Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier: w12MFUwoHds49p69oUyySGgTuZFygHPjAiJAYUWdL0o=
Subject key identifier: 04:07:D9:02:27:D1:57:D1:AE:DB:D6:8D:AF:CA:B4:0E:86:E3:3B:C8
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial: 019E1C4789B2E2941D227616A1CBF67D54DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number: 1900
Signing time: Tue 12 May 2026 13:01:50 +0000
Manifest this update: Tue 12 May 2026 13:01:50 +0000
Manifest next update: Wed 13 May 2026 13:01:50 +0000
Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: 5jcpVyWYaMZqd54HHPJnQj6aB8KO81PrbnWxXpl76SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:89:b2:e2:94:1d:22:76:16:a1:cb:f6:7d:54:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Validity
Not Before: May 12 13:01:50 2026 GMT
Not After : May 13 13:01:50 2026 GMT
Subject: CN=0407d90227d157d1aedbd68dafcab40e86e33bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:d0:1f:65:2f:f1:b5:49:9b:20:e3:1e:9e:
cc:cd:0b:ef:85:ea:99:c8:b7:38:20:09:94:80:26:
42:d4:e4:3e:8b:4e:ab:a7:5f:97:35:d9:d5:7c:5c:
d2:e9:41:84:16:35:91:98:49:be:e9:a5:f3:19:94:
1f:c0:0b:fc:7e:72:0c:3b:67:9c:47:44:8e:97:09:
41:cf:b2:8a:c0:e3:0b:3e:37:b9:98:21:98:e3:73:
99:7a:84:55:09:e5:4f:0d:76:0a:3b:e5:f9:4e:3c:
dc:86:02:20:36:50:aa:20:8b:6c:41:53:69:93:e9:
07:e1:56:d0:2b:66:f7:ae:cb:7f:22:8d:c9:79:26:
c8:bb:9d:b0:cc:83:14:87:37:d8:4b:28:14:a4:d1:
d9:b3:eb:de:81:f8:fb:b3:74:04:9c:f3:d3:52:2b:
90:a4:83:af:17:12:4a:76:91:7c:9a:8e:e8:c3:dc:
be:20:73:58:b4:ef:9d:bc:11:65:38:48:f1:bf:9e:
64:1d:94:f4:39:3c:23:67:1f:d5:9e:95:2f:13:21:
ff:9b:c8:9d:28:73:81:5b:6e:85:18:f6:1a:a8:4f:
58:60:be:92:33:23:c9:39:a0:33:38:e0:ef:07:c7:
53:7b:62:3f:80:8d:9f:30:b2:c7:0e:e3:14:f5:00:
25:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:07:D9:02:27:D1:57:D1:AE:DB:D6:8D:AF:CA:B4:0E:86:E3:3B:C8
X509v3 Authority Key Identifier:
keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:09:89:5e:ce:16:d5:c4:1e:06:b8:51:84:74:2b:fb:c7:1f:
df:9f:b0:d8:7e:43:b5:04:1c:bf:02:dc:09:b7:86:6e:2c:bd:
ce:a4:d9:93:51:a7:3c:4b:04:7c:53:c1:9d:83:8c:99:5e:40:
d8:3f:82:61:a0:dd:86:6d:5e:5b:39:25:cd:ee:52:c5:40:a5:
a3:de:ad:ee:44:0e:b4:7e:d0:4b:4d:98:d7:f3:af:cc:87:0e:
ef:f2:b3:7c:7f:6a:0f:d5:c3:24:ec:2f:bb:66:43:fe:73:6c:
d1:20:34:37:4e:d0:ef:99:f4:09:03:45:02:bc:96:de:46:ad:
16:2c:6b:9b:e7:1d:49:29:13:8b:f6:7e:96:43:4e:ce:99:3a:
93:70:8e:92:82:82:44:44:79:07:27:02:c2:f3:e1:47:b6:d4:
0f:24:83:ec:06:76:7e:e8:4f:c5:82:22:5e:67:5f:99:86:ce:
8b:03:88:06:b1:61:2b:30:1a:b8:ff:1e:78:99:a8:f8:8f:64:
d2:c5:bc:f3:bc:ea:b0:f9:e5:ca:38:d6:63:02:c6:7e:85:55:
2f:e3:eb:9c:37:f1:e6:70:fb:50:29:fb:cc:07:45:c2:31:4a:
e4:6b:09:a3:c5:32:1e:bb:19:b0:2e:63:0b:37:dc:ff:14:e9:
f8:0d:a0:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cR4my4pQdInYWocv2fVTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWI4Zjg4OTJkMDFkZDRjODQwNzI0Y2JiYWI5MGMwY2E2
MDk0MzIwHhcNMjYwNTEyMTMwMTUwWhcNMjYwNTEzMTMwMTUwWjAzMTEwLwYDVQQD
EygwNDA3ZDkwMjI3ZDE1N2QxYWVkYmQ2OGRhZmNhYjQwZTg2ZTMzYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiXQH2Uv8bVJmyDjHp7MzQvvheqZ
yLc4IAmUgCZC1OQ+i06rp1+XNdnVfFzS6UGEFjWRmEm+6aXzGZQfwAv8fnIMO2ec
R0SOlwlBz7KKwOMLPje5mCGY43OZeoRVCeVPDXYKO+X5TjzchgIgNlCqIItsQVNp
k+kH4VbQK2b3rst/Io3JeSbIu52wzIMUhzfYSygUpNHZs+vegfj7s3QEnPPTUiuQ
pIOvFxJKdpF8mo7ow9y+IHNYtO+dvBFlOEjxv55kHZT0OTwjZx/VnpUvEyH/m8id
KHOBW26FGPYaqE9YYL6SMyPJOaAzOODvB8dTe2I/gI2fMLLHDuMU9QAlLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQH2QIn0VfRrtvWja/KtA6G4zvIMB8GA1UdIwQY
MBaAFAKrj4iS0B3UyEByTLurkMDKYJQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTNhOTUtYjA1YS00ZmM0LTlkOTEt
ZTNiNzcwMTNmZGI3LzEvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTNhOTUtYjA1YS00ZmM0LTlkOTEtZTNiNzcwMTNmZGI3
LzEvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgmJXs4W
1cQeBrhRhHQr+8cf35+w2H5DtQQcvwLcCbeGbiy9zqTZk1GnPEsEfFPBnYOMmV5A
2D+CYaDdhm1eWzklze5SxUClo96t7kQOtH7QS02Y1/OvzIcO7/KzfH9qD9XDJOwv
u2ZD/nNs0SA0N07Q75n0CQNFAryW3katFixrm+cdSSkTi/Z+lkNOzpk6k3COkoKC
RER5BycCwvPhR7bUDySD7AZ2fuhPxYIiXmdfmYbOiwOIBrFhKzAauP8eeJmo+I9k
0sW887zqsPnlyjjWYwLGfoVVL+PrnDfx5nD7UCn7zAdFwjFK5GsJo8UyHrsZsC5j
Czfc/xTp+A2gbg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:49:07 2026 by rpki-client