Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
File: AAtPqsebsZaQw69aB4xssUqRrUI.mft (raw, json)
Hash identifier: zuljqSwq5jUgLHPJM4zOM/TGIbWM2ggKixM81JVJAms=
Subject key identifier: D2:B4:8D:19:DC:87:66:90:97:FB:87:D4:A8:B8:1F:7A:98:AB:85:0D
Authority key identifier: 00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
Certificate issuer: /CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Certificate serial: 019F921155620CEAE739585AD81D31743C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
Manifest number: 1442
Signing time: Fri 24 Jul 2026 03:00:37 +0000
Manifest this update: Fri 24 Jul 2026 03:00:37 +0000
Manifest next update: Sat 25 Jul 2026 03:00:37 +0000
Files and hashes: 1: AAtPqsebsZaQw69aB4xssUqRrUI.crl (hash: LgCYo7GMcqRxTKN8hiyfeb3jmbDeDVPwCa76hWN6OhY=)
2: qkYI2TpaHCn0Rl7Zcn2B5GIJgQM.roa (hash: fcQ2Ei/HI72zlpQU19GPaQ5DdqwsBsYj6lbFhVkHW2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:55:62:0c:ea:e7:39:58:5a:d8:1d:31:74:3c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000b4faac79bb19690c3af5a078c6cb14a91ad42
Validity
Not Before: Jul 24 03:00:37 2026 GMT
Not After : Jul 25 03:00:37 2026 GMT
Subject: CN=d2b48d19dc87669097fb87d4a8b81f7a98ab850d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:07:aa:40:d8:fc:11:0f:cf:74:4b:20:fc:28:
9d:51:16:cb:da:c0:da:b0:47:30:de:64:ff:f8:55:
8c:e5:27:fe:7c:0c:dd:ce:89:27:4f:8b:58:e2:74:
e1:1d:cd:ec:4e:15:b7:43:bb:64:26:86:2e:17:a3:
47:f3:3b:3f:2c:f0:12:a6:c7:9e:7c:7f:b0:78:41:
eb:d6:d6:f3:a4:75:a7:2f:59:57:5d:f0:69:90:f8:
76:9f:04:fc:b5:d8:6f:77:5f:ab:96:3b:9a:1d:bb:
71:39:34:5b:66:b1:4b:28:ec:3d:d2:1e:83:f8:27:
35:a6:69:ee:fa:26:02:f0:76:a6:8d:2c:d7:7f:a9:
f8:1e:7b:0c:0b:68:d1:e0:26:f3:19:e0:16:eb:c4:
28:0f:5a:a8:21:22:6b:9b:06:a9:a7:9c:a5:cb:19:
9d:1e:54:c6:84:f7:f6:26:ba:99:07:f7:ed:4e:0f:
56:87:b1:45:3e:e2:cf:83:2f:a4:c4:e1:95:14:88:
14:f3:50:73:17:fd:a3:ba:c9:aa:bc:05:4c:fb:e8:
3a:25:1e:b8:f5:b6:68:58:0a:e7:e8:32:43:e4:2f:
2a:4d:3f:70:d4:2f:cd:48:9c:3f:56:6d:87:3f:df:
16:f8:83:a4:c0:42:9a:82:29:6b:ed:9c:ac:95:10:
c0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B4:8D:19:DC:87:66:90:97:FB:87:D4:A8:B8:1F:7A:98:AB:85:0D
X509v3 Authority Key Identifier:
keyid:00:0B:4F:AA:C7:9B:B1:96:90:C3:AF:5A:07:8C:6C:B1:4A:91:AD:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAtPqsebsZaQw69aB4xssUqRrUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/990bb5-fe42-4985-9caf-a096eecda793/1/AAtPqsebsZaQw69aB4xssUqRrUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fb:67:15:07:23:e0:7d:29:21:a1:54:ef:4e:1e:8c:96:6b:
2e:20:dc:be:b0:08:87:78:6f:14:f8:06:05:fb:f2:40:0b:aa:
50:df:c3:2e:eb:b1:c3:20:34:d9:3d:da:e7:e1:fb:ff:70:de:
40:3a:37:53:e3:49:c1:7d:52:8f:a0:36:32:84:38:c6:80:4a:
70:19:c5:12:28:1b:2f:e4:4c:31:df:d9:86:87:46:20:bc:e2:
f7:58:6a:13:9c:7f:49:2e:b8:1e:de:e4:65:ea:b4:e5:0f:9c:
73:19:6a:91:c1:d2:80:c4:f8:e2:a8:f0:a9:a4:4c:aa:d3:0f:
0c:cf:f9:cf:40:4e:d2:f2:ad:2c:d1:5f:6b:cc:bd:17:2b:c0:
0d:3e:b0:cb:93:98:59:f6:78:1d:93:17:12:cb:62:cf:98:4b:
ba:c0:f6:96:bd:30:5f:5c:6d:c1:70:d8:00:04:ea:87:a4:33:
81:eb:66:10:da:e0:77:64:ce:f7:82:fb:81:56:49:15:81:8d:
d8:14:12:49:8c:40:99:f3:f9:6c:71:95:34:f6:e1:a2:66:25:
4f:1f:73:a2:5c:d1:fa:64:56:0c:af:8b:28:e2:ed:97:51:c2:
36:91:ce:1a:a4:34:50:3b:60:a4:4e:01:ef:dc:c0:f3:1a:32:
ab:b2:bf:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:03 2026 by rpki-client