Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File: A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier: FsF/GXw2s0pjnPAEgSJ6ttMr3H7iQFJEUphwT3fC0Y4=
Subject key identifier: BA:84:B2:06:FA:D0:33:53:06:C2:AA:59:91:9B:92:21:B6:55:41:84
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer: /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial: 01A13D4A6BE6A413773B94D59141A7B3260F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number: 0940
Signing time: Thu 15 Oct 2026 02:00:49 +0000
Manifest this update: Thu 15 Oct 2026 02:00:49 +0000
Manifest next update: Fri 16 Oct 2026 02:00:49 +0000
Files and hashes: 1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: 61lgAtl8n0quoxLV/nKPit1Z4VFKLv+OKNy/noqOdo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:6b:e6:a4:13:77:3b:94:d5:91:41:a7:b3:26:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Validity
Not Before: Oct 15 02:00:49 2026 GMT
Not After : Oct 16 02:00:49 2026 GMT
Subject: CN=ba84b206fad0335306c2aa59919b9221b6554184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:ec:68:8d:ee:af:24:21:3e:d0:1a:e5:d9:
74:89:75:8b:3f:c9:a3:3a:fe:83:f9:10:32:50:86:
bf:26:52:82:5b:18:7c:4e:fa:7c:e9:91:b8:0a:65:
a0:ac:b8:dd:36:82:8e:5c:66:21:00:77:1f:27:9d:
7d:0e:24:e0:4f:97:16:cf:c1:7b:5d:22:08:c8:20:
f2:5f:fa:90:d1:20:81:4b:6e:b3:db:c8:f9:4a:a2:
50:5d:a0:b1:60:7b:30:d4:ca:fe:12:d0:54:d0:5e:
60:d1:a0:a2:79:78:15:ea:a4:c7:74:46:2f:e6:b5:
ac:ed:f9:b9:a7:45:89:9a:d4:a6:9d:b1:34:fd:01:
08:1e:f7:60:98:c6:c6:7a:ce:a6:53:9b:18:f3:e2:
0a:1c:ad:44:f5:2d:54:83:1f:54:93:bb:c3:4b:2a:
52:f6:2b:b7:e3:5b:c6:1b:89:df:0b:f5:3d:14:7a:
1c:84:08:3c:c5:fd:5d:b8:f0:38:91:ae:43:c1:8a:
9c:90:d7:be:8d:0e:d3:21:a1:f0:86:98:83:6f:ab:
27:59:6c:5c:e0:aa:e9:bb:d6:75:46:2c:c8:5c:44:
8e:01:39:09:74:4a:0d:e7:5d:6c:f0:56:b1:fd:80:
7e:11:cc:7e:ad:f1:91:4a:f3:e5:d2:68:16:3f:5a:
bc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:84:B2:06:FA:D0:33:53:06:C2:AA:59:91:9B:92:21:B6:55:41:84
X509v3 Authority Key Identifier:
keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:98:c2:5b:0c:69:54:54:4e:4b:a6:e3:dd:10:6a:f8:e3:73:
90:a7:8d:3f:20:d3:30:b7:3d:6a:c6:3e:19:31:c8:2a:ea:0e:
0b:76:18:49:1c:b9:8a:e4:20:74:cc:5f:08:1a:97:af:15:2e:
1e:b4:fe:9b:43:ce:6e:98:11:99:7b:63:c0:73:39:c5:67:0b:
0c:69:7b:eb:b1:d7:53:8f:55:af:24:a4:df:43:51:8a:30:1e:
be:cd:7a:9e:3c:3a:6c:8f:80:6d:ec:63:92:81:da:d4:8c:7a:
4f:98:57:f6:a2:08:21:da:50:59:98:cc:bc:6b:6d:5d:c1:22:
32:d1:14:96:bc:15:b8:1e:c1:04:78:46:0c:91:6f:62:ff:6d:
47:c8:81:55:c7:43:7b:f5:1b:57:3b:f1:c4:d0:7e:22:ba:31:
46:f4:77:21:12:5e:ef:9c:33:c6:35:ea:99:c6:71:41:d9:81:
30:f4:9c:d1:3f:4a:aa:57:df:5e:1a:db:ee:d7:ed:eb:a2:1f:
07:93:49:e5:40:0d:cf:13:0d:f6:6b:d2:0a:1a:0b:7f:3b:c4:
0d:3e:ab:dd:b4:98:82:54:50:02:8a:f8:65:6a:8a:42:70:fc:
a5:59:81:53:98:d0:07:d5:f2:18:cb:f8:38:34:b0:b2:8d:b3:
86:53:fa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:35 2026 by rpki-client