Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File: A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier: /MfJjDII+1YjNT4hgs6Fi6L7C8W952NUpHEz73tzrm8=
Subject key identifier: F9:AB:C8:D3:92:7A:E1:A7:68:E7:DD:B9:63:DF:19:57:4D:09:79:C3
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer: /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial: 019D39E5565B5FC5AFCDAA37D91EC16BE183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number: 072C
Signing time: Sun 29 Mar 2026 14:00:24 +0000
Manifest this update: Sun 29 Mar 2026 14:00:24 +0000
Manifest next update: Mon 30 Mar 2026 14:00:24 +0000
Files and hashes: 1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: Ak/hQBGe1Qz82Ua8vSHtKjnZDiF8hzY2rANPsoDWEbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:56:5b:5f:c5:af:cd:aa:37:d9:1e:c1:6b:e1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Validity
Not Before: Mar 29 14:00:24 2026 GMT
Not After : Mar 30 14:00:24 2026 GMT
Subject: CN=f9abc8d3927ae1a768e7ddb963df19574d0979c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:0a:d0:30:0a:67:2a:b2:1b:26:9f:52:ba:
ab:07:45:09:7c:1b:b8:ab:c2:64:58:a9:b2:84:a9:
e6:f5:90:2c:2e:2f:74:b1:69:df:ea:39:f0:e0:26:
5d:d0:ee:7e:37:d3:14:ae:1b:17:b4:14:02:36:4d:
81:64:d7:80:16:4b:c8:5c:74:97:b9:ca:89:0b:86:
63:bc:69:09:95:50:75:e6:8a:75:74:f4:6a:69:54:
8a:01:ac:a5:80:60:fb:75:9f:c3:7b:c1:a0:3c:13:
1a:fe:c0:c5:2d:cd:6f:d9:33:72:a9:c3:54:ea:61:
d2:6e:5f:04:30:80:ae:53:b8:f0:ab:c0:41:3c:7e:
2b:ac:3d:68:84:35:ff:1a:83:c7:1e:3c:74:44:93:
60:73:a9:7d:64:7f:95:a7:21:61:08:11:07:3d:9c:
10:51:89:23:a0:10:1c:bb:51:c7:0e:93:37:71:e1:
61:fe:7d:78:f6:b4:24:2f:0a:45:74:00:8f:e3:f6:
0d:f5:11:df:07:b7:45:7e:39:79:1e:18:81:c2:59:
eb:c2:f5:9b:4e:f4:fd:a2:e6:13:1b:a8:d6:e1:e6:
52:c7:d9:85:00:38:72:13:96:b2:ad:0c:78:d5:1f:
b4:30:8d:74:f0:b1:7b:df:38:ff:9f:c5:f9:96:b4:
ba:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AB:C8:D3:92:7A:E1:A7:68:E7:DD:B9:63:DF:19:57:4D:09:79:C3
X509v3 Authority Key Identifier:
keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:aa:de:0c:56:de:1d:45:c6:a0:ef:1c:1d:90:0c:22:88:09:
a9:6e:1d:f9:81:07:64:4f:96:7a:bb:a8:cc:23:db:2a:e2:e1:
bc:b3:85:94:0e:1e:0f:60:a0:a8:94:bf:a6:1f:d9:8a:96:0d:
76:a8:85:f8:46:b2:06:3e:a3:22:cd:18:5a:5f:c8:eb:c5:3d:
b4:d3:bb:20:5b:a8:78:22:87:74:fe:f6:ed:c4:2e:65:64:d0:
d2:af:34:03:a6:c1:e0:c2:f8:76:24:1f:2a:17:15:01:52:32:
2f:ad:64:6d:0c:73:27:0b:b9:e5:00:65:48:f8:c9:9a:b4:31:
5f:5e:78:5a:1d:df:ef:36:f7:7c:88:2d:07:2b:90:df:c8:b6:
0e:b4:64:d1:36:80:27:d9:f0:3e:05:b6:25:e3:f9:83:db:2f:
8b:27:4a:3a:5b:6a:02:09:b7:12:09:fe:1d:9c:67:bf:ec:f8:
b8:9d:b7:62:21:84:8a:05:80:17:d1:f4:36:03:29:f3:3a:a6:
7f:c4:09:b0:35:77:1b:71:5c:7c:3d:a8:f8:a0:5a:3f:48:3e:
f0:ee:e6:03:1c:5e:02:47:19:8d:bf:c6:ed:93:fe:ca:3e:e6:
d2:d4:ee:83:2b:30:e9:ea:af:e6:6d:97:05:9b:03:94:88:35:
c5:8f:ec:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055VZbX8Wvzao32R7Ba+GDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZTY5YWE2ZWU3NGUzMGVmZGI4MTliOWNiMWJmMjFlNzg2
ZTZmYTMwHhcNMjYwMzI5MTQwMDI0WhcNMjYwMzMwMTQwMDI0WjAzMTEwLwYDVQQD
EyhmOWFiYzhkMzkyN2FlMWE3NjhlN2RkYjk2M2RmMTk1NzRkMDk3OWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2sK0DAKZyqyGyafUrqrB0UJfBu4
q8JkWKmyhKnm9ZAsLi90sWnf6jnw4CZd0O5+N9MUrhsXtBQCNk2BZNeAFkvIXHSX
ucqJC4ZjvGkJlVB15op1dPRqaVSKAaylgGD7dZ/De8GgPBMa/sDFLc1v2TNyqcNU
6mHSbl8EMICuU7jwq8BBPH4rrD1ohDX/GoPHHjx0RJNgc6l9ZH+VpyFhCBEHPZwQ
UYkjoBAcu1HHDpM3ceFh/n149rQkLwpFdACP4/YN9RHfB7dFfjl5HhiBwlnrwvWb
TvT9ouYTG6jW4eZSx9mFADhyE5ayrQx41R+0MI108LF73zj/n8X5lrS6sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmryNOSeuGnaOfduWPfGVdNCXnDMB8GA1UdIwQY
MBaAFAPmmqbudOMO/bgZucsb8h54bm+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS1hYXB1NTA0dzc5dUJtNXl4dnlIbmh1YjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hOWU4ZmEtNDFkNy00YmM2LTk4NDEt
MDVhODNlZDcwYmMzLzEvQS1hYXB1NTA0dzc5dUJtNXl4dnlIbmh1YjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hOWU4ZmEtNDFkNy00YmM2LTk4NDEtMDVhODNlZDcwYmMz
LzEvQS1hYXB1NTA0dzc5dUJtNXl4dnlIbmh1YjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6reDFbe
HUXGoO8cHZAMIogJqW4d+YEHZE+WeruozCPbKuLhvLOFlA4eD2CgqJS/ph/ZipYN
dqiF+EayBj6jIs0YWl/I68U9tNO7IFuoeCKHdP727cQuZWTQ0q80A6bB4ML4diQf
KhcVAVIyL61kbQxzJwu55QBlSPjJmrQxX154Wh3f7zb3fIgtByuQ38i2DrRk0TaA
J9nwPgW2JeP5g9sviydKOltqAgm3Egn+HZxnv+z4uJ23YiGEigWAF9H0NgMp8zqm
f8QJsDV3G3FcfD2o+KBaP0g+8O7mAxxeAkcZjb/G7ZP+yj7m0tTugysw6eqv5m2X
BZsDlIg1xY/sIQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:56 2026 by rpki-client