Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier: /doIDvS6V4M+sZdgqwE+QnpyRuhSKO5QbhiVdfD7/Ek=
Subject key identifier: 4E:B4:FE:9B:C9:AC:BE:F8:EA:64:EA:4F:8C:43:0B:87:91:50:56:BB
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial: 019CAE35D7DC1CFE5A743EBCA60249668320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number: 14E0
Signing time: Mon 02 Mar 2026 11:01:29 +0000
Manifest this update: Mon 02 Mar 2026 11:01:29 +0000
Manifest next update: Tue 03 Mar 2026 11:01:29 +0000
Files and hashes: 1: HG9Ba2gI8LG--fPNC-99z5G5PR0.roa (hash: r0cs2bG9l/hgCfQjE51Q5Mu/ZRB68nj2PZBwDW/XxSM=)
2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: WakCg2iEgi/5boHv5dYSP3skWlvQ9JRP8/p1vTmVzBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:d7:dc:1c:fe:5a:74:3e:bc:a6:02:49:66:83:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Validity
Not Before: Mar 2 11:01:29 2026 GMT
Not After : Mar 3 11:01:29 2026 GMT
Subject: CN=4eb4fe9bc9acbef8ea64ea4f8c430b87915056bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:ac:2c:65:37:62:99:c5:c7:4e:54:ad:a9:
e5:4b:f0:a6:c0:c3:e5:1c:f8:8a:38:52:f6:ab:25:
a7:ff:40:30:14:e6:30:a1:39:04:39:76:b5:f3:82:
41:59:42:81:95:30:5f:36:89:96:9d:90:7e:08:bc:
f4:9c:d0:f5:6d:07:25:73:38:93:f5:e1:68:93:4a:
d8:17:29:03:5a:80:6a:9c:6f:ba:f3:47:6d:30:90:
9a:e8:d1:49:a6:bf:16:1d:fd:a6:71:20:05:a9:fa:
8f:37:4c:4d:dd:de:b5:94:d2:7c:1a:da:43:24:95:
d1:d8:95:eb:e9:3f:a8:e0:09:fc:71:52:3b:b9:01:
58:da:28:41:2a:59:ee:2b:e0:f4:e2:1a:4e:53:3e:
09:80:39:f0:b2:28:67:a4:e3:e0:be:53:63:8f:a9:
7e:4d:7f:99:4f:cf:0b:56:81:c1:0e:10:8a:68:24:
70:f0:60:cf:8f:a8:f5:60:77:13:7a:34:7f:70:ba:
3a:cb:43:de:0c:a3:d7:1b:30:cb:08:b6:ab:55:f0:
6c:8d:b0:71:61:30:58:a6:67:3b:82:6f:c4:d1:12:
06:75:09:26:0c:90:d4:fe:f0:51:d3:a5:c3:1c:69:
82:bf:10:a1:8e:22:24:71:1e:34:2b:70:a8:03:0c:
97:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B4:FE:9B:C9:AC:BE:F8:EA:64:EA:4F:8C:43:0B:87:91:50:56:BB
X509v3 Authority Key Identifier:
keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:dd:02:64:39:01:2b:5a:ab:19:33:38:4d:39:96:95:8f:55:
71:70:82:9c:a6:56:47:91:ec:b2:0c:a1:98:e6:36:69:f3:16:
da:66:1a:58:51:ed:31:bf:70:5a:a5:bb:61:36:cd:d9:1a:22:
83:28:68:c8:24:73:ba:0e:92:f5:ae:4e:e8:07:28:34:a5:54:
68:3a:04:6f:26:dd:b1:7d:93:1d:28:bb:45:4c:83:3a:29:ba:
78:32:fd:39:fc:e1:de:3d:1d:64:56:a7:fc:4d:9f:7d:41:c9:
80:6e:8d:93:1e:35:67:30:e9:b5:a4:55:6b:e1:5a:a7:f3:10:
00:19:99:35:30:4f:07:30:f8:13:b3:f8:b7:4f:4a:91:14:af:
ff:8a:90:36:ea:40:ef:86:df:23:0d:90:a0:54:b2:a7:06:4b:
b8:bd:22:e3:29:f1:a1:0a:6c:4b:6d:af:50:5e:a0:cf:bb:77:
10:b1:94:35:7c:79:24:33:4d:09:72:40:9a:55:5e:d5:a8:5f:
4d:ca:0e:37:d3:03:7c:d7:bd:f6:f9:db:44:67:32:c3:11:64:
97:f1:11:4d:23:0a:61:a1:7e:78:09:b9:1b:e6:03:80:7e:aa:
ca:79:89:cb:7d:17:83:b3:e1:b7:a3:9c:39:83:53:78:be:fd:
e9:4e:10:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNdfcHP5adD68pgJJZoMgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMTg3Y2E1YjhhZWUxOTVjYzhjYWRjZmI0OGM1NDRiMTgx
NDc3ZWYwHhcNMjYwMzAyMTEwMTI5WhcNMjYwMzAzMTEwMTI5WjAzMTEwLwYDVQQD
Eyg0ZWI0ZmU5YmM5YWNiZWY4ZWE2NGVhNGY4YzQzMGI4NzkxNTA1NmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUWsLGU3YpnFx05UranlS/CmwMPl
HPiKOFL2qyWn/0AwFOYwoTkEOXa184JBWUKBlTBfNomWnZB+CLz0nND1bQclcziT
9eFok0rYFykDWoBqnG+680dtMJCa6NFJpr8WHf2mcSAFqfqPN0xN3d61lNJ8GtpD
JJXR2JXr6T+o4An8cVI7uQFY2ihBKlnuK+D04hpOUz4JgDnwsihnpOPgvlNjj6l+
TX+ZT88LVoHBDhCKaCRw8GDPj6j1YHcTejR/cLo6y0PeDKPXGzDLCLarVfBsjbBx
YTBYpmc7gm/E0RIGdQkmDJDU/vBR06XDHGmCvxChjiIkcR40K3CoAwyXtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE60/pvJrL746mTqT4xDC4eRUFa7MB8GA1UdIwQY
MBaAFGoYfKW4ruGVzIytz7SMVEsYFHfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NWMwOGItNTA1Ni00Mzg2LWE0MmIt
YmYwM2RjODM3OTAwLzEvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85NWMwOGItNTA1Ni00Mzg2LWE0MmItYmYwM2RjODM3OTAw
LzEvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfN0CZDkB
K1qrGTM4TTmWlY9VcXCCnKZWR5HssgyhmOY2afMW2mYaWFHtMb9wWqW7YTbN2Roi
gyhoyCRzug6S9a5O6AcoNKVUaDoEbybdsX2THSi7RUyDOim6eDL9Ofzh3j0dZFan
/E2ffUHJgG6Nkx41ZzDptaRVa+Fap/MQABmZNTBPBzD4E7P4t09KkRSv/4qQNupA
74bfIw2QoFSypwZLuL0i4ynxoQpsS22vUF6gz7t3ELGUNXx5JDNNCXJAmlVe1ahf
TcoON9MDfNe99vnbRGcywxFkl/ERTSMKYaF+eAm5G+YDgH6qynmJy30Xg7Pht6Oc
OYNTeL796U4QIQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:21:46 2026 by rpki-client