Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
File: ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft (raw, json)
Hash identifier: xI0nM6PJZXIoa+V1dVKsZE24RLmDBzk0SpFZZvuihn8=
Subject key identifier: 24:AE:1A:0C:66:50:39:96:9D:83:A5:FF:F5:89:24:C3:FA:FF:A1:04
Authority key identifier: 6A:10:B7:C5:4E:6F:95:B1:D9:B8:4A:AC:3D:9D:A7:42:A0:E0:2A:6C
Certificate issuer: /CN=6a10b7c54e6f95b1d9b84aac3d9da742a0e02a6c
Certificate serial: 019CAD5A329C456E7C1171E1360A7271D289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
Manifest number: 1406
Signing time: Mon 02 Mar 2026 07:01:35 +0000
Manifest this update: Mon 02 Mar 2026 07:01:35 +0000
Manifest next update: Tue 03 Mar 2026 07:01:35 +0000
Files and hashes: 1: ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl (hash: qtMDAzseJwB6zFvYJsW9od4C6VlYUh54pYep87NOHGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:32:9c:45:6e:7c:11:71:e1:36:0a:72:71:d2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a10b7c54e6f95b1d9b84aac3d9da742a0e02a6c
Validity
Not Before: Mar 2 07:01:35 2026 GMT
Not After : Mar 3 07:01:35 2026 GMT
Subject: CN=24ae1a0c665039969d83a5fff58924c3faffa104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:36:7d:42:17:84:28:1c:61:66:f6:16:d0:
37:88:7b:a8:a0:a6:db:8d:3a:b6:48:51:9f:33:7f:
c1:4d:e5:da:65:47:e7:89:5f:d7:1f:d3:9d:04:74:
a6:15:5f:11:ca:aa:20:00:95:87:80:2b:c5:e6:e8:
ee:76:7b:a3:ee:ea:28:ad:5c:e0:51:9d:c4:da:7f:
d5:f4:85:2c:09:c3:3d:5c:c3:3f:dd:c2:ca:b9:ba:
3b:38:d9:07:aa:92:f6:7b:ca:c0:3a:48:ad:27:72:
d0:a1:87:a2:35:95:52:10:ec:0d:9b:05:8c:b3:8b:
a9:e1:af:ea:a4:1f:4d:80:1c:d0:b4:0e:27:bf:42:
78:9e:6e:a8:d5:a8:da:76:90:25:8b:ae:1b:8e:54:
74:1a:cc:96:7f:03:3a:41:df:29:77:97:5b:77:01:
70:a4:b9:6b:0d:f6:29:d2:fa:1f:23:f1:59:e5:67:
3c:29:c7:91:de:fe:90:d5:9d:49:31:c5:ae:f2:c7:
9c:b4:7f:cd:c4:e1:d8:a2:50:36:1c:49:a9:6a:b5:
d1:41:20:6c:dd:9c:04:d4:23:62:88:36:f2:24:a1:
a1:ec:12:5a:e8:00:36:30:08:e2:cf:42:ea:6c:2c:
d5:a6:71:86:8f:4f:4a:3b:82:07:8e:35:bb:96:ba:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AE:1A:0C:66:50:39:96:9D:83:A5:FF:F5:89:24:C3:FA:FF:A1:04
X509v3 Authority Key Identifier:
keyid:6A:10:B7:C5:4E:6F:95:B1:D9:B8:4A:AC:3D:9D:A7:42:A0:E0:2A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c1:2e:ef:9f:31:55:4b:18:7e:8d:0f:36:57:8c:47:6d:b5:
29:50:9d:c1:cc:b5:0c:98:16:0b:88:d1:2a:b2:7c:c4:5a:0f:
