Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
File: AApnGNU5FVwnMAQB8sRmdRPuxbE.mft (raw, json)
Hash identifier: HVRfwXo28bZWr6vkK9XNgDw8Dme0zlu+nHV/A3UFvvA=
Subject key identifier: 84:22:75:4B:70:0B:41:5E:44:14:6F:F9:1F:61:99:2A:55:54:E6:CF
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Certificate issuer: /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial: 019D2704B85580BF6D2A1168261A3A65FCF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:53 +0000
Manifest this update: Wed 25 Mar 2026 22:01:53 +0000
Manifest next update: Thu 26 Mar 2026 22:01:53 +0000
Files and hashes: 1: AApnGNU5FVwnMAQB8sRmdRPuxbE.crl (hash: nQkOCkDlBMuyBzAJ+MICM8uV+2cJVPc134+oKmSF+6c=)
2: C3g4bPj0WpteooCh1kAuPYqRZBg.roa (hash: 0XrpEklayrORIBGmjGj7RMMjUbxEU4fiPGHiYSn1AmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b8:55:80:bf:6d:2a:11:68:26:1a:3a:65:fc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
Validity
Not Before: Mar 25 22:01:53 2026 GMT
Not After : Mar 26 22:01:53 2026 GMT
Subject: CN=8422754b700b415e44146ff91f61992a5554e6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:56:dc:95:43:bc:fc:87:ad:c3:ce:9e:a5:
cb:ce:0d:ea:13:9b:3b:7f:16:1b:dc:cd:4a:f3:1c:
63:22:3a:4b:02:aa:f4:ae:53:18:5a:60:fd:20:af:
3a:f7:4f:05:bd:e1:ca:a1:87:3f:82:66:5d:c6:a1:
43:a8:34:e4:13:db:64:36:ff:0b:6b:ef:2a:d9:85:
00:87:7d:9f:5e:bb:68:5f:43:82:83:9b:08:dc:cf:
15:78:77:14:98:cd:fb:e7:ac:6f:b0:03:6a:6f:fa:
5d:d2:4c:eb:24:34:79:7a:6a:b8:57:d0:0a:c4:66:
7b:aa:3b:95:f7:bf:f3:7d:ba:cb:c8:de:b3:31:33:
0a:de:cb:d8:3a:bf:a4:f7:03:1c:8f:d1:5e:26:f3:
d1:48:bc:2f:41:5a:df:6e:b5:01:6b:79:88:6a:e1:
b3:93:1f:63:f3:fa:cd:b2:6b:13:e4:cf:4b:31:fa:
e7:76:6a:80:d2:ae:aa:04:b2:54:df:fa:27:a7:1a:
60:e7:99:16:47:40:df:54:d7:87:29:70:5a:02:34:
5d:d2:32:66:ec:52:ff:aa:0e:1e:2f:3c:a8:d6:2e:
f4:ce:da:7e:d4:9d:1e:04:05:2f:71:ad:e3:99:5b:
7e:57:52:3c:85:df:0a:67:aa:e5:df:ef:15:cb:27:
35:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:22:75:4B:70:0B:41:5E:44:14:6F:F9:1F:61:99:2A:55:54:E6:CF
X509v3 Authority Key Identifier:
keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:2b:44:b0:f4:b7:d9:32:5d:02:10:85:00:6a:53:79:a4:87:
f1:6a:52:e2:62:b4:32:9d:08:90:b1:00:cf:81:ca:ce:c2:54:
2c:79:fe:ab:44:08:06:5a:e0:38:a3:54:9e:19:05:db:97:9c:
fd:a3:f9:59:ba:1b:f6:71:f6:27:7b:a8:41:6b:c0:b8:2e:00:
b4:fd:b3:58:b6:60:3d:4c:8d:a5:61:65:c7:2b:d8:ea:73:97:
4f:0b:c6:aa:a3:79:90:ee:de:ae:c7:81:a2:87:20:39:b1:6c:
e1:eb:fb:43:73:fb:91:31:71:6a:0e:d4:84:28:41:2a:e0:17:
7e:81:21:64:26:d2:1b:b4:e3:02:5d:1c:c2:79:c8:96:26:bc:
ee:b7:88:89:42:f4:44:c6:eb:f2:12:48:6c:9e:69:65:90:e3:
60:c9:62:91:bc:8f:36:b6:df:ca:9b:3a:c0:19:18:23:18:a1:
c1:5a:f6:ae:f1:4f:ad:a8:4e:21:47:6a:58:6f:d5:04:1b:5d:
06:48:81:43:fa:95:d3:67:b0:b1:f2:a7:8d:e9:c5:7f:a7:cd:
b8:c8:b4:5d:2a:5d:6a:f5:cb:e5:4e:a7:d0:2f:55:78:b7:e1:
8a:13:98:e2:ff:f4:95:d6:cb:3b:c7:9b:7b:a5:bc:45:8c:50:
95:aa:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:07 2026 by rpki-client