Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft
File: AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft (raw, json)
Hash identifier: Xt3OX+E851v34F6TNuydYHvshSSRelXEuqVXn87l29w=
Subject key identifier: 22:2C:1F:34:9B:E0:32:3D:13:16:F3:E6:2C:F4:6E:8D:02:4A:56:F4
Authority key identifier: 00:76:AA:BF:4A:8B:16:33:E1:74:82:05:17:FC:53:C4:D6:48:03:59
Certificate issuer: /CN=0076aabf4a8b1633e174820517fc53c4d6480359
Certificate serial: 019EC06E5204F1C8D1C17DA61A2416097773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHaqv0qLFjPhdIIFF_xTxNZIA1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft
Manifest number: 3C
Signing time: Sat 13 Jun 2026 10:01:55 +0000
Manifest this update: Sat 13 Jun 2026 10:01:55 +0000
Manifest next update: Sun 14 Jun 2026 10:01:55 +0000
Files and hashes: 1: AHaqv0qLFjPhdIIFF_xTxNZIA1k.crl (hash: jsETILEolUBUqohxjZG7apEgVyB9Rnc0Bv+jyZriR0k=)
2: SqRQ1Xc9dweEF_ibwrDDRt-xn2c.asa (hash: jq8t/kB2zpTJt0t5OI4bI1d8zvcp3dpQzTeAyEeb/IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHaqv0qLFjPhdIIFF_xTxNZIA1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6e:52:04:f1:c8:d1:c1:7d:a6:1a:24:16:09:77:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0076aabf4a8b1633e174820517fc53c4d6480359
Validity
Not Before: Jun 13 10:01:55 2026 GMT
Not After : Jun 14 10:01:55 2026 GMT
Subject: CN=222c1f349be0323d1316f3e62cf46e8d024a56f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:56:fb:91:07:de:d2:20:27:1a:cb:8f:81:
71:0e:1e:21:fd:8d:83:c7:29:76:dd:9a:d7:68:49:
1a:e2:09:76:e1:18:39:51:57:46:fd:74:59:ae:a9:
1d:a6:65:87:b2:8f:77:88:1d:b2:1f:69:15:d3:85:
19:b8:39:03:11:0c:ab:7f:25:86:1b:c0:17:e4:31:
bf:aa:69:e2:0c:7c:05:97:ae:3f:25:f8:fa:e6:1f:
09:ea:ca:50:ad:ff:e5:cc:b6:2e:99:93:b4:4c:80:
5d:0c:75:90:18:0c:e9:4b:cf:8b:61:0b:78:71:4c:
74:6c:19:b6:b2:12:fc:54:36:db:9f:49:d9:8a:c8:
87:c3:4a:15:11:8b:52:4d:3f:d0:7d:90:a0:8b:f1:
85:35:75:a2:e0:34:e5:04:ec:fe:29:f8:c3:bb:62:
00:4c:dd:e7:48:97:ea:b1:14:b5:3a:b2:3e:cb:f0:
2e:43:29:1b:8c:2d:3b:40:aa:ce:fd:d1:d2:67:eb:
70:62:eb:2d:ef:81:43:0b:25:93:8d:71:65:69:26:
e6:f3:75:6d:60:13:68:63:ce:4c:5f:50:57:9b:a0:
68:7e:5e:ce:22:2c:5b:09:a0:8e:af:c8:86:7c:fc:
e2:64:77:ce:0a:a3:0c:ec:62:b4:b8:9a:e5:0e:2d:
ee:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2C:1F:34:9B:E0:32:3D:13:16:F3:E6:2C:F4:6E:8D:02:4A:56:F4
X509v3 Authority Key Identifier:
keyid:00:76:AA:BF:4A:8B:16:33:E1:74:82:05:17:FC:53:C4:D6:48:03:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHaqv0qLFjPhdIIFF_xTxNZIA1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3f:44:17:a4:c6:2d:31:bf:5a:78:20:b0:21:4e:f3:6f:42:
6e:b4:8d:ef:17:3a:0e:11:ac:98:a6:34:0d:56:e7:47:98:c9:
ef:ea:98:0d:29:9a:59:1b:08:7d:1d:31:86:8d:f4:d8:b5:4e:
bc:93:19:9d:07:70:84:f9:2f:e7:74:72:2b:33:7d:7e:50:a0:
9c:c1:a4:e4:14:e7:86:0b:75:2f:ab:f6:19:f7:46:54:8c:71:
12:6b:fa:c5:d6:5b:3b:c8:6d:f9:ea:db:75:f6:de:c2:ab:6f:
53:14:62:0b:3e:9c:59:91:44:6b:d0:a6:13:bc:aa:1a:6f:5b:
1b:28:31:84:62:1c:2c:6a:9d:4c:e2:56:a7:ba:4b:d4:80:7b:
a6:6b:de:c8:ca:31:f2:b3:d3:fa:66:62:4b:4a:c5:80:21:4f:
1b:d7:79:08:56:3f:c5:a5:a6:14:26:26:bb:b4:22:84:c4:bb:
30:ba:e8:36:8b:5a:a9:55:2d:ad:f3:24:52:a8:ae:5a:21:76:
e8:a4:09:52:57:98:87:eb:56:47:cb:c1:1b:28:fb:15:d3:fe:
15:e2:fb:3d:4c:75:b0:ab:00:28:5c:1d:d6:dc:5e:55:58:88:
74:9a:07:e2:79:2c:31:69:97:7b:54:eb:08:d7:be:c6:c8:b4:
b1:cb:6e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:39:10 2026 by rpki-client