Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier: rOKf0jFaOYmuBoA2D6upsJZf2WQsl5JwVVaOiPZy2ko=
Subject key identifier: 22:81:61:0B:10:4A:DA:F8:A7:B2:84:F0:4A:0C:8C:C7:A1:69:0E:4D
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial: 019F175510FDA66F140287B306A6F317FFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number: 1982
Signing time: Tue 30 Jun 2026 07:01:18 +0000
Manifest this update: Tue 30 Jun 2026 07:01:18 +0000
Manifest next update: Wed 01 Jul 2026 07:01:18 +0000
Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: ZgYWWp97uUvBLkw7PFwcDgoeK4tfMDrwNe7Hb++/tq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:55:10:fd:a6:6f:14:02:87:b3:06:a6:f3:17:ff:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Validity
Not Before: Jun 30 07:01:18 2026 GMT
Not After : Jul 1 07:01:18 2026 GMT
Subject: CN=2281610b104adaf8a7b284f04a0c8cc7a1690e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:bb:c5:3f:52:ba:91:de:8b:00:2d:3e:ec:
b2:56:3b:65:ab:37:c7:f0:e3:2f:a1:25:c9:9e:78:
32:4e:ae:ad:d1:9a:bc:90:04:94:75:01:c0:69:3d:
bb:c7:16:31:0e:d9:13:29:03:34:65:78:46:d1:d1:
00:cc:0d:3a:13:99:b0:01:00:d2:4a:52:7a:ca:23:
0b:52:12:0f:ec:a3:02:bf:e5:88:55:75:ed:6d:9a:
8a:d5:46:3e:3d:f9:bc:55:90:d9:07:c4:d5:8e:75:
27:00:1d:1e:3f:e4:92:0d:be:38:b3:1d:1e:47:94:
d6:91:5f:30:90:37:58:d5:5a:e4:85:47:63:8e:51:
02:8f:7f:c9:68:10:53:da:fe:c7:d8:49:97:6e:73:
20:2b:33:65:bc:92:39:94:23:73:14:29:70:80:23:
62:22:d0:44:fc:d0:6d:9c:53:57:95:fc:61:75:4e:
20:c1:35:18:1b:a6:80:aa:92:e1:53:f1:e7:76:fb:
b2:19:03:ef:56:c8:84:8b:1a:ea:75:29:c1:c9:f4:
a1:0f:b9:f9:6f:15:cf:7e:71:9d:44:12:bd:66:0b:
44:7b:4c:39:c8:db:6b:ee:a3:2a:b4:69:b3:46:e3:
38:34:1d:f8:f3:1f:1e:b2:4b:a3:03:62:80:ea:f8:
f0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:81:61:0B:10:4A:DA:F8:A7:B2:84:F0:4A:0C:8C:C7:A1:69:0E:4D
X509v3 Authority Key Identifier:
keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:65:37:12:07:c6:ba:04:ca:b4:38:ad:d9:43:62:db:71:41:
e1:0c:0f:b5:87:b1:e6:ff:8b:82:0d:79:30:1d:65:a7:1e:59:
26:eb:fc:73:7b:67:f3:2d:92:55:90:14:16:c6:c2:00:85:89:
77:02:3b:35:bf:6f:12:5e:63:d3:2b:f1:c7:a6:46:79:6e:4e:
2b:41:2e:ac:3a:f8:51:35:0e:c9:a9:b4:c7:44:f4:88:a5:5f:
d4:b0:71:76:58:b6:df:07:2c:26:1f:f1:c3:5c:c9:23:04:ef:
de:66:b6:a5:68:11:bd:6e:d7:9b:a1:77:6b:11:94:62:ec:22:
7c:92:d9:7a:e2:65:a3:e0:8f:b0:c1:09:7e:96:82:58:05:eb:
8f:ce:2b:d2:67:b0:f4:1f:16:ab:dd:56:0d:7e:45:cf:7d:4b:
49:42:4b:04:55:66:7c:90:98:d7:80:cb:a5:3c:00:ee:2d:6f:
6a:83:6f:25:49:d2:25:a7:3c:81:63:be:64:fb:43:00:7b:9a:
cb:14:19:9e:87:04:dc:1a:2e:87:5f:e7:f8:79:d5:cb:ff:3f:
79:63:22:c3:d3:1e:76:0e:52:c2:30:79:2a:68:0a:06:e0:c0:
d4:97:c5:29:d2:b5:d1:49:4e:38:a2:11:be:5b:c7:33:a9:66:
8a:2f:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:16:52 2026 by rpki-client