Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/bdfd51-7536-44e4-87c6-47955851c404/1/AqJiyF60Ef9vdPLS902bAm25EEQ.mft
File: AqJiyF60Ef9vdPLS902bAm25EEQ.mft (raw, json)
Hash identifier: Y+uyonVZIWPaQeW5gEatIpyFEVOZMLaNeS9cHMDczAY=
Subject key identifier: 47:9D:DE:8E:2C:49:FD:0C:4D:2A:74:C3:79:F9:F2:99:15:FF:58:0B
Authority key identifier: 02:A2:62:C8:5E:B4:11:FF:6F:74:F2:D2:F7:4D:9B:02:6D:B9:10:44
Certificate issuer: /CN=02a262c85eb411ff6f74f2d2f74d9b026db91044
Certificate serial: 01A03FE05C5E3B2DAC600BF065E911B06070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqJiyF60Ef9vdPLS902bAm25EEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/bdfd51-7536-44e4-87c6-47955851c404/1/AqJiyF60Ef9vdPLS902bAm25EEQ.mft
Manifest number: 4F
Signing time: Wed 26 Aug 2026 21:01:03 +0000
Manifest this update: Wed 26 Aug 2026 21:01:03 +0000
Manifest next update: Thu 27 Aug 2026 21:01:03 +0000
Files and hashes: 1: AqJiyF60Ef9vdPLS902bAm25EEQ.crl (hash: Bd6on9sx600IgrFXEQ3Ng9P0FKFVKE+bV+fyx6WDUnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/bdfd51-7536-44e4-87c6-47955851c404/1/AqJiyF60Ef9vdPLS902bAm25EEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/bdfd51-7536-44e4-87c6-47955851c404/1/AqJiyF60Ef9vdPLS902bAm25EEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqJiyF60Ef9vdPLS902bAm25EEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:5c:5e:3b:2d:ac:60:0b:f0:65:e9:11:b0:60:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a262c85eb411ff6f74f2d2f74d9b026db91044
Validity
Not Before: Aug 26 21:01:03 2026 GMT
Not After : Aug 27 21:01:03 2026 GMT
Subject: CN=479dde8e2c49fd0c4d2a74c379f9f29915ff580b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:00:30:4b:d9:4f:a8:d2:1f:bd:56:95:43:8c:
5e:f4:21:d0:0f:10:e4:3e:6b:8b:91:51:e7:26:b9:
e2:18:d5:30:07:f5:7b:74:34:89:f5:e5:59:18:fd:
ed:de:ad:6d:de:9d:a4:40:b7:87:19:de:fc:7e:f2:
a4:09:1a:a2:9f:4e:05:70:3d:f4:ea:b6:f6:bc:a6:
d2:5a:eb:e2:51:ec:8c:e6:a2:70:60:89:63:66:51:
e4:d1:21:84:34:0c:1c:c1:c3:0c:86:e7:12:ce:c0:
b0:1b:47:3f:65:7a:e2:b0:94:df:e7:f9:60:7f:a9:
7f:80:2b:79:aa:8b:4c:32:2f:a8:49:d6:17:3b:a2:
ac:aa:2b:a3:79:99:2b:3a:93:a6:9e:82:cf:bd:a3:
e2:89:fd:9e:18:a6:d9:77:87:f3:10:e8:f3:26:ef:
9c:6d:86:04:c5:bd:96:98:e4:7f:46:0f:02:1b:ed:
3d:89:13:50:b6:c1:67:39:87:96:17:9a:e0:0c:49:
fd:f1:62:71:47:7a:ec:33:6f:39:dc:f0:67:6b:1a:
94:cb:47:99:90:f1:76:31:cf:4e:b5:15:ed:0b:b4:
7f:32:00:85:71:b5:fc:d4:38:ad:80:7f:df:06:3e:
8a:ad:fb:ea:c3:e4:77:be:06:74:49:fd:0a:fe:79:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:9D:DE:8E:2C:49:FD:0C:4D:2A:74:C3:79:F9:F2:99:15:FF:58:0B
X509v3 Authority Key Identifier:
keyid:02:A2:62:C8:5E:B4:11:FF:6F:74:F2:D2:F7:4D:9B:02:6D:B9:10:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqJiyF60Ef9vdPLS902bAm25EEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/bdfd51-7536-44e4-87c6-47955851c404/1/AqJiyF60Ef9vdPLS902bAm25EEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/bdfd51-7536-44e4-87c6-47955851c404/1/AqJiyF60Ef9vdPLS902bAm25EEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:b1:34:a4:d8:43:e7:f5:71:7f:d5:67:a6:ce:2b:78:64:2c:
91:3c:55:82:9e:e1:98:5a:10:6d:b2:b3:09:0c:a3:04:ad:ae:
b8:9b:cd:8e:15:24:50:2e:99:d7:00:63:9d:d2:88:e1:b5:c3:
f7:96:e7:e4:93:89:dd:67:38:b6:68:93:52:86:8f:be:85:e7:
43:52:5a:30:92:1f:cb:13:0a:2c:bc:ca:a6:d7:7c:26:7b:96:
dc:b4:f3:fb:fa:3a:5d:ec:32:35:ee:7e:19:58:4d:e2:f8:74:
b6:50:1b:c6:21:f9:54:20:b4:9e:ac:86:02:67:5b:23:fe:bd:
11:e1:52:26:52:97:a5:30:31:85:28:7a:63:26:a4:75:36:76:
da:e0:37:2f:6d:b2:1d:b1:6a:10:ab:3d:b3:c8:d2:70:db:38:
a0:da:a2:21:89:57:e1:13:00:9c:a9:05:3b:2a:45:f3:bc:a4:
d2:aa:36:d9:d3:b2:3f:5d:cc:63:4e:c6:35:52:fc:4f:df:7f:
b0:72:0f:d8:a3:bc:53:58:67:b0:35:a6:e1:0d:6a:40:c6:66:
8e:1d:dc:67:bb:0b:58:b4:ea:b9:35:67:b4:19:8b:ea:78:7f:
23:80:ec:b3:33:c8:a8:e1:38:36:07:17:70:51:71:bb:e0:ce:
50:08:51:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:44:49 2026 by rpki-client