Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
File: ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft (raw, json)
Hash identifier: g69b/ZifDQbLpAdCkRXZo3u/LvaAFYdascfIKXWhhMc=
Subject key identifier: D4:44:40:C9:78:1C:93:80:AC:8C:D2:63:FD:2E:5F:D1:16:44:D8:FF
Authority key identifier: 6A:10:B7:C5:4E:6F:95:B1:D9:B8:4A:AC:3D:9D:A7:42:A0:E0:2A:6C
Certificate issuer: /CN=6a10b7c54e6f95b1d9b84aac3d9da742a0e02a6c
Certificate serial: 019D98F42CD669B29EDA9CFC1659951DB125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
Manifest number: 1480
Signing time: Fri 17 Apr 2026 01:00:32 +0000
Manifest this update: Fri 17 Apr 2026 01:00:32 +0000
Manifest next update: Sat 18 Apr 2026 01:00:32 +0000
Files and hashes: 1: ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl (hash: iuezGoyvEBh27e+WPidnxtlDytKwFdvVbR299I02xiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:2c:d6:69:b2:9e:da:9c:fc:16:59:95:1d:b1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a10b7c54e6f95b1d9b84aac3d9da742a0e02a6c
Validity
Not Before: Apr 17 01:00:32 2026 GMT
Not After : Apr 18 01:00:32 2026 GMT
Subject: CN=d44440c9781c9380ac8cd263fd2e5fd11644d8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:74:2e:ed:26:3c:d6:7a:c8:ce:52:4e:0c:
aa:ba:e5:91:63:0d:6f:a2:5a:12:8d:27:a4:81:e0:
11:22:4b:8f:f0:e2:18:3b:ca:dd:35:54:a5:71:48:
6a:40:63:80:d7:e6:40:69:e8:7a:3e:d3:55:00:78:
d7:1b:57:55:83:1d:b2:b4:e3:19:b3:81:8a:a3:6a:
60:84:2d:b3:44:50:80:17:e3:92:2d:5f:b5:ae:5b:
7a:07:36:ab:c5:b0:dc:33:b0:03:94:3b:f4:10:2c:
dd:22:49:e1:b0:f2:5c:97:7b:b1:bf:d1:0a:ad:92:
5f:38:f7:82:f1:90:f9:e3:bc:73:15:52:a0:02:0d:
a8:a2:93:a9:db:e7:c7:c0:83:9d:e7:43:3f:4c:46:
81:34:8b:61:73:40:fa:a8:82:ce:a1:28:00:09:3f:
3a:ed:26:79:9d:36:15:74:e8:19:32:f8:48:99:a1:
b9:67:81:5b:97:fb:95:9c:03:f4:79:e6:04:fd:9a:
92:78:b9:47:8d:80:25:b3:0e:29:87:93:3f:d0:75:
c9:55:46:ff:2a:83:c5:e6:2e:08:00:b9:ab:74:52:
d6:da:f9:e4:c3:57:53:dc:03:7a:37:f0:b8:af:3a:
84:71:d6:cf:2d:1f:2c:6c:a2:88:3e:19:d3:b2:4b:
23:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:44:40:C9:78:1C:93:80:AC:8C:D2:63:FD:2E:5F:D1:16:44:D8:FF
X509v3 Authority Key Identifier:
keyid:6A:10:B7:C5:4E:6F:95:B1:D9:B8:4A:AC:3D:9D:A7:42:A0:E0:2A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:01:92:09:5b:23:1e:d6:49:66:fd:87:45:aa:91:fd:09:5f:
ff:25:53:cb:14:24:bd:78:00:dc:2b:77:bc:85:f5:80:1c:16:
be:35:b0:f0:5f:aa:6f:63:cd:f4:23:30:49:fd:e1:21:0a:68:
e4:b7:ba:c8:75:7e:70:fb:2c:95:53:7c:39:5b:fa:4b:bd:c2:
20:26:8a:af:73:a6:4a:0b:3e:48:9f:86:66:72:c0:06:3c:70:
47:ea:34:7d:81:e2:06:3f:1d:73:b2:36:50:1e:c5:99:90:db:
f9:da:e0:e0:14:ff:fc:78:84:9b:a3:05:84:59:95:5a:72:e6:
90:46:52:e2:ff:d6:63:15:a7:c5:18:bf:eb:58:c7:f3:e4:f2:
63:c6:6f:88:5b:cb:14:e9:e7:54:d8:5f:63:80:94:27:3b:c1:
27:61:56:35:bc:6a:04:3c:70:e5:68:3f:58:00:c5:94:b3:e6:
71:b6:94:5b:de:18:16:e7:9b:c8:1d:b2:9a:cb:b7:72:9d:30:
40:b3:fd:e9:48:ec:07:b1:39:8f:34:bd:c0:de:4c:bc:cd:01:
17:94:aa:ef:b8:f5:ad:4a:aa:77:3b:67:86:6f:79:bb:00:9a:
74:5b:30:67:0b:87:38:f8:03:c3:cd:97:ff:85:23:53:d2:da:
2b:ad:31:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:50 2026 by rpki-client