Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
File: A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json)
Hash identifier: DRl2DFynR6teBspPJRmVvjLn9CpZi2qmW4/dvIVrcTU=
Subject key identifier: DD:03:DE:2D:47:4D:CF:EA:A1:A4:FA:F7:71:7F:5A:FD:CB:86:A5:6C
Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
Certificate issuer: /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Certificate serial: 019F909158283CF74702A92C22922F415506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
Manifest number: 0862
Signing time: Thu 23 Jul 2026 20:01:11 +0000
Manifest this update: Thu 23 Jul 2026 20:01:11 +0000
Manifest next update: Fri 24 Jul 2026 20:01:11 +0000
Files and hashes: 1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: WpSI4RW6/nwrG9IDf/VbxhBQcMVnOHl4RGzNivkEDQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:58:28:3c:f7:47:02:a9:2c:22:92:2f:41:55:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3
Validity
Not Before: Jul 23 20:01:11 2026 GMT
Not After : Jul 24 20:01:11 2026 GMT
Subject: CN=dd03de2d474dcfeaa1a4faf7717f5afdcb86a56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:ae:07:56:e1:68:fb:96:5a:21:c4:51:e4:
a6:df:38:e8:26:f8:b4:52:69:e8:aa:cf:2c:18:a3:
76:a2:f3:25:22:8c:4d:8d:81:ad:55:01:a7:fb:6d:
a4:54:39:26:7b:e2:79:e8:c0:d0:35:ed:0a:8a:8f:
c7:65:1d:16:9b:c9:1b:ee:03:41:9c:bb:c9:d5:45:
cf:4c:31:82:28:28:05:77:d6:21:0b:bb:ac:5e:ab:
ee:be:19:f7:d7:47:09:b7:99:d0:46:1d:ff:c8:01:
1e:a8:67:92:d8:ca:b2:f2:04:4e:eb:60:be:c7:f5:
a9:c5:3a:19:5e:57:36:f0:66:64:7a:0c:bb:d0:49:
99:65:d6:4c:dd:55:e0:13:52:90:6b:e3:2d:9b:e6:
7a:e6:1c:3a:31:b1:77:d5:5d:21:fd:da:26:84:e6:
32:91:a2:ad:6a:54:05:14:a7:ca:7e:64:03:4d:00:
74:2c:ca:18:fb:2f:db:a0:b1:22:30:a4:e0:18:cc:
a7:ee:d8:8f:0b:3d:e4:96:84:89:23:4c:23:7b:25:
59:77:68:5e:f5:3c:b5:06:d8:a9:38:e7:67:3b:1b:
50:ea:a0:4b:bf:42:70:1f:5d:35:16:2c:be:78:64:
75:59:59:b8:f1:eb:84:64:d4:fd:2a:49:fd:94:4a:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:03:DE:2D:47:4D:CF:EA:A1:A4:FA:F7:71:7F:5A:FD:CB:86:A5:6C
X509v3 Authority Key Identifier:
keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7e:17:c5:5a:16:93:7c:aa:9a:dd:78:f1:cf:78:13:10:46:
85:46:71:0d:3e:81:6d:19:71:e2:d7:9e:ef:9f:d4:0a:d2:d9:
49:24:2c:f7:4e:d6:ca:4e:0f:fa:c4:ac:ea:22:d9:07:1c:dd:
24:b0:cb:7c:98:71:8e:a6:f0:c2:aa:77:8d:83:87:ce:7e:a6:
24:4f:fc:37:d2:52:af:26:82:b3:a5:8d:9c:7e:5b:5b:ad:07:
21:17:23:22:ba:1c:43:98:ec:b7:95:61:b7:98:0d:a6:89:bb:
a8:fb:c4:a2:45:1f:02:32:82:93:99:ea:d9:d1:4d:52:45:95:
8a:5b:47:dc:32:e8:a5:a3:78:0a:7e:8d:be:2b:b7:ca:f9:26:
a7:d0:f1:77:7f:d2:44:bc:ce:a1:59:3a:c7:75:f6:61:bf:4f:
e8:36:a0:cf:aa:1a:b0:c9:20:3f:ed:e6:db:63:b8:be:30:48:
99:4d:43:4e:d4:04:d2:20:93:a2:b5:b2:8c:f8:88:62:43:99:
86:ee:f3:39:9a:5c:cc:22:ed:fd:78:d9:46:c3:ee:cb:2b:c7:
82:d7:85:ed:9e:61:e0:50:56:e8:ec:dc:13:36:69:b3:99:fc:
84:df:5f:8b:73:16:94:ce:0c:b9:e7:42:89:ec:8f:de:32:2e:
55:01:db:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:37 2026 by rpki-client