Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier: sgNSZ0piDwfp6H4qsLfo++iN0Xgb902sBL6RsqF5zBU=
Subject key identifier: 5F:86:D3:36:72:78:F1:24:FF:F5:2E:59:3B:A1:A0:0A:26:49:A5:08
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 019EB6C4DF54411507E2423CF8C229748D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 13:00:15 +0000
Manifest this update: Thu 11 Jun 2026 13:00:15 +0000
Manifest next update: Fri 12 Jun 2026 13:00:15 +0000
Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: LBSfPniuLg31CgMukPBdv4fQNBTTixXo6m8JVnlGFqY=)
2: C3g4bPj0WpteooCh1kAuPYqRZBg.roa (hash: 0XrpEklayrORIBGmjGj7RMMjUbxEU4fiPGHiYSn1AmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:c4:df:54:41:15:07:e2:42:3c:f8:c2:29:74:8d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: Jun 11 13:00:15 2026 GMT
Not After : Jun 12 13:00:15 2026 GMT
Subject: CN=5f86d3367278f124fff52e593ba1a00a2649a508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f1:ae:6a:05:33:df:f9:d4:be:af:50:bb:d9:
d1:df:32:ee:77:b3:b4:c3:64:39:13:3e:ce:bc:00:
8e:1e:4f:a3:e9:63:51:96:4a:00:27:7a:a9:83:9e:
e6:42:1e:9b:c5:a5:22:a1:64:0d:d7:c3:8f:86:5d:
da:54:7d:c1:4a:c2:77:da:c7:c7:85:b6:ae:bb:38:
cf:1f:e3:45:d0:c7:14:4e:12:91:33:f2:f3:27:af:
03:c7:7e:1c:e3:4d:c8:5d:50:c3:6d:50:85:be:c6:
a8:c3:d9:de:2c:3e:e3:56:b1:f0:17:3b:29:84:01:
cc:35:69:86:23:44:94:9a:cf:bf:7c:7e:59:2c:a4:
ed:29:c3:8c:36:33:bc:12:f8:25:f0:1b:d7:46:8d:
80:17:ea:59:51:c8:44:48:ac:a3:5c:c7:cf:d8:00:
43:77:21:e2:b6:f6:8c:0f:3b:1a:04:a2:0c:c8:63:
9f:2f:f8:58:56:96:8c:71:af:ed:15:6b:3e:06:94:
b6:0c:af:80:39:f3:1c:3c:b1:44:25:bc:85:72:d5:
11:ac:39:b1:3d:97:73:d9:a3:36:86:43:a6:fc:dc:
d9:ca:9b:16:9d:b2:bb:a6:88:78:78:d9:2b:1b:ce:
8e:ad:20:ea:fc:d1:d8:16:8e:a7:d4:a8:36:d5:47:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:86:D3:36:72:78:F1:24:FF:F5:2E:59:3B:A1:A0:0A:26:49:A5:08
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:76:23:5f:18:9c:8b:41:e1:03:36:58:30:ae:a1:86:df:19:
10:34:fe:38:b9:60:dc:08:c2:19:26:34:55:2b:c2:c9:b8:d3:
f7:48:3b:45:0b:7e:7d:27:a9:65:4a:85:f1:73:78:7f:07:2c:
d5:fe:33:00:8f:01:35:bf:e0:f9:f4:d4:ea:3e:27:3a:68:6b:
be:bb:f2:53:4f:ea:5b:5c:ae:58:df:da:f2:79:e8:40:5a:01:
33:fb:b8:d4:b5:eb:3d:a9:11:06:ed:a3:06:7b:52:96:d9:9f:
a4:2a:4b:0f:98:f8:88:2b:f1:e0:94:44:78:22:ed:ce:7c:58:
b3:ae:41:ed:9a:bf:48:9c:cf:92:39:9b:af:34:02:45:34:bd:
0f:0d:21:19:e5:21:15:93:a8:9f:56:d7:c7:ca:ae:05:25:94:
42:4e:a8:39:0a:46:f3:55:69:bc:02:07:37:88:47:33:60:d0:
d4:a6:b6:f9:ea:0c:28:20:26:57:bf:5d:61:76:5d:23:c6:ac:
32:52:c5:f7:34:ef:07:8c:95:49:f0:97:75:9e:57:fd:f4:14:
3f:18:7a:e1:db:a3:80:77:84:e3:c4:ef:e6:5e:dd:5d:af:b1:
24:c7:24:ce:f3:06:83:de:6f:2f:e3:57:37:e8:f3:ad:e2:e9:
f2:ce:6e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:14:55 2026 by rpki-client