:b9:5b:b5:d1:18:75:3a:
89:fc:34:68:57:19:07:bb:7d:f9:61:f3:b1:dd:49:
f2:87:bc:4a:85:5c:79:1b:91:2d:88:56:8c:71:83:
a9:f1:35:39:11:56:ba:a6:90:2c:49:98:04:79:2a:
44:31:dd:5a:df:fb:42:5b:38:53:b6:e7:53:8a:29:
de:6c:03:22:5b:fe:9b:a4:92:a4:e5:25:1f:36:2f:
76:2a:6b:c2:e4:a1:9d:24:b0:eb:d7:44:0b:db:fc:
b2:7b:1b:e2:ee:a1:5d:83:85:e1:ce:a9:6e:86:9a:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:66:17:43:F9:88:47:9D:11:1B:3E:6C:FF:26:CC:84:36:32:3A:1D
X509v3 Authority Key Identifier:
keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:77:2c:14:e4:bf:83:c3:17:30:66:c2:51:02:d0:b9:5c:ca:
e0:80:24:2a:0e:7d:3b:22:57:d1:01:be:c6:73:54:67:3c:94:
ec:ea:a4:18:34:26:28:78:2c:c3:6d:76:42:a6:ce:46:2b:39:
a1:e7:21:fe:fe:d7:47:c2:cc:4d:03:c1:02:2f:bf:1d:5b:f1:
9a:e5:2e:8a:6b:4a:7b:de:44:8e:4e:d7:ec:45:23:3a:63:2f:
5d:5e:af:95:35:59:1f:b4:13:21:8a:28:3f:78:ce:94:19:eb:
22:78:71:21:5e:a3:42:15:59:25:fd:16:dd:9a:8a:d8:e9:1c:
f8:85:fc:73:cb:80:d6:39:31:8c:5a:de:2e:7d:8f:c3:f3:92:
7d:d3:b0:00:99:cb:ed:87:d3:50:33:e2:45:73:d7:3c:30:74:
17:d4:8b:9f:90:84:eb:f2:2e:ee:f0:b4:82:6a:60:39:49:e0:
c6:01:58:bb:33:0c:3b:ca:09:d6:42:8f:e3:d9:5d:15:e1:87:
43:32:6e:f2:2d:ab:3c:ba:b2:e3:19:1e:35:53:4f:8f:29:c0:
2f:0a:00:02:45:af:7b:aa:9d:6b:bd:75:05:ee:a5:d5:37:57:
0d:f6:15:1e:73:c6:12:29:67:f0:ec:d6:92:cc:c6:0f:16:0b:
1f:e5:16:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:22:11 2026 by rpki-client