Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File: AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier: Ca8iEi6OoEz31Ni6RUm9+6yVAWA2kW0sQu8qvNak23A=
Subject key identifier: 37:2B:19:67:5E:45:6C:0A:C7:7F:FC:A3:49:A0:B1:DE:24:2C:21:DF
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer: /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial: 019FAA19D7D2B3E7B1AD436C0732DABCA234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 19:00:48 +0000
Manifest this update: Tue 28 Jul 2026 19:00:48 +0000
Manifest next update: Wed 29 Jul 2026 19:00:48 +0000
Files and hashes: 1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: Zge4tmj/ouBVwqRzUhJNLvegKv0v4WdnLaguoKJopwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:d7:d2:b3:e7:b1:ad:43:6c:07:32:da:bc:a2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
Validity
Not Before: Jul 28 19:00:48 2026 GMT
Not After : Jul 29 19:00:48 2026 GMT
Subject: CN=372b19675e456c0ac77ffca349a0b1de242c21df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:24:56:f6:9a:a6:f4:01:2e:16:28:11:02:
5f:15:50:3d:e1:22:e5:11:13:34:a1:1c:02:80:c6:
6f:fd:14:91:f4:54:e9:8d:95:2a:81:15:72:34:23:
5b:94:96:4f:e3:c5:33:49:8f:58:2d:f0:59:b3:a7:
03:9f:0a:8f:9b:ea:61:65:36:73:16:5d:47:9c:8d:
e0:37:09:2f:5b:0d:a8:db:91:f3:3b:36:6f:90:66:
b5:75:53:0d:72:e7:60:92:56:60:02:95:f7:cf:ab:
1c:df:52:a8:b7:88:28:1f:57:1c:e6:03:ac:fc:be:
b6:aa:f0:9b:dd:fb:6e:8d:40:b8:fa:cc:3a:b3:c7:
c1:3f:f0:2a:8a:39:6b:6c:b2:56:4a:27:34:5b:27:
e9:95:3a:1e:d6:ed:f3:13:d9:9b:ef:d0:6a:a8:aa:
18:fa:5f:b1:32:64:18:06:e4:a3:27:6c:6b:b8:6f:
83:a3:eb:70:1b:b9:1c:18:e1:da:0a:36:a9:34:83:
88:eb:36:9b:eb:62:d2:c1:0d:6c:af:8a:3e:20:44:
12:5b:1a:0c:4b:93:c2:e2:d6:5d:23:c2:ec:61:d3:
a3:2d:2b:c5:c8:12:b5:30:c2:a8:3e:8e:d1:39:c2:
ed:2e:b1:96:8c:82:8a:85:e7:ee:0c:c8:1e:c7:d8:
4b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2B:19:67:5E:45:6C:0A:C7:7F:FC:A3:49:A0:B1:DE:24:2C:21:DF
X509v3 Authority Key Identifier:
keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:42:5e:19:da:4d:92:03:5b:a1:79:20:f0:bc:9a:90:e8:6e:
77:9d:58:d7:1b:64:c6:60:7c:a0:5c:6a:35:bb:d2:c7:ff:b7:
8c:15:2f:11:51:15:97:27:c7:0e:30:dc:a0:b7:af:de:8d:29:
5f:eb:18:83:f6:87:f7:98:3b:65:90:05:98:97:7a:3a:e0:7e:
26:43:82:22:77:f9:a9:59:b9:68:77:a4:fa:aa:5d:2f:77:5b:
b4:50:b5:ee:1c:13:ad:eb:e7:05:39:77:3a:4d:56:81:82:37:
7d:14:56:98:fb:8d:0f:01:e9:36:40:a9:54:14:a7:7e:1a:e6:
57:58:79:97:98:c0:3f:ef:d1:a3:f0:0c:e2:81:72:f2:5e:9c:
b8:1d:92:09:b7:04:d3:b5:1b:ff:58:78:8a:66:f0:1f:78:b8:
f3:37:0a:a0:69:ce:6c:63:cb:0e:e0:d9:87:70:e3:ad:da:a8:
f4:2b:4b:c6:58:d4:44:8f:f5:73:27:b0:4f:cf:9d:be:da:10:
0f:f5:1a:5c:dd:97:69:3c:02:85:a1:c3:04:5e:13:3d:03:d4:
2a:0c:14:b0:59:b3:2c:08:72:66:47:9b:cd:8b:81:e0:f6:a1:
b5:c7:91:b7:e8:ef:ef:eb:81:d8:78:9d:05:cc:e4:fb:e4:53:
46:16:75:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:43 2026 by rpki-client