Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
File: ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft (raw, json)
Hash identifier: 7JYUAZHkcsh+dAlEBgT1AImD2P16dhpA13ZThLKNOCA=
Subject key identifier: C0:11:2F:F9:39:BF:30:E4:35:40:2E:1B:CA:8A:BF:76:40:74:D6:6A
Authority key identifier: 6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
Certificate issuer: /CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Certificate serial: 019CAEDA1160BC756BDBEFA06E7B8FA32B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
Manifest number: 0446
Signing time: Mon 02 Mar 2026 14:00:52 +0000
Manifest this update: Mon 02 Mar 2026 14:00:52 +0000
Manifest next update: Tue 03 Mar 2026 14:00:52 +0000
Files and hashes: 1: ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl (hash: NrzPNK9P3c4Z5zNJ8EJZAIuwEPlqdzmr3dr9XOUdhj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:11:60:bc:75:6b:db:ef:a0:6e:7b:8f:a3:2b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Validity
Not Before: Mar 2 14:00:52 2026 GMT
Not After : Mar 3 14:00:52 2026 GMT
Subject: CN=c0112ff939bf30e435402e1bca8abf764074d66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:f1:dd:75:93:15:84:87:2f:a0:ce:74:43:
2e:db:05:aa:cf:97:02:b0:dd:f2:55:7d:d3:8d:ee:
0c:30:43:38:33:cf:7b:56:58:0c:d2:5f:90:95:7a:
64:60:ac:01:75:f8:a2:b5:24:b5:1f:cd:23:75:4c:
29:2e:2f:b3:2a:6a:fc:af:37:a3:fd:22:83:fa:74:
93:19:ec:39:e6:28:f5:09:42:a0:08:37:86:f4:ee:
d3:5d:71:e1:5d:13:f2:ed:d2:84:13:22:ce:33:96:
bc:4d:5a:f9:bb:3c:72:5f:b6:46:54:f0:19:56:8c:
e2:6c:5d:41:fa:4d:95:47:66:35:e6:97:72:6c:9d:
93:81:36:eb:6c:2b:cd:51:7b:ec:f8:ed:1d:cd:18:
f7:e1:8a:fe:79:b2:3d:a0:db:6e:1b:7d:e0:25:17:
d8:4f:c0:8d:36:2e:72:ce:b7:32:d0:86:cd:bd:7f:
25:4a:32:14:ee:86:5c:4a:e5:90:d0:6a:67:b3:24:
4b:fa:46:9a:f5:46:4a:05:e3:c2:b2:79:97:29:ea:
dc:91:e6:2b:77:50:50:78:f5:cf:54:51:3f:ef:71:
34:98:4a:62:c0:aa:4f:a1:3a:08:a2:e0:f0:a5:79:
b1:85:db:e1:e9:cb:30:e0:e1:15:32:0c:e8:d0:3b:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:11:2F:F9:39:BF:30:E4:35:40:2E:1B:CA:8A:BF:76:40:74:D6:6A
X509v3 Authority Key Identifier:
keyid:6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:cd:35:db:64:f6:c4:d2:b4:0e:6e:d2:ec:26:1c:41:f6:2c:
b4:03:54:c2:15:7c:a9:85:2c:d5:fd:b8:21:47:cf:6b:38:89:
28:2a:78:c2:ea:85:eb:65:0f:b7:06:37:55:2c:c5:55:9a:3c:
01:2a:60:ff:7c:2a:cb:f2:6c:61:3f:fa:98:d0:c7:c0:48:c2:
9c:3a:83:90:ea:b0:dd:e3:6e:2c:2a:2b:57:5e:b8:6d:e8:a7:
a7:11:14:18:e2:31:61:40:9c:9b:b9:ca:f1:89:3c:58:1c:22:
2f:57:f1:1e:59:bf:17:37:59:ec:7f:af:2e:b7:8a:09:d2:7c:
58:92:a9:45:49:71:c1:9f:1a:98:b6:da:63:e3:19:19:4f:7f:
e5:c0:5d:b4:87:51:eb:d9:15:b2:be:fb:d1:cd:c3:c8:5d:31:
10:a4:44:37:ce:e4:a5:94:91:61:13:e5:ef:39:40:ea:1c:00:
58:9c:e2:06:15:43:b8:ec:58:f0:b3:b7:17:fe:53:c7:75:f9:
d8:1f:af:2b:42:74:5b:46:03:31:c7:60:4d:e0:c8:1a:9d:cd:
00:6f:02:b3:86:ae:1a:47:f6:36:23:6f:95:14:f3:11:0d:44:
e5:41:46:52:d3:a0:05:ae:30:44:80:36:51:82:30:7b:a5:a6:
d8:bc:96:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:51 2026 by rpki-client