b4:a1:5a:a5:3b:84:58:98:75:b5:6d:c2:36:78:44:38:85:4d:
9e:80:6c:4a:55:8d:47:94:90:ee:3a:b6:10:c6:80:fd:a5:b6:
07:01:e7:df:df:ed:c5:c3:4a:cf:8f:fa:13:6a:51:bc:31:e9:
03:99:ff:70:38:0b:8f:f9:fb:11:9c:c1:c1:cf:01:0f:0d:87:
75:e5:f6:05:1f:8c:0d:59:4e:66:fc:80:84:11:15:25:0f:3c:
32:22:7f:5b:1c:d0:42:49:a2:eb:dc:ef:d6:e5:a2:d9:00:fe:
20:fb:50:eb:0c:1a:e6:09:b3:26:ce:16:c8:73:78:e2:50:e1:
7c:d0:85:90:50:04:cf:74:e2:27:52:ae:80:5b:bd:7c:78:62:
30:cc:c5:eb:8a:bb:7e:7f:49:c6:9f:2f:88:66:0e:cb:c9:e6:
71:95:6c:3c:46:14:7b:3c:14:cb:f0:b9:be:4b:52:2e:e0:d3:
ea:9c:32:58:a6:98:1b:bf:aa:67:d9:91:9e:ac:3f:65:ea:af:
d4:c4:58:c3:84:e1:23:fd:26:fe:17:30:31:d9:5b:1c:c6:ab:
63:e0:18:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWjKcRW58EXHhNgpycdKJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMTBiN2M1NGU2Zjk1YjFkOWI4NGFhYzNkOWRhNzQyYTBl
MDJhNmMwHhcNMjYwMzAyMDcwMTM1WhcNMjYwMzAzMDcwMTM1WjAzMTEwLwYDVQQD
EygyNGFlMWEwYzY2NTAzOTk2OWQ4M2E1ZmZmNTg5MjRjM2ZhZmZhMTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYY2fUIXhCgcYWb2FtA3iHuooKbb
jTq2SFGfM3/BTeXaZUfniV/XH9OdBHSmFV8RyqogAJWHgCvF5ujudnuj7uoorVzg
UZ3E2n/V9IUsCcM9XMM/3cLKubo7ONkHqpL2e8rAOkitJ3LQoYeiNZVSEOwNmwWM
s4up4a/qpB9NgBzQtA4nv0J4nm6o1ajadpAli64bjlR0GsyWfwM6Qd8pd5dbdwFw
pLlrDfYp0vofI/FZ5Wc8KceR3v6Q1Z1JMcWu8sectH/NxOHYolA2HEmparXRQSBs
3ZwE1CNiiDbyJKGh7BJa6AA2MAjiz0LqbCzVpnGGj09KO4IHjjW7lrq2fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSuGgxmUDmWnYOl//WJJMP6/6EEMB8GA1UdIwQY
MBaAFGoQt8VOb5Wx2bhKrD2dp0Kg4CpsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWhDM3hVNXZsYkhadUVxc1BaMm5RcURnS213LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS84YTJlODUtOTQ4MC00MWEyLWEyNTUt
MmRjYWQ2ZWU3MWZiLzEvYWhDM3hVNXZsYkhadUVxc1BaMm5RcURnS213Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS84YTJlODUtOTQ4MC00MWEyLWEyNTUtMmRjYWQ2ZWU3MWZi
LzEvYWhDM3hVNXZsYkhadUVxc1BaMm5RcURnS213LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8Eu758x
VUsYfo0PNleMR221KVCdwcy1DJgWC4jRKrJ8xFoPtKFapTuEWJh1tW3CNnhEOIVN
noBsSlWNR5SQ7jq2EMaA/aW2BwHn39/txcNKz4/6E2pRvDHpA5n/cDgLj/n7EZzB
wc8BDw2HdeX2BR+MDVlOZvyAhBEVJQ88MiJ/WxzQQkmi69zv1uWi2QD+IPtQ6wwa
5gmzJs4WyHN44lDhfNCFkFAEz3TiJ1KugFu9fHhiMMzF64q7fn9Jxp8viGYOy8nm
cZVsPEYUezwUy/C5vktSLuDT6pwyWKaYG7+qZ9mRnqw/Zeqv1MRYw4ThI/0m/hcw
MdlbHMarY+AY4Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:19 2026 by rpki-client