Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier: DqhR1NJqlcmiqSZxy4C7vXv2u5QjKRaE5PFuCxkmXM0=
Subject key identifier: 04:0F:49:1A:14:B4:C0:87:35:1A:C2:DB:0D:3A:EE:BB:9C:DB:4F:E7
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial: 01A132FE2B005C0DF8CC0770741A128453D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number: 1737
Signing time: Tue 13 Oct 2026 02:01:20 +0000
Manifest this update: Tue 13 Oct 2026 02:01:20 +0000
Manifest next update: Wed 14 Oct 2026 02:01:20 +0000
Files and hashes: 1: HG9Ba2gI8LG--fPNC-99z5G5PR0.roa (hash: r0cs2bG9l/hgCfQjE51Q5Mu/ZRB68nj2PZBwDW/XxSM=)
2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: YUzG587tvndUzwp8Pn03u3w0Mzg3SO+70iYBjOiyh5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 02:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:fe:2b:00:5c:0d:f8:cc:07:70:74:1a:12:84:53:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Validity
Not Before: Oct 13 02:01:20 2026 GMT
Not After : Oct 14 02:01:20 2026 GMT
Subject: CN=040f491a14b4c087351ac2db0d3aeebb9cdb4fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:7a:84:b0:43:81:ae:c3:21:52:53:c4:da:
8a:c0:a5:ad:46:ce:71:dd:b8:be:02:8d:0c:01:cf:
a7:6a:03:5e:d4:8f:c0:ce:69:8f:c9:fb:cc:71:16:
6e:7d:9c:a8:f7:65:5a:e4:79:ee:28:20:d0:08:71:
24:c7:79:11:f4:b3:49:80:16:19:19:24:4d:aa:a9:
0d:0e:72:a3:97:c5:93:c0:e2:31:b3:5f:91:72:ab:
b3:0a:d0:3f:05:d0:15:7c:e6:af:ca:7c:b7:9c:77:
77:0d:79:2c:1e:d1:03:68:4c:77:16:bd:77:a9:31:
aa:cc:32:38:d9:0f:e1:1d:5d:15:f4:17:45:b2:bd:
bf:fe:e7:5d:6a:5b:64:cf:c8:29:df:f9:34:81:cd:
b1:d1:ce:52:e2:3d:30:8f:61:f5:0e:47:62:b6:f1:
cd:19:43:07:02:9e:b4:37:d5:36:bf:08:ac:0a:e3:
93:42:42:49:78:b7:73:cd:4d:20:be:8e:34:07:37:
49:12:c5:6d:89:c1:b6:69:96:1a:1e:62:ce:d4:c5:
db:91:1d:17:68:97:d4:72:ee:28:6b:69:00:89:63:
b3:21:a7:a1:f6:d2:0a:cc:6b:15:66:e8:c3:a1:07:
a7:c1:88:2d:a1:96:90:26:a5:5f:5d:a8:2b:99:43:
fe:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0F:49:1A:14:B4:C0:87:35:1A:C2:DB:0D:3A:EE:BB:9C:DB:4F:E7
X509v3 Authority Key Identifier:
keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d5:4e:87:34:b8:6b:f1:97:3a:1b:2b:2b:c9:2f:00:0e:1b:
af:7a:db:be:f3:5f:4e:3b:22:49:a0:f3:94:13:83:29:de:9c:
5b:5f:f9:74:22:90:58:b1:a6:03:11:05:a7:80:02:f4:1c:67:
63:04:2f:52:55:1b:5f:80:4d:7c:f6:86:b4:19:74:c1:0f:2c:
64:72:6a:b4:64:67:85:6d:08:28:16:fc:af:a8:94:ae:05:59:
78:2b:64:16:17:3b:75:c7:57:49:e4:93:16:18:bb:d3:1a:3c:
59:3e:f9:bc:c5:92:be:63:05:db:f6:38:41:32:59:be:00:23:
1f:4e:0f:e7:e6:e4:f6:28:b0:6a:75:97:4d:b8:44:02:e1:46:
95:1b:e9:5e:b2:c4:e3:be:72:fa:30:1f:bd:48:ac:b6:87:13:
41:17:74:aa:0a:64:30:65:77:cd:c8:37:d2:08:57:75:96:95:
72:11:7c:23:b7:75:4b:ed:c1:86:44:4c:ab:72:79:9b:f8:7c:
a0:62:6f:b1:03:ef:e8:51:bc:d0:be:d1:53:d7:4a:9a:0b:0b:
0d:9a:ae:6b:f5:7b:cd:f7:a2:08:cd:3b:cd:ba:fb:43:50:5a:
92:03:93:06:96:64:ee:27:18:81:63:1e:7a:a8:13:e5:d2:e3:
6a:59:8c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:29:32 2026 by rpki-client