Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier: 7QqzTgwgmxCtl97rnw/fOyepXSMGT+PIKyz9Aa/MZa8=
Subject key identifier: 10:EB:B0:E8:31:EC:6D:2D:79:09:E0:C2:8E:11:27:23:92:F4:2A:BC
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 019DCF07149C308847541A4E8EB73829FB64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 13:00:40 +0000
Manifest this update: Mon 27 Apr 2026 13:00:40 +0000
Manifest next update: Tue 28 Apr 2026 13:00:40 +0000
Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: owKj6WX8dgLV8viyEzw0zIWvKKzbeqSLVW+bq+S6CP4=)
2: C3g4bPj0WpteooCh1kAuPYqRZBg.roa (hash: 0XrpEklayrORIBGmjGj7RMMjUbxEU4fiPGHiYSn1AmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:14:9c:30:88:47:54:1a:4e:8e:b7:38:29:fb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: Apr 27 13:00:40 2026 GMT
Not After : Apr 28 13:00:40 2026 GMT
Subject: CN=10ebb0e831ec6d2d7909e0c28e11272392f42abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:56:9d:a0:60:12:cd:48:69:cf:95:0f:3c:ef:
f6:e9:de:77:c9:ec:32:e2:23:de:ba:c0:b6:31:82:
c0:e5:60:91:d1:8f:89:95:91:f1:47:5f:41:42:fa:
5d:91:c9:6a:62:da:5f:9d:53:c1:73:7a:73:e4:6a:
5d:17:e7:1d:6b:29:98:b3:f3:0b:c4:55:2f:21:d8:
ae:85:8a:03:09:da:9a:75:a8:35:0d:ac:56:ad:59:
66:c6:20:bc:db:7a:0d:ec:2c:d5:78:c6:f2:bb:e4:
f5:20:d0:e5:a3:ff:2d:45:95:8b:a4:72:be:bc:8b:
5f:40:7d:59:e5:c1:44:55:1a:14:88:37:2c:a5:67:
df:8a:ea:ff:9d:d1:e8:10:15:64:77:22:56:60:1d:
87:83:6b:73:65:c8:a3:70:0d:20:54:6f:2e:65:16:
76:5f:3a:30:8f:9e:ec:cc:ba:aa:fe:2e:fb:90:a3:
ff:34:ae:7d:e4:a5:9b:ff:45:53:fd:74:3e:b9:b8:
d0:94:83:79:7c:72:42:f9:e9:a7:a3:d4:9e:95:6e:
e4:91:b9:0e:78:94:51:4b:df:9b:00:05:97:ba:cf:
63:ac:f5:50:12:63:c1:c5:56:95:31:3c:d7:e6:c8:
3c:41:d7:56:35:80:9e:29:44:68:d2:85:c5:a5:97:
ba:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EB:B0:E8:31:EC:6D:2D:79:09:E0:C2:8E:11:27:23:92:F4:2A:BC
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c3:8c:75:2e:0c:e6:b2:d2:0c:25:ae:98:62:d3:78:87:48:
bf:69:48:0c:6e:4d:78:0b:af:a3:e2:6b:01:1c:67:85:f2:9d:
96:84:54:9a:6b:34:e2:b0:4e:23:90:93:79:9e:a6:12:c8:74:
42:de:b9:f0:5c:fe:6c:d3:28:35:3a:69:34:1f:6c:63:91:dd:
a2:5b:dc:2c:be:86:c3:99:04:28:1d:1a:2a:57:fd:59:86:d9:
72:26:9b:50:2b:42:7e:5c:ea:df:16:ce:32:28:e6:89:f2:bb:
66:ac:ae:02:ba:b3:a7:48:98:8f:ef:05:e3:4c:ba:a4:3c:f1:
a5:c0:d5:97:f0:80:d2:60:a2:96:a4:05:66:3e:ba:2e:e3:36:
75:b1:e6:12:d6:e7:3b:76:04:37:32:0a:bb:ca:ea:b6:62:1d:
cf:8b:56:9e:cc:58:e3:bf:76:7a:eb:6e:6c:c9:9d:e3:b7:3e:
73:0b:83:df:b2:17:31:82:39:53:ba:f2:a3:80:4d:63:48:a7:
23:57:dd:55:bd:97:70:5b:63:1e:ac:ee:ad:6c:cb:65:ad:f0:
56:bf:d9:2b:ca:60:0a:51:a6:95:f6:ab:24:aa:d1:98:cb:92:
85:ac:e4:03:58:bc:9f:02:d3:66:57:0d:c2:98:17:a4:68:1c:
b4:0f:b6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:54:03 2026 by rpki-client