Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier: Snbhy9xh+8vE/roiQQjkbBDr9CAqEuRGlDyklP6Xb8c=
Subject key identifier: D6:F9:8F:D9:8E:5F:10:8E:CF:33:FC:F1:19:4C:32:43:3A:AC:89:FB
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 019CE36BCC44C0F038250F7DBEFBA77A7378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number: 1863
Signing time: Thu 12 Mar 2026 19:00:18 +0000
Manifest this update: Thu 12 Mar 2026 19:00:18 +0000
Manifest next update: Fri 13 Mar 2026 19:00:18 +0000
Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: hkQ1bVnJDSX8ar4BG6oLJlSXPJbQwamL5RAylhGPcNw=)
2: C3g4bPj0WpteooCh1kAuPYqRZBg.roa (hash: 0XrpEklayrORIBGmjGj7RMMjUbxEU4fiPGHiYSn1AmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:6b:cc:44:c0:f0:38:25:0f:7d:be:fb:a7:7a:73:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: Mar 12 19:00:18 2026 GMT
Not After : Mar 13 19:00:18 2026 GMT
Subject: CN=d6f98fd98e5f108ecf33fcf1194c32433aac89fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0f:25:15:1e:d3:30:37:80:89:43:c3:22:f2:
d7:2b:4a:f0:82:5a:9d:a6:52:76:33:8d:f3:1f:2a:
ab:32:ad:71:c8:19:9e:f2:54:6c:9d:d2:81:09:5a:
a9:65:57:bf:ed:41:c7:0e:7d:d7:4d:1f:89:54:9d:
51:ea:7e:15:48:0e:0e:e2:09:2b:af:69:4b:24:4f:
c6:1b:9d:21:e6:ea:1f:26:e5:38:2b:7c:54:dd:24:
26:20:46:f9:e1:9d:7d:d0:f0:50:8c:fc:c6:44:84:
df:ee:fd:db:a4:a8:ae:a7:41:16:8e:72:a6:46:a8:
b5:f7:41:13:39:28:76:92:88:fb:48:59:e9:e2:6a:
5b:67:95:c1:98:01:2b:e9:5c:0d:9d:b0:d4:00:bd:
a3:5f:aa:a6:dd:c2:8e:01:77:d8:9a:e2:9b:a8:92:
66:b9:2f:3d:c1:80:8a:bc:b3:f3:80:75:07:93:76:
ff:08:54:1b:44:6c:3a:47:5c:0c:38:32:9b:67:77:
c5:9c:6a:05:15:b6:da:a7:38:e1:2d:23:ed:63:7e:
5b:c4:61:35:d6:f4:7f:ec:b4:5c:26:1e:a0:26:ef:
58:67:57:7c:09:80:49:63:fa:4a:d8:8a:ce:2d:74:
e1:4a:c6:7b:93:f8:89:00:00:bd:07:cc:5d:29:d4:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F9:8F:D9:8E:5F:10:8E:CF:33:FC:F1:19:4C:32:43:3A:AC:89:FB
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b6:35:03:98:95:c6:ad:db:41:1c:cb:dc:3a:da:56:6a:53:
d3:81:f1:14:2c:c3:6b:15:cb:26:71:1f:74:4e:68:24:a4:49:
7b:b9:71:16:eb:38:2c:bd:40:ee:58:9e:87:b9:af:8b:d3:d8:
ca:95:21:64:61:ae:7b:ab:83:34:71:b8:c7:6e:9e:f8:d2:dd:
38:d5:c9:65:74:f0:94:e8:5a:7f:0f:a8:e5:f7:97:14:6b:b3:
bc:c2:06:74:b4:30:cc:ec:a6:5b:ee:43:89:a8:f0:fc:00:7f:
18:a4:f2:44:d5:10:72:76:e1:f4:0d:a2:0a:48:a1:44:d3:76:
fd:e9:54:67:a6:03:4f:fd:59:e3:88:32:5c:64:f2:c7:0d:a0:
92:a2:c0:e5:5b:40:9e:2b:57:3b:b4:4b:e3:40:b5:45:5d:4e:
a4:3a:25:ef:59:fa:72:2a:ba:b8:9c:8d:32:04:48:0c:6e:12:
54:2a:bd:13:5e:8b:f8:18:f8:09:45:e4:77:ca:af:00:31:06:
0a:4c:48:cd:3b:1d:54:1a:96:4b:94:38:3f:e8:cc:b8:f6:f4:
51:b9:30:1d:88:0f:7d:b3:8b:b2:12:89:08:b9:82:80:3b:2d:
78:30:75:2d:07:07:95:b4:a5:2f:ed:25:39:da:b9:7c:c7:c9:
c7:53:e1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:15 2026 by rpki-client