Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json)
Hash identifier: JjVSOhPgqalJbt21R5VleNFaGtkWqHTBkHDoO9BpInY=
Subject key identifier: 71:93:0A:A0:EB:4B:00:CD:92:58:7C:6B:A2:CF:19:87:82:A5:0A:D5
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 01A1250B4DD61E9D313381D7B9AC6D5131EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
Manifest number: 0A14
Signing time: Sat 10 Oct 2026 09:01:00 +0000
Manifest this update: Sat 10 Oct 2026 09:01:00 +0000
Manifest next update: Sun 11 Oct 2026 09:01:00 +0000
Files and hashes: 1: RYjmwwSeitE7YflGQ-BXVuEOw-Y.roa (hash: +mZHJEVEx50dKyXD00LKvcDkY+DRVgSg2B5Jqah+/wo=)
2: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: FD8eFLs9yXcEXnI7RVMPHDoCFrTYK93Qci4Hx16xuSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:4d:d6:1e:9d:31:33:81:d7:b9:ac:6d:51:31:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: Oct 10 09:01:00 2026 GMT
Not After : Oct 11 09:01:00 2026 GMT
Subject: CN=71930aa0eb4b00cd92587c6ba2cf198782a50ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:5f:c4:54:03:34:4e:f8:45:2d:c3:9a:33:
6c:d2:dc:fd:ef:40:f0:0e:74:a9:6d:af:79:bb:f6:
a9:12:22:0c:3c:20:d6:98:21:a3:18:bd:80:62:67:
6e:a0:60:af:ac:b6:93:d9:3e:70:5e:d3:d4:02:b2:
72:45:36:05:58:39:3d:f4:06:16:23:33:33:c1:7e:
99:1f:cf:04:d2:45:ec:e9:fb:78:e5:ea:77:f6:b9:
c2:4c:ac:ed:13:25:63:fc:43:88:58:07:06:ee:b5:
56:da:ef:36:ee:f9:67:f6:dc:d8:4f:19:13:35:cf:
73:33:fc:fd:52:20:9b:97:fb:db:4d:7d:2c:b0:e8:
a3:4c:f5:aa:bb:7f:d1:85:0b:f6:45:db:08:7b:f7:
00:0f:61:08:29:1e:97:2e:5c:96:9f:d3:86:ad:79:
25:21:c6:39:8a:99:ab:6d:2d:5f:c9:00:14:e9:13:
ad:90:89:39:39:58:43:22:62:b2:2e:92:91:dc:a0:
db:69:73:ef:db:32:f4:77:dd:47:d0:1b:8d:76:79:
3d:20:57:af:35:74:fa:c7:59:fc:85:60:a8:c6:4c:
61:4b:2f:5e:fb:cd:06:c6:df:81:ea:a2:40:6f:40:
63:75:02:c8:38:4a:5c:c2:74:41:8b:11:89:f7:79:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:93:0A:A0:EB:4B:00:CD:92:58:7C:6B:A2:CF:19:87:82:A5:0A:D5
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:85:2a:1c:62:6f:c1:f5:34:ca:5e:af:f4:2e:b6:ee:07:19:
54:52:65:07:f4:1f:ac:11:47:6a:56:5c:fb:ca:f2:04:0c:e4:
a4:0f:e5:46:84:91:ac:4f:77:cd:77:1b:4b:ab:20:52:0a:4f:
16:09:c2:b1:8a:fe:1b:75:5c:5c:9a:dd:c5:4b:d3:1e:50:6a:
f5:29:5e:5b:43:10:e9:bb:0e:5d:ba:93:5c:ba:fb:da:2a:61:
97:a6:1c:a4:24:07:81:31:be:4b:16:9e:f4:80:0e:49:33:35:
b8:02:d4:64:a3:07:ec:57:19:e3:ed:b6:0d:00:11:07:02:03:
29:a3:01:31:b1:4a:a2:b1:b8:0f:aa:4b:af:25:a1:65:66:1e:
4f:be:5f:94:fa:13:94:dd:a3:15:66:ac:5c:44:a9:53:70:07:
9f:31:e5:0a:46:8d:a0:ab:83:44:66:c4:ae:50:a7:0e:93:a5:
f0:d5:68:58:16:9d:5e:f4:e4:03:c3:5d:1c:ab:37:dc:8c:8e:
2e:07:de:05:14:26:34:f0:52:a0:a6:8a:ca:ca:6a:a1:26:c0:
c0:ea:90:fe:de:f6:cb:06:59:8d:86:28:b1:be:84:6c:16:07:
55:f5:6a:da:04:f4:60:e0:9a:47:9a:64:78:64:08:42:ae:0b:
1b:bd:67:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:52:26 2026 by rpki-client