Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
File: AAtPqsebsZaQw69aB4xssUqRrUI.mft (raw, json)
Hash identifier: ZkexOw1cLS3zPzIxMsuSaZ5YXUfIkPW3MQhXWt0L3Ow=
Subject key identifier: D7:1B:A1:5F:2E:C9:50:0A:63:92:2E:11:FE:39:AD:F2:57:D3:76:CE
Authority key identifier: 00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
Certificate issuer: /CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Certificate serial: 01A13ECB34A4E202F34761EE2F6E122347C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
Manifest number: 1520
Signing time: Thu 15 Oct 2026 09:01:06 +0000
Manifest this update: Thu 15 Oct 2026 09:01:06 +0000
Manifest next update: Fri 16 Oct 2026 09:01:06 +0000
Files and hashes: 1: AAtPqsebsZaQw69aB4xssUqRrUI.crl (hash: aOg48KvEGDVTV1kabRpvN68vX5SdR9cmAesKMleO6BI=)
2: qkYI2TpaHCn0Rl7Zcn2B5GIJgQM.roa (hash: fcQ2Ei/HI72zlpQU19GPaQ5DdqwsBsYj6lbFhVkHW2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:34:a4:e2:02:f3:47:61:ee:2f:6e:12:23:47:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Validity
Not Before: Oct 15 09:01:06 2026 GMT
Not After : Oct 16 09:01:06 2026 GMT
Subject: CN=d71ba15f2ec9500a63922e11fe39adf257d376ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:e8:3b:d5:01:64:c1:b7:ab:83:b3:d8:4d:
d3:58:1a:f6:84:55:6b:72:2a:54:71:8c:0f:94:97:
71:7b:a1:93:99:d7:62:c0:8f:ef:ba:53:b8:f5:27:
73:92:7a:f4:21:54:14:67:96:14:e0:da:e3:70:17:
c9:fd:5a:84:70:cd:10:fb:ca:f8:a3:4a:50:d0:0b:
62:d8:41:65:08:6b:04:1f:24:cb:9e:dd:f7:e8:af:
41:82:23:5d:8e:96:84:f0:94:12:1e:b1:63:63:35:
bf:66:bc:c3:b0:c8:6d:50:83:7f:d8:3f:90:c1:6e:
61:94:ac:8a:6d:dc:ed:df:7e:51:ca:a7:06:a5:a9:
b4:4c:c2:9a:4c:d8:fc:b9:02:0c:54:f7:ee:09:00:
46:a5:06:41:9d:fe:88:57:99:3f:96:89:b9:9b:db:
2d:df:5f:83:eb:8f:75:d2:50:46:2b:32:bf:42:09:
08:9b:bb:a9:21:96:c3:db:65:ef:34:bd:5f:a4:be:
47:8e:68:a2:ff:5e:11:8d:4e:d6:e1:f0:f0:64:25:
b4:b6:59:31:19:a0:3d:3f:de:24:66:01:97:1d:a7:
89:b2:c6:23:6d:55:f4:4d:8e:9c:d4:19:47:f8:10:
99:44:21:ba:d7:68:cc:c9:46:00:75:9a:02:e5:23:
92:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1B:A1:5F:2E:C9:50:0A:63:92:2E:11:FE:39:AD:F2:57:D3:76:CE
X509v3 Authority Key Identifier:
keyid:00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e4:18:83:7e:0a:a7:fe:4d:f6:34:88:0d:6e:fb:86:7f:6d:
f9:32:3d:ef:e5:8f:fc:41:d9:12:a9:3e:3c:e5:1e:0a:0a:f2:
df:3c:57:b9:67:ff:81:20:49:85:8d:00:3a:fc:da:4e:8a:ec:
c7:78:0c:65:93:8c:a7:68:e5:08:27:ae:99:f1:74:91:f0:63:
9a:33:98:34:0e:95:09:3e:e2:5e:16:f5:c9:49:35:7a:ca:db:
6d:f7:63:9b:6e:37:98:16:38:96:ec:c8:ca:b2:8e:3f:17:ee:
3b:a5:2c:b5:b7:7b:17:ee:02:47:d8:21:c6:4e:18:54:40:83:
4e:9b:87:56:0a:57:d3:85:b2:e7:82:0f:a4:78:ca:77:52:ba:
eb:be:52:e4:bd:92:66:4b:95:87:66:47:d8:44:c3:31:e2:e5:
56:fa:c8:b5:3f:0f:31:af:ee:eb:e9:31:2f:bc:a0:99:79:f5:
d8:1d:82:a8:dc:14:85:fe:7a:50:25:a7:87:e0:25:cc:54:be:
34:d6:9d:d6:79:f8:2f:b3:7a:47:82:7f:2e:e6:18:e8:b8:ff:
a1:c9:84:de:3c:bf:4a:5d:ae:e5:93:7f:48:21:92:da:fe:a8:
42:e3:cc:17:c5:f1:98:ab:2c:14:31:eb:d8:3f:8d:12:53:ef:
48:9e:a2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:16:42 2026 by rpki-client