Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft
File: AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft (raw, json)
Hash identifier: XgIEuzb033OKZTeC74/ckysl7Iw9NiVYa/GSckx37eQ=
Subject key identifier: D9:B9:EC:F8:47:38:26:E4:24:DF:C4:EB:DD:CD:3D:42:74:AD:EB:64
Authority key identifier: 00:76:AA:BF:4A:8B:16:33:E1:74:82:05:17:FC:53:C4:D6:48:03:59
Certificate issuer: /CN=0076aabf4a8b1633e174820517fc53c4d6480359
Certificate serial: 01A0E10642A9783A474477E87B255EE49F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHaqv0qLFjPhdIIFF_xTxNZIA1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft
Manifest number: 0156
Signing time: Sun 27 Sep 2026 04:01:18 +0000
Manifest this update: Sun 27 Sep 2026 04:01:18 +0000
Manifest next update: Mon 28 Sep 2026 04:01:18 +0000
Files and hashes: 1: AHaqv0qLFjPhdIIFF_xTxNZIA1k.crl (hash: OGuxXojkQTTc2rRkkQo5Vc2Q+wsZSBBhRo2Cmr8XpUs=)
2: SqRQ1Xc9dweEF_ibwrDDRt-xn2c.asa (hash: jq8t/kB2zpTJt0t5OI4bI1d8zvcp3dpQzTeAyEeb/IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHaqv0qLFjPhdIIFF_xTxNZIA1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:42:a9:78:3a:47:44:77:e8:7b:25:5e:e4:9f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0076aabf4a8b1633e174820517fc53c4d6480359
Validity
Not Before: Sep 27 04:01:18 2026 GMT
Not After : Sep 28 04:01:18 2026 GMT
Subject: CN=d9b9ecf8473826e424dfc4ebddcd3d4274adeb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:5d:57:01:44:55:64:1b:24:f6:f6:1d:94:
f0:ab:94:0c:e7:10:95:83:56:5f:b7:dd:e2:46:1b:
d9:ab:4a:60:71:50:51:8b:e1:39:a4:10:4d:4f:3c:
fd:13:6b:86:14:5f:fd:a6:9d:28:2c:87:06:b0:7a:
5b:9b:a8:ee:50:c2:57:55:d0:11:32:3b:6e:5f:70:
28:d6:d8:52:cb:80:e1:97:ab:ed:aa:ce:52:96:70:
09:de:0c:8e:1b:14:a2:76:00:4c:9f:d1:f7:57:2c:
17:2e:7c:12:c1:4c:0f:e9:9e:c0:e7:1c:3d:fc:e5:
51:6c:25:12:37:1f:5e:13:fd:f7:21:b4:13:e6:35:
a3:6b:d4:6d:7e:83:c0:5b:5b:fa:e7:e3:f9:78:7f:
5f:24:5c:c4:d2:37:4a:15:fe:8d:61:27:be:8b:7e:
b8:3d:f3:3e:c3:d3:d4:07:d8:1c:c0:34:27:12:3f:
66:53:f7:7e:74:d9:1e:25:28:b7:71:80:65:f9:f2:
3b:b8:3d:5a:b5:10:01:3c:7b:14:42:ef:17:8e:4e:
af:35:e6:50:7e:a9:0c:ff:b0:66:35:3f:f9:a7:9b:
9d:01:3e:f2:0e:d8:4a:5f:96:a6:ac:a4:f8:04:88:
67:b9:0b:f0:c7:7c:3b:d1:db:76:50:e1:9b:93:02:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B9:EC:F8:47:38:26:E4:24:DF:C4:EB:DD:CD:3D:42:74:AD:EB:64
X509v3 Authority Key Identifier:
keyid:00:76:AA:BF:4A:8B:16:33:E1:74:82:05:17:FC:53:C4:D6:48:03:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHaqv0qLFjPhdIIFF_xTxNZIA1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:8c:1e:2d:2b:6c:72:a4:f4:42:84:99:54:10:a6:5d:63:4b:
46:41:fa:7a:35:a3:1c:8c:cb:15:02:0f:4d:b8:69:16:8c:cb:
64:ad:d3:85:59:0a:d2:15:1f:78:aa:2c:9b:6e:6b:d9:80:dc:
12:43:d