Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier: bwct+PQ0cjcYqysVJs6zU5AjgnB/hBjifDvPldXqb4k=
Subject key identifier: D7:26:76:3D:7E:72:A4:C3:A0:A3:8B:1B:B4:4E:F6:8E:39:44:DF:FB
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial: 019D28F2E115B93064A773FCEF634C76DF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number: 1882
Signing time: Thu 26 Mar 2026 07:01:39 +0000
Manifest this update: Thu 26 Mar 2026 07:01:39 +0000
Manifest next update: Fri 27 Mar 2026 07:01:39 +0000
Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: UdpsIBfYkFK9CtNwpTUbqGkvZwaf260GGP5Tya+P/rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:e1:15:b9:30:64:a7:73:fc:ef:63:4c:76:df:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Validity
Not Before: Mar 26 07:01:39 2026 GMT
Not After : Mar 27 07:01:39 2026 GMT
Subject: CN=d726763d7e72a4c3a0a38b1bb44ef68e3944dffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:19:c9:1a:97:89:48:68:03:1b:65:ac:95:bd:
f3:46:10:f4:7b:f0:8b:68:1b:24:8a:67:88:58:6a:
26:be:00:d4:8e:b8:5e:d3:f6:81:0c:02:53:e8:70:
81:d7:76:7b:af:ac:1a:00:d2:11:77:6e:d9:e9:e6:
22:bf:34:be:f2:c0:d6:f6:cd:04:a1:da:95:44:12:
6e:70:46:f2:b8:1e:b1:96:be:7e:b7:24:49:18:a1:
40:dd:df:7b:bd:be:d4:c9:fe:74:bd:49:10:7b:31:
c8:e7:f1:08:45:1a:ac:68:9b:6b:d6:fb:60:dc:68:
29:7d:0e:13:d7:dd:5b:49:0c:44:cf:9e:e5:13:f9:
84:c5:45:d0:f7:f9:33:5b:3d:00:74:eb:0c:ec:ac:
03:c5:09:0d:17:b5:5c:8c:58:cb:62:d9:1e:d0:97:
74:fa:0b:44:fa:5a:1a:d9:5e:0c:18:35:2d:c8:9c:
c2:81:df:28:8a:d2:bd:3e:c1:a1:62:8f:fd:ae:64:
26:f5:a9:20:0d:b6:26:42:84:29:1e:c3:a2:01:d2:
97:e6:63:80:a2:c0:25:c8:05:2d:ba:02:df:ec:e3:
d3:6a:09:53:b5:76:f8:f1:68:1f:a6:f5:1e:9e:15:
18:78:a8:e4:5b:3d:cb:00:4a:a2:09:3f:a7:c5:18:
dd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:26:76:3D:7E:72:A4:C3:A0:A3:8B:1B:B4:4E:F6:8E:39:44:DF:FB
X509v3 Authority Key Identifier:
keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e4:4d:a8:3e:b2:ac:45:64:ad:f9:b7:87:19:aa:4b:49:95:
31:11:a3:7e:64:21:98:fd:48:ee:e5:02:f7:18:ed:a1:27:a5:
01:51:21:66:cd:14:24:77:07:ff:c8:95:a3:3b:66:4a:e4:d5:
90:f3:be:87:80:13:63:8b:cf:e4:47:83:99:8a:fd:5c:a7:75:
3d:cd:53:d9:8f:44:9e:6d:44:b8:c8:1b:5c:f6:6d:e5:26:e0:
be:27:20:03:7b:b8:18:df:aa:02:e7:fd:7d:57:ec:17:c1:c2:
e4:86:e4:01:ca:47:f8:01:dd:42:97:a1:2b:5c:0c:70:a9:e0:
90:1d:43:8a:2a:e0:95:ae:80:06:14:e4:db:5c:ab:a8:46:86:
ed:5f:e4:23:8f:3e:e4:0c:87:10:4c:90:0a:2f:c1:11:21:6d:
21:01:f7:67:35:25:d5:5a:23:44:75:41:58:4e:42:65:5a:34:
1a:21:d1:00:0c:d1:11:6f:08:88:8a:be:38:2e:d2:58:5e:61:
5f:89:ef:d5:59:bf:5d:7b:93:d0:51:ad:ed:81:c8:95:cf:38:
f8:50:47:c7:ee:b2:94:1b:26:43:5e:35:76:d7:2f:77:40:70:
c7:fe:7e:30:5a:45:6c:d3:2d:e4:38:6b:6b:ce:f5:3a:f3:b9:
53:c0:0d:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8uEVuTBkp3P872NMdt8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWI4Zjg4OTJkMDFkZDRjODQwNzI0Y2JiYWI5MGMwY2E2
MDk0MzIwHhcNMjYwMzI2MDcwMTM5WhcNMjYwMzI3MDcwMTM5WjAzMTEwLwYDVQQD
EyhkNzI2NzYzZDdlNzJhNGMzYTBhMzhiMWJiNDRlZjY4ZTM5NDRkZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hnJGpeJSGgDG2Wslb3zRhD0e/CL
aBskimeIWGomvgDUjrhe0/aBDAJT6HCB13Z7r6waANIRd27Z6eYivzS+8sDW9s0E
odqVRBJucEbyuB6xlr5+tyRJGKFA3d97vb7Uyf50vUkQezHI5/EIRRqsaJtr1vtg
3GgpfQ4T191bSQxEz57lE/mExUXQ9/kzWz0AdOsM7KwDxQkNF7VcjFjLYtke0Jd0
+gtE+loa2V4MGDUtyJzCgd8oitK9PsGhYo/9rmQm9akgDbYmQoQpHsOiAdKX5mOA
osAlyAUtugLf7OPTaglTtXb48WgfpvUenhUYeKjkWz3LAEqiCT+nxRjdtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcmdj1+cqTDoKOLG7RO9o45RN/7MB8GA1UdIwQY
MBaAFAKrj4iS0B3UyEByTLurkMDKYJQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTNhOTUtYjA1YS00ZmM0LTlkOTEt
ZTNiNzcwMTNmZGI3LzEvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTNhOTUtYjA1YS00ZmM0LTlkOTEtZTNiNzcwMTNmZGI3
LzEvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+RNqD6y
rEVkrfm3hxmqS0mVMRGjfmQhmP1I7uUC9xjtoSelAVEhZs0UJHcH/8iVoztmSuTV
kPO+h4ATY4vP5EeDmYr9XKd1Pc1T2Y9Enm1EuMgbXPZt5SbgvicgA3u4GN+qAuf9
fVfsF8HC5IbkAcpH+AHdQpehK1wMcKngkB1Diirgla6ABhTk21yrqEaG7V/kI48+
5AyHEEyQCi/BESFtIQH3ZzUl1VojRHVBWE5CZVo0GiHRAAzREW8IiIq+OC7SWF5h
X4nv1Vm/XXuT0FGt7YHIlc84+FBHx+6ylBsmQ141dtcvd0Bwx/5+MFpFbNMt5Dhr
a871OvO5U8AN5Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:49 2026 by rpki-client