Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File: A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier: 2WPnlsxXvFlIUFOr0o4/n+14JrVnCM/bFmSPHPBeOkE=
Subject key identifier: B7:59:CB:37:62:0F:FF:7D:A3:92:F2:F7:1F:D5:A0:89:09:D8:70:7C
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer: /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial: 01A0D124EE5B81AF0BED4ADCFB30AB9EC9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number: 0908
Signing time: Thu 24 Sep 2026 02:00:53 +0000
Manifest this update: Thu 24 Sep 2026 02:00:53 +0000
Manifest next update: Fri 25 Sep 2026 02:00:53 +0000
Files and hashes: 1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: IpXdooLVgECTQOWMTJY0bQit5ohUG8tCMaGJJb4CLI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:ee:5b:81:af:0b:ed:4a:dc:fb:30:ab:9e:c9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Validity
Not Before: Sep 24 02:00:53 2026 GMT
Not After : Sep 25 02:00:53 2026 GMT
Subject: CN=b759cb37620fff7da392f2f71fd5a08909d8707c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:0c:30:b4:d9:c6:ae:c2:80:6c:82:e3:a9:
b7:4d:20:03:6c:51:36:cd:6f:9e:52:6a:3e:1e:bc:
35:77:1f:44:29:cd:88:ba:22:85:32:9a:d4:a2:b3:
c5:0c:d1:ca:29:c8:91:93:a5:85:67:d2:ed:98:23:
7f:62:c0:82:dc:5d:21:56:e0:50:d6:3e:34:f6:08:
12:ab:bf:f4:68:cc:99:42:60:f3:51:85:82:12:44:
28:06:ed:56:07:6f:53:47:4d:78:de:24:48:58:fe:
f3:37:79:4b:73:5a:0e:39:31:6d:10:8c:4b:ac:85:
e5:36:91:71:82:4e:ef:8c:f1:a6:90:55:e6:33:ec:
c8:30:71:bd:f4:6d:48:ff:d6:ef:b3:d1:3f:1e:7a:
cb:19:97:55:87:53:8c:83:b5:7a:c2:8d:6a:c2:40:
72:58:71:e6:5f:3b:8d:06:a6:74:bd:58:29:32:36:
b1:19:65:21:b5:d4:2e:51:28:00:8d:05:35:02:2f:
8f:3a:5c:e9:57:15:0a:d7:55:d7:89:fb:3e:89:e2:
27:46:d9:3a:71:ea:b2:ee:51:08:11:9d:39:a5:15:
e3:8c:51:87:50:7b:31:bd:f8:28:b7:15:d2:4d:93:
a0:90:5e:7c:16:9d:91:ff:cc:d9:68:4a:94:70:40:
87:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:59:CB:37:62:0F:FF:7D:A3:92:F2:F7:1F:D5:A0:89:09:D8:70:7C
X509v3 Authority Key Identifier:
keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:32:73:e2:e8:5b:6a:d6:9f:23:0d:8b:dc:5a:15:c3:00:38:
e9:62:18:8b:9d:c6:43:65:75:f4:54:c1:b3:eb:a6:e4:a3:e9:
c3:15:2b:a2:d0:7f:4d:64:69:2d:51:8a:22:6a:a5:0d:51:08:
fd:e2:bc:88:a2:95:d4:43:ec:82:78:13:64:5e:e8:91:a3:20:
41:b5:9c:d9:08:11:34:b8:4e:78:54:b3:10:ad:5e:10:a6:4c:
eb:38:f0:60:03:7e:ad:5b:7b:25:6a:26:52:39:41:a6:24:33:
58:f3:28:60:c9:78:0e:ea:72:9a:1c:a0:ab:36:5a:97:19:8e:
75:b0:25:13:96:7c:9d:86:84:e3:10:a5:e7:0e:87:05:52:49:
ed:30:8f:79:02:5e:4d:33:6b:9f:94:51:68:0c:f9:ab:e0:b6:
b8:31:a7:ce:cb:3e:79:4b:98:b4:ed:69:5c:d5:2a:ee:76:14:
45:38:2d:26:37:7a:75:25:ee:0d:c3:fc:2a:ba:25:b9:8b:d4:
8a:90:28:48:65:74:87:30:e1:59:2d:2d:c4:90:dc:a2:b4:ce:
f6:8a:b3:d9:8c:b3:0a:a7:97:b2:02:79:93:08:57:3d:bc:fc:
44:cf:6f:b4:47:a4:cd:43:9b:75:11:0c:6f:35:03:86:78:12:
7d:8e:1c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:10:05 2026 by rpki-client