Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
File: Ahs-o17f3ROMFVBtdKdgIt03aUs.mft (raw, json)
Hash identifier: ZBeeZKWYTAFVV/5sSQNxvzwKRFmphxcXvxlyYxa8D8c=
Subject key identifier: 35:D1:AE:D3:A4:F2:A1:25:1B:4D:FB:D0:B3:BB:CF:49:1B:48:D2:80
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial: 019D9C2C83AF9CC4BC9C7EE6950AD95509CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 16:00:56 +0000
Manifest this update: Fri 17 Apr 2026 16:00:56 +0000
Manifest next update: Sat 18 Apr 2026 16:00:56 +0000
Files and hashes: 1: Ahs-o17f3ROMFVBtdKdgIt03aUs.crl (hash: 34cdqOJvjfnV72AQQSCPmsDUb/MxmPFa6IFRmeWOM4I=)
2: LBRMtk276o1fDtnMdAqhTW7DXC4.roa (hash: 0YIiI16RKFGdQ0JcFhz3zqT49nyQkj7P8gkQ5o32XYM=)
3: M8dYp-L4dw1v-tRfvEaBeetOZDM.asa (hash: BxKqO0ZY48OCWqUnkol0bWVuXrmCWGF4F2EIRoXKyLI=)
4: QmzS2ptv4L0wreFRKwR2b7sYT9o.roa (hash: V15c6ZmrAVOZnZkD5NcAPinTv/zGPeEWxtJ3s9KDwPs=)
5: Rj9rY8c-WTz58dRjWStkxywCLns.roa (hash: 2qqmCIzo+/ipPZRDGptoSNuyqwN9eUc4eLGE8JL6fME=)
6: T64D7DIdeVevp7C-fmZ9i_3HGBI.roa (hash: kO6AaVNTX79L37zwJju08wk0fWE2dJSQ0KHv71bE1XY=)
7: U8u1b5Pq3pRMcKbM8GicLTeR9Tk.roa (hash: R5sho8p6NKUCSWgu2hqUkQHKto75y0jfre83Hes2hwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:83:af:9c:c4:bc:9c:7e:e6:95:0a:d9:55:09:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
Validity
Not Before: Apr 17 16:00:56 2026 GMT
Not After : Apr 18 16:00:56 2026 GMT
Subject: CN=35d1aed3a4f2a1251b4dfbd0b3bbcf491b48d280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:d8:e3:b9:dd:26:0d:95:5f:bd:0a:ce:c9:
59:d1:9e:02:ce:df:76:a4:4a:f9:dc:ae:b5:b2:c6:
7a:e2:ed:ee:c3:80:68:95:17:00:01:c4:b1:4a:a9:
54:4e:f0:71:5f:ad:3e:01:1a:17:d5:1d:0d:db:20:
04:bc:1d:8e:3a:6e:42:84:c9:24:00:f1:97:b5:f2:
43:08:1c:b1:75:a5:6e:89:29:74:9b:86:7a:a2:80:
a5:68:1c:dc:1c:8b:57:3e:ae:62:00:b7:00:9c:30:
a0:10:1a:1e:33:81:f3:1c:4e:fa:f4:2f:04:48:43:
39:c9:c4:7b:43:c3:a9:43:1f:66:f1:d5:90:87:a5:
7c:3b:0c:dc:24:d7:9f:f1:21:49:0a:10:95:43:ac:
c0:45:9c:b6:0e:22:54:02:c0:e4:ca:7e:2c:a2:3b:
03:a6:c7:ef:78:85:26:44:a3:9a:03:a5:b8:80:41:
cd:93:01:1f:41:9d:04:bc:6e:e8:c2:4a:c3:df:8d:
b0:dd:59:be:47:e2:17:70:f1:db:02:ea:00:4a:a1:
66:82:e8:e5:6b:36:9c:67:23:e6:1a:41:0d:6f:45:
f5:ae:ef:99:4e:0b:c5:b6:57:45:12:09:ef:ca:c6:
3d:d2:5c:87:7d:0c:7e:79:a3:d5:33:2d:9a:e0:1d:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D1:AE:D3:A4:F2:A1:25:1B:4D:FB:D0:B3:BB:CF:49:1B:48:D2:80
X509v3 Authority Key Identifier:
keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2e:4a:cc:f9:c4:29:28:85:a8:d3:5e:f8:04:f6:c7:f9:f6:
4f:12:4e:43:4b:ca:f5:a2:c3:02:5f:91:e6:c0:af:1a:76:0e:
93:01:0a:3f:9e:08:cc:27:d3:1b:88:bb:23:60:de:fd:56:02:
d7:d7:20:e2:dc:1e:cd:fc:1e:64:7e:4d:db:31:9a:7d:8e:cc:
83:9f:ae:4a:12:f6:7d:6b:33:5e:91:62:e0:a7:6d:ca:2f:2d:
8e:1b:09:ad:0d:74:9d:f6:f0:46:ab:1c:ce:e4:ad:a9:67:ef:
0f:d4:c1:f5:bd:c9:9d:e7:c6:86:1f:66:65:ae:11:e9:82:e6:
0c:dc:42:93:74:0b:eb:16:9f:d2:d5:90:c0:18:3f:f8:2d:e5:
0c:09:04:d4:2f:b1:72:2a:47:26:09:77:d8:82:c4:d9:10:8f:
a8:40:32:5c:ec:f3:df:17:f8:3d:bd:05:31:4e:b9:14:cd:e3:
e7:83:67:5c:f2:1b:5a:e0:af:a6:ce:7b:f0:5b:10:ac:51:0c:
1d:d9:ed:05:fd:f3:32:6a:4f:4b:0d:92:f3:fd:bb:f9:ac:d7:
8c:78:fd:64:2d:9a:82:88:dd:82:06:0d:e8:71:e3:39:1b:1c:
d9:dd:de:8c:59:7c:1a:9c:ac:4e:b4:db:57:c8:63:cb:de:4e:
7a:18:fc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:58:19 2026 by rpki-client