Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
File: AqsBDPXBHBswaT0RQXtgz0X7Egk.mft (raw, json)
Hash identifier: +Hutbcyq7GWSAvtemeMKiv6vAL4N70EnG1KY9UiR9AA=
Subject key identifier: 52:A8:9C:D0:9E:F2:FD:CA:DA:6B:50:78:C9:16:C1:8F:50:E2:DB:96
Authority key identifier: 02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
Certificate issuer: /CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Certificate serial: 01A1069356FB00883712EA843887D924A84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
Manifest number: 1A8A
Signing time: Sun 04 Oct 2026 11:01:21 +0000
Manifest this update: Sun 04 Oct 2026 11:01:21 +0000
Manifest next update: Mon 05 Oct 2026 11:01:21 +0000
Files and hashes: 1: AqsBDPXBHBswaT0RQXtgz0X7Egk.crl (hash: UXWiy7pOCEvfRfRL+93/MqRtvnTgNpsOLtenKku9t48=)
2: c_alN_JA7apsyl_BS-E6Z48h5Lo.roa (hash: 9m6A8du+wfSb5HoPz+iZYyejsTIMn6Cv42VUwR2/YnI=)
3: pHyfE-IkMhxcPHPc-HwDzXsFVjQ.roa (hash: uyoFgMWyTuoY09i37tyWsmZah+QoAHk4CSzGk/eiO5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:56:fb:00:88:37:12:ea:84:38:87:d9:24:a8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab010cf5c11c1b30693d11417b60cf45fb1209
Validity
Not Before: Oct 4 11:01:21 2026 GMT
Not After : Oct 5 11:01:21 2026 GMT
Subject: CN=52a89cd09ef2fdcada6b5078c916c18f50e2db96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cb:c8:5e:53:4d:29:94:77:9a:05:7b:82:16:
91:ad:1b:40:b4:c9:c6:27:5c:94:cd:7b:6c:eb:1f:
0e:40:e1:64:89:53:3f:2e:2e:97:8d:90:5d:4c:80:
7d:1d:28:38:99:05:a5:cd:b8:8c:68:08:b2:52:b5:
6d:54:48:76:0e:3b:79:b0:d7:3c:85:bd:51:29:9b:
5c:98:b2:70:0d:0e:ed:df:0e:ae:0f:c1:ee:49:1d:
f6:df:78:82:ae:69:76:71:6b:eb:cc:ec:b5:10:f0:
0e:b9:83:07:b7:97:eb:a0:fd:0d:7e:83:af:63:3d:
6e:c2:a0:0b:d8:3c:c4:02:56:c6:e7:b4:94:18:da:
20:01:0e:20:65:85:01:e5:f4:be:41:0d:ee:6e:05:
f1:74:11:21:b6:66:60:1c:6a:6e:0c:8b:66:ed:05:
f8:21:4f:57:2f:f1:12:17:15:42:e0:5a:99:2d:b0:
b4:c4:85:0f:07:39:24:74:3e:c0:8a:43:58:3b:d7:
75:07:a7:c8:56:ce:1f:8e:08:87:71:79:d8:58:6f:
64:ea:c1:ed:49:e5:bb:62:30:56:9b:a0:97:56:be:
49:e8:ff:71:fb:ef:c4:a2:ad:36:1b:f5:a1:a5:7a:
c9:ae:21:8e:97:e0:d5:73:48:b4:3c:24:f7:0f:a8:
8b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A8:9C:D0:9E:F2:FD:CA:DA:6B:50:78:C9:16:C1:8F:50:E2:DB:96
X509v3 Authority Key Identifier:
keyid:02:AB:01:0C:F5:C1:1C:1B:30:69:3D:11:41:7B:60:CF:45:FB:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AqsBDPXBHBswaT0RQXtgz0X7Egk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79c0a9-e5e4-47c3-823f-0b8b075e86db/1/AqsBDPXBHBswaT0RQXtgz0X7Egk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e2:b0:e7:6c:81:51:0e:cc:ee:59:a4:46:67:cc:20:eb:42:
32:90:b6:44:31:fc:b6:bc:b8:19:97:7d:9e:af:0c:dd:2f:3b:
7e:9f:de:a5:10:c8:8b:5d:9c:dd:c2:4a:40:b4:15:9f:62:f2:
15:2f:ef:9f:e9:22:61:55:d8:82:6d:08:62:13:db:2b:a7:0f:
44:8c:42:99:e9:b6:69:2f:d9:af:85:ef:da:38:e5:e5:ce:71:
a1:93:f2:53:f4:5a:d1:9f:aa:84:98:b5:91:ca:7e:7f:80:d5:
f1:09:97:68:bd:89:7c:9b:73:fd:5e:85:b7:b8:ea:ef:38:24:
b4:43:76:93:d2:bd:f2:6b:8b:29:72:13:6b:f8:70:f2:b5:cd:
96:95:70:ad:74:7d:f4:39:cf:5e:1d:63:2a:2e:38:3c:b1:9d:
55:1b:1c:02:bc:c6:29:da:52:3e:df:81:a4:be:cb:7c:e8:44:
32:81:9c:21:95:3c:7e:19:90:5e:0a:db:8f:74:92:e3:1f:13:
e1:5f:a6:07:06:a6:e7:97:1c:54:41:6d:cf:f6:9f:fb:8e:4c:
30:58:d9:ad:15:b7:c3:2d:32:0c:3f:65:25:e9:8b:15:3a:eb:
69:46:59:cd:31:59:59:94:7b:e2:fa:ac:17:ff:52:00:d6:4c:
02:3d:16:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:33:44 2026 by rpki-client