Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
File: ahfeGIf8-pJEuTHZbagmeMAUdmM.mft (raw, json)
Hash identifier: IYXYfcnIlQhXExFk0xKO7fWCDUcHfWqOkjX4ttTTMPY=
Subject key identifier: 25:FB:DD:59:6E:83:E7:BC:3F:2B:85:66:F3:B6:D9:55:33:A1:1C:50
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Certificate issuer: /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial: 019CA8A11D8B4C9A1E13AFAFB7DF05D8E79D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 09:00:56 +0000
Manifest this update: Sun 01 Mar 2026 09:00:56 +0000
Manifest next update: Mon 02 Mar 2026 09:00:56 +0000
Files and hashes: 1: 3IEzMW9wkvjdW6dqOUxlESavJGw.roa (hash: 2z0dKbAFS8Y5M9QfS1OwUUX8b4XiNgWAST0EQxAlJ70=)
2: K-_2uZ2W_94glxC861Amn-MX16Y.roa (hash: 8kuZRTyoDvaEWZI2mWm260ca1KMDIA3sdGDe2hunErA=)
3: QcKHUIb0ykf50SPR1Ki_C_mpYDQ.roa (hash: jXJ+eXWdyEUtOYkWh8o1m/VVINUVOvHgc2gRQU8crLU=)
4: ahfeGIf8-pJEuTHZbagmeMAUdmM.crl (hash: UYTUG9ShK+q2AvRHLWUxJPEuSs6hPesiY6aUoLTh4B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:1d:8b:4c:9a:1e:13:af:af:b7:df:05:d8:e7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
Validity
Not Before: Mar 1 09:00:56 2026 GMT
Not After : Mar 2 09:00:56 2026 GMT
Subject: CN=25fbdd596e83e7bc3f2b8566f3b6d95533a11c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e5:57:79:54:94:07:98:4d:69:79:59:0a:04:
a4:fd:cb:b1:fc:5f:19:a9:38:2c:1b:fb:ba:9e:af:
c5:ca:fc:4f:2c:ae:30:da:71:70:bd:e7:e9:fe:3e:
17:53:f7:b2:05:69:70:ba:d5:bb:c7:08:75:e4:64:
aa:ec:8a:7a:a5:0d:2d:80:f7:ab:28:44:53:89:13:
d5:0f:2b:95:b9:84:98:7d:55:b3:46:da:dc:76:69:
5f:f4:34:ed:c6:35:93:c4:0e:3d:a1:8d:1a:2d:c1:
0e:8f:91:de:8e:9a:cd:6a:3e:10:de:eb:9a:a9:8d:
e3:5f:12:9e:07:73:37:d1:16:d6:2b:c2:d8:85:32:
09:f4:72:7e:e1:4b:9f:00:04:03:e5:32:5a:fd:6c:
d7:b6:6c:c0:d0:a8:f1:97:83:53:18:af:29:db:97:
d0:ae:94:85:cd:53:59:f8:06:20:85:e5:cf:d6:3a:
55:0e:ed:b7:16:f2:70:d7:a5:ba:24:04:ba:dd:70:
95:60:3c:b3:64:a7:de:3f:60:65:9d:16:7d:e9:29:
97:7c:e7:ac:cb:6c:54:7c:0d:5e:da:bb:5c:d8:ca:
98:a6:84:9f:4c:9f:2f:97:17:be:0f:b8:bd:a6:69:
b1:21:37:c8:03:8a:cc:32:49:e2:d7:a2:76:d1:1e:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FB:DD:59:6E:83:E7:BC:3F:2B:85:66:F3:B6:D9:55:33:A1:1C:50
X509v3 Authority Key Identifier:
keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:28:8a:ee:30:18:80:26:6e:10:4f:9a:99:f4:96:96:84:40:
af:95:6c:86:29:0f:63:b4:d4:a4:e5:af:35:d9:c3:32:7f:df:
b7:28:bf:b5:ce:21:b1:9c:2c:f6:f1:bf:95:0b:a2:64:f3:90:
66:5d:25:0d:82:67:6e:44:ec:61:f1:1e:d5:2f:ee:30:9d:d1:
9b:3b:1a:26:2c:74:0c:73:45:37:f2:1d:93:78:ea:72:ef:b7:
bc:ce:43:ad:61:12:e1:a2:ee:0e:d2:8e:eb:b9:21:8e:c7:f0:
9a:8b:ae:09:cf:6d:f5:1a:73:8b:c7:c0:cf:29:05:1f:fa:c2:
76:a1:6e:aa:eb:c8:24:7c:1e:b3:88:ed:3a:87:2a:ce:7a:bc:
5f:e6:25:f8:a2:15:67:7b:3d:38:2b:46:d4:c7:2c:db:d0:fc:
7c:4a:90:8d:4e:14:f5:c9:60:83:31:6c:ba:e0:84:e8:1a:29:
22:5e:f8:83:4b:7b:a8:c2:88:f2:37:4d:c3:fe:06:47:00:b5:
03:72:5e:c4:26:5b:2d:cc:a8:c0:fa:f2:59:30:6b:6e:0b:c5:
ff:e1:aa:55:15:89:4e:cd:fe:27:6f:4e:48:6f:a1:8a:b2:0a:
cf:50:79:f0:7a:fd:27:eb:da:d3:9f:6d:7c:bb:b6:93:aa:9e:
a6:07:bf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:37:57 2026 by rpki-client