Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File: A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier: RKeOO8/ivo/c2fhrWXJTDR6VjHejXRU35KaERiOYvMY=
Subject key identifier: 48:8F:6D:45:CC:C4:93:84:76:BD:DD:DE:42:DA:E2:01:D0:08:D8:89
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer: /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial: 019E311771E01D0173538323561CF1161B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number: 07AC
Signing time: Sat 16 May 2026 14:01:20 +0000
Manifest this update: Sat 16 May 2026 14:01:20 +0000
Manifest next update: Sun 17 May 2026 14:01:20 +0000
Files and hashes: 1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: XV3fN6dxKost/7Ml2jwjvtZnd1sDXTSvqOgKYynn5WE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:71:e0:1d:01:73:53:83:23:56:1c:f1:16:1b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Validity
Not Before: May 16 14:01:20 2026 GMT
Not After : May 17 14:01:20 2026 GMT
Subject: CN=488f6d45ccc4938476bdddde42dae201d008d889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:30:29:68:f4:59:7b:33:e3:39:70:4f:05:13:
c5:95:36:81:9d:a7:19:25:29:d6:03:c0:7b:c1:93:
ee:ce:70:80:a4:07:2d:2b:26:bb:f3:43:a0:91:01:
6e:d3:00:25:80:77:53:a0:93:b7:dd:81:60:9b:24:
81:e5:0c:f6:24:c1:9f:e4:db:da:f8:04:fe:1b:ec:
1c:02:5a:6f:54:27:6f:96:14:2e:3f:67:0a:89:89:
5d:f7:03:a9:b8:79:e0:ec:09:98:91:f6:ed:96:cc:
59:ac:6e:3b:d6:66:90:74:b4:8d:33:f1:68:6f:42:
bb:30:95:28:8a:0c:21:6c:fc:3c:0c:71:0f:12:73:
69:e2:64:7a:41:01:6d:86:c3:94:35:c5:1d:bf:2b:
72:c9:62:8f:40:4f:87:ae:e7:18:dd:6d:36:3a:6d:
33:5f:80:cb:ef:46:50:15:db:44:60:35:d1:60:9d:
78:c1:7c:d0:9d:d2:ce:c0:bd:00:09:a2:b9:d6:f7:
ed:fe:24:17:d4:87:70:d0:3c:e1:d3:d2:1b:e6:8a:
c8:29:36:1e:48:85:ce:c0:6f:70:48:8d:be:45:dd:
f2:1e:07:40:98:97:a0:9f:38:a4:ba:22:75:d2:e5:
62:f9:21:26:d1:2c:00:a8:2f:c5:77:40:4a:34:10:
32:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8F:6D:45:CC:C4:93:84:76:BD:DD:DE:42:DA:E2:01:D0:08:D8:89
X509v3 Authority Key Identifier:
keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a4:94:c0:ec:d7:e6:26:b9:34:74:29:07:59:5b:8a:5b:c9:
af:6d:3c:2e:76:f0:87:67:82:70:88:6a:54:a0:b8:db:ba:c3:
b4:d6:14:1b:44:be:a7:67:ca:ff:34:ae:3a:b1:9f:d4:35:fc:
0b:47:d8:fa:e2:16:1c:82:8f:e5:f1:86:df:86:f5:c1:82:1b:
b0:1f:cc:09:5a:b4:50:cd:48:b3:6f:5b:eb:99:32:0e:43:54:
d4:fc:45:c6:81:11:50:97:c7:f8:d4:ab:6d:35:f2:5f:e8:e5:
ea:9a:2a:2f:8a:f2:92:a0:98:65:6a:c9:a7:1a:e1:bb:55:82:
75:88:fc:9e:3d:8a:21:b4:8e:21:37:c0:da:e6:19:86:c3:00:
de:74:31:5a:9e:4a:ba:26:02:6b:b6:ce:2e:9f:7d:83:e6:fa:
6c:9c:6d:ba:1e:66:e8:8c:37:86:a2:b3:1e:6b:65:ca:8f:21:
59:36:3b:b8:52:f3:ab:97:bb:ba:d6:33:ce:2e:8d:2d:ce:b4:
4a:79:ab:95:3f:d9:c6:f7:08:d1:5f:f8:09:42:ba:b7:22:e0:
21:89:7c:d4:3b:b9:36:b6:a9:36:ef:bd:6e:1e:4c:9b:c0:87:
d5:6c:eb:c5:29:6f:fb:d2:2d:1e:46:d6:bb:48:03:6b:26:a9:
73:e7:78:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:55 2026 by rpki-client