Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
File: AAtPqsebsZaQw69aB4xssUqRrUI.mft (raw, json)
Hash identifier: Bi2vD7/S161loUXBo2v+8URyzD12knL+Vgqj+1RYOsw=
Subject key identifier: 7D:C6:D1:CE:30:5B:37:0A:CD:30:21:2A:B9:C8:A2:A3:14:23:BE:C2
Authority key identifier: 00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
Certificate issuer: /CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Certificate serial: 01A000257D724E0ADE3FBAEFAB5DD18F6458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
Manifest number: 147B
Signing time: Fri 14 Aug 2026 12:00:51 +0000
Manifest this update: Fri 14 Aug 2026 12:00:51 +0000
Manifest next update: Sat 15 Aug 2026 12:00:51 +0000
Files and hashes: 1: AAtPqsebsZaQw69aB4xssUqRrUI.crl (hash: iDMMsGWpfiXI6TGNlr8kL+lf//0qWzT4aq5E6a0lIF8=)
2: qkYI2TpaHCn0Rl7Zcn2B5GIJgQM.roa (hash: fcQ2Ei/HI72zlpQU19GPaQ5DdqwsBsYj6lbFhVkHW2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:7d:72:4e:0a:de:3f:ba:ef:ab:5d:d1:8f:64:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Validity
Not Before: Aug 14 12:00:51 2026 GMT
Not After : Aug 15 12:00:51 2026 GMT
Subject: CN=7dc6d1ce305b370acd30212ab9c8a2a31423bec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:08:d9:23:bd:dd:67:3b:2c:71:b8:83:8d:
ee:b6:f8:02:2e:b2:b0:7b:08:53:15:30:ab:45:62:
e4:34:64:d2:b6:83:a8:8b:6a:e5:00:d1:78:93:45:
72:0a:c9:e0:6c:5e:49:f3:e4:d9:cd:df:ff:c5:5d:
69:48:a1:b3:81:7a:6f:35:d5:e7:73:41:1e:36:89:
c5:f3:72:78:d9:cf:12:a0:fa:41:94:cc:55:b5:58:
b9:36:a5:56:ef:23:f4:3f:9f:83:79:6b:99:f9:a7:
02:0c:2a:9c:21:c7:b6:7b:c7:65:09:26:be:a0:4e:
15:06:60:e8:14:a0:0c:82:6f:7a:d1:87:93:60:1d:
d0:98:8b:8f:96:68:42:e7:c3:8a:c4:2e:4e:7f:5e:
af:94:8c:54:b2:ba:ca:86:55:52:ee:77:b2:46:13:
fc:f2:01:75:81:1c:ef:a6:1f:b3:92:c0:3f:df:fb:
35:77:27:fa:af:53:45:cc:2e:e9:a9:65:c3:fe:ec:
c7:3e:88:f3:10:8e:7c:95:31:44:07:f9:f6:2d:ed:
6d:b4:b0:8b:2a:cc:db:cc:d3:2b:c8:4b:b5:91:f3:
dd:12:f5:6c:14:a6:9d:5a:df:2a:3c:a7:aa:95:af:
c5:1a:76:60:2c:cb:87:c8:2a:c6:1c:66:0f:57:4b:
6c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C6:D1:CE:30:5B:37:0A:CD:30:21:2A:B9:C8:A2:A3:14:23:BE:C2
X509v3 Authority Key Identifier:
keyid:00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a7:cc:d3:ff:f5:82:cd:b6:21:54:66:31:3a:73:92:d3:56:
31:43:3e:42:60:07:c6:c6:23:b5:6f:6e:54:e2:c1:f5:c5:98:
41:94:1d:99:f9:74:d2:c3:29:0b:17:90:18:a8:65:27:79:2e:
23:37:d2:78:df:32:15:99:38:e1:5a:f7:de:0d:ba:19:9c:d7:
69:f8:5a:9c:a9:f7:3f:50:87:58:f7:0f:c5:d5:c9:1e:ef:ea:
67:82:e6:11:8d:49:9e:54:b0:fb:60:2a:88:d5:76:26:02:37:
0b:0a:5f:5d:5b:11:2e:d6:5d:f7:a0:2a:be:55:16:6b:db:f7:
38:ba:61:5e:07:07:1b:e8:ec:04:6b:d9:9c:fb:c4:94:0d:34:
57:d4:1e:1a:45:a9:42:bf:41:55:28:83:31:29:e9:4d:1c:24:
3f:b7:2f:4e:5b:1b:bf:24:d1:4b:d2:79:af:38:87:34:d3:88:
fa:28:1f:6d:cc:84:a4:0b:cd:ee:ed:93:c3:52:58:40:41:66:
1b:fb:f3:77:09:e0:8b:c8:2f:0f:31:df:72:15:7d:96:65:e2:
1e:99:b3:1d:ab:b8:75:cc:f0:34:d4:e7:7a:16:57:67:5b:e9:
05:29:ea:30:ec:5d:08:82:4b:2e:5a:83:ba:d6:88:5a:b2:63:
e8:33:ef:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:37 2026 by rpki-client