Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File: A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier: z0Sx1DuwFNneA7WctSoc/iOBxw3iwrcmWx+P+nk9o9A=
Subject key identifier: 4E:C3:39:16:5C:C7:A3:4B:E6:91:67:03:4C:AF:1D:29:DB:7D:6C:1B
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer: /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial: 01A000935547F63D8B8574F0155514DA2301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number: 089C
Signing time: Fri 14 Aug 2026 14:00:50 +0000
Manifest this update: Fri 14 Aug 2026 14:00:50 +0000
Manifest next update: Sat 15 Aug 2026 14:00:50 +0000
Files and hashes: 1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: g6dlMK8GEoYvevFTHOtlMcnbFGWD2pfQ3Ss+AqAcwuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:55:47:f6:3d:8b:85:74:f0:15:55:14:da:23:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Validity
Not Before: Aug 14 14:00:50 2026 GMT
Not After : Aug 15 14:00:50 2026 GMT
Subject: CN=4ec339165cc7a34be69167034caf1d29db7d6c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fd:99:ec:a6:94:dc:86:73:b2:6f:32:9d:22:
f8:7c:b8:ef:c5:b9:1f:82:bf:f6:e0:eb:fd:68:17:
e7:81:6e:8a:7e:a8:4b:01:4b:85:e7:1f:58:f6:46:
17:78:8c:47:47:ce:f7:1f:17:46:e8:2d:84:bb:b5:
5d:5a:25:ce:f0:ae:0a:34:ea:b7:ba:70:d1:17:73:
22:74:be:87:d6:22:05:9b:fb:a2:6d:e6:21:33:ca:
d3:ee:b4:3a:2e:66:6a:00:73:37:58:50:56:c8:e5:
a7:5f:28:0c:56:f1:4b:b6:90:a7:4a:f6:60:5c:ce:
6f:f5:43:49:00:fc:98:6e:cd:fe:2c:e0:3a:2d:49:
c9:58:52:7e:1a:46:be:c2:35:f3:61:ee:c9:b4:9a:
21:3b:87:57:65:d5:d7:29:84:24:88:f4:b9:5d:61:
cb:31:e4:2d:60:65:8b:cb:3b:73:fd:ad:0b:e6:07:
70:41:21:e3:f4:93:33:a3:a1:54:da:d9:51:c4:b6:
6d:59:7a:c0:17:0b:ab:fa:c0:85:67:b4:5d:73:58:
1e:09:0a:86:37:aa:86:0c:da:8a:78:d5:ed:1f:d3:
34:4d:e0:74:c7:92:94:1a:31:76:0e:df:c3:c4:bb:
cf:f8:e7:38:f4:5d:da:a3:2f:db:a8:ea:f9:85:a3:
37:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C3:39:16:5C:C7:A3:4B:E6:91:67:03:4C:AF:1D:29:DB:7D:6C:1B
X509v3 Authority Key Identifier:
keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a6:ca:5b:76:da:5e:13:38:8a:80:7a:6a:8c:df:94:43:dc:
6e:4c:42:6a:f8:2e:23:a2:51:f0:1f:0e:58:84:a3:e9:91:53:
63:51:8a:b7:ac:95:f9:08:39:56:3a:b7:87:62:4a:85:77:e3:
18:11:c6:9d:23:c9:71:51:0b:ed:ec:62:b6:92:7e:45:f2:f5:
7d:e9:f5:43:96:8c:45:f0:44:5d:2a:a2:1a:2e:14:df:2d:f4:
91:4b:d0:d3:8c:20:ae:0c:34:89:bc:a0:31:6b:76:e5:94:1d:
f3:bf:f4:bf:7b:ed:b8:fc:91:0b:59:4e:04:a1:a8:17:41:0e:
92:73:ac:76:5c:d0:93:f1:15:e1:52:ba:f2:b8:fa:ad:ca:15:
98:55:69:ae:37:bf:50:e1:e8:9f:54:9d:61:e9:96:50:6e:39:
e1:6e:fa:23:43:ea:67:87:f8:b0:30:ed:ce:43:72:10:b8:76:
4e:1d:9c:8f:fe:f2:61:8c:c5:18:bd:f0:fa:4c:4b:0d:88:6d:
dd:19:ca:76:f9:9d:c0:fc:09:49:9d:fe:6e:0c:ef:a1:ba:ac:
bb:15:4a:47:cb:27:d4:83:8b:8f:80:a3:45:30:a9:40:7d:ac:
34:f4:00:d9:75:b0:66:4a:1c:2d:a5:35:be:6f:22:cc:67:87:
01:c9:3e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:51 2026 by rpki-client