Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
File: AaVsQu18uWPyhVA87AYG1g0Ks4c.mft (raw, json)
Hash identifier: ub9Fgu4oMsmAZt1kmaDguuXiUBOytQv4MeEaTV5oxL4=
Subject key identifier: 4B:A7:B7:83:4A:0B:0C:99:B2:E3:77:29:50:60:75:75:6D:4B:EB:5A
Authority key identifier: 01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
Certificate issuer: /CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Certificate serial: 019FF91142B8CC781033F4FF3D64ED1EB616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
Manifest number: 12C8
Signing time: Thu 13 Aug 2026 03:01:25 +0000
Manifest this update: Thu 13 Aug 2026 03:01:25 +0000
Manifest next update: Fri 14 Aug 2026 03:01:25 +0000
Files and hashes: 1: AaVsQu18uWPyhVA87AYG1g0Ks4c.crl (hash: iVdk4CKL3EJUaRlJSu6uc0zTlbGCx09DcHkvqZQ1YMk=)
2: NSYoMgdv_GgQV27_GIPye5U9jPQ.roa (hash: 4AlK45WxtVu086BCXSG5HnwL06CQHoIesX5EAX9HMxU=)
3: RQ8JIGxsT6j17dfeEPWw2-YRi2c.roa (hash: qbacCBbHQjk4PtD2GWcsUuyb/kcc9ZQ6pfK2TjjwNeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:11:42:b8:cc:78:10:33:f4:ff:3d:64:ed:1e:b6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a56c42ed7cb963f285503cec0606d60d0ab387
Validity
Not Before: Aug 13 03:01:25 2026 GMT
Not After : Aug 14 03:01:25 2026 GMT
Subject: CN=4ba7b7834a0b0c99b2e37729506075756d4beb5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:88:0f:1e:1b:6e:da:48:ad:18:50:6c:14:75:
f7:57:34:d5:c9:3e:b0:99:69:39:b2:bc:8d:59:ea:
0f:91:d4:56:06:36:9e:2e:4c:d4:80:75:3a:ba:f4:
63:aa:74:3d:57:6f:ef:e6:d7:bb:d1:2d:a5:da:41:
75:ce:c1:da:cc:d2:cc:9d:b1:65:5e:ee:30:ae:5d:
23:c8:54:8b:b2:44:e6:3d:16:63:81:ae:20:63:6e:
94:d1:9d:78:91:11:41:5c:dd:f6:40:48:83:51:97:
54:02:c0:8a:4b:dd:b2:c9:99:c7:e4:3b:ae:a5:f7:
18:3c:a8:69:35:53:ad:5c:d7:3d:9a:42:fd:33:93:
98:2f:72:44:a8:fd:e1:02:41:15:ec:dd:53:30:09:
fc:5a:ac:b0:67:ce:c0:46:c3:f5:bb:a1:71:0f:9d:
0a:cf:38:c7:51:af:d2:92:24:c1:d7:7a:a5:b6:c7:
89:f7:cc:e7:39:77:a0:7b:cd:7a:ca:b6:c6:ad:87:
3c:6f:a7:5e:3a:e7:b4:c6:f6:94:84:f8:c4:64:e6:
20:6b:c9:08:01:fd:ee:0a:de:b0:d8:52:6e:ce:5c:
62:91:c7:b7:8d:75:1b:b6:07:16:8a:d3:e4:4e:22:
ea:95:62:9b:ea:72:53:9f:d5:d7:cb:97:70:e2:2b:
f7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A7:B7:83:4A:0B:0C:99:B2:E3:77:29:50:60:75:75:6D:4B:EB:5A
X509v3 Authority Key Identifier:
keyid:01:A5:6C:42:ED:7C:B9:63:F2:85:50:3C:EC:06:06:D6:0D:0A:B3:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaVsQu18uWPyhVA87AYG1g0Ks4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/99cfe5-4b35-49c7-9a73-ed07f5cad6d7/1/AaVsQu18uWPyhVA87AYG1g0Ks4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d7:d3:56:46:83:0d:68:dd:a5:1e:e0:c4:1e:ce:9d:5c:d8:
bd:69:82:21:7e:1d:49:74:05:f8:5a:fe:eb:ee:08:33:13:f4:
cb:08:5f:9b:a8:2b:1e:6c:68:1a:9c:e5:42:e1:aa:4c:04:fc:
e4:60:ba:d6:31:b0:4e:3c:0a:23:25:57:2b:f6:48:1a:c4:6c:
3a:6d:6d:da:ce:d5:47:38:54:98:5b:6d:89:e4:4f:0b:3f:57:
1b:5d:46:16:ca:02:8c:b4:79:53:d9:cc:6d:9a:b4:07:57:0f:
64:4f:c9:cb:47:5a:14:b6:ca:cc:fe:12:7b:8a:e1:53:6b:66:
2d:15:94:30:ba:54:d6:57:ca:14:ec:3b:7a:1b:e4:09:47:b7:
0b:24:39:fb:ff:c3:43:2d:4d:4d:0b:68:ab:d1:a3:1b:05:74:
30:52:b6:1b:c8:cb:31:83:37:19:aa:20:e7:ea:ea:a1:61:f8:
3f:90:0d:32:33:05:72:0a:60:f5:0c:66:7a:13:21:a6:ea:01:
7b:8e:7a:6a:78:7c:ec:d5:a2:58:df:56:af:b8:90:af:53:42:
f8:b3:fa:8e:00:7d:3c:63:cd:a6:b3:ca:89:80:48:78:a0:4c:
0b:91:47:18:a1:bb:e3:c1:66:21:b5:80:c2:af:3a:25:49:98:
a5:b6:68:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 11:52:53 2026 by rpki-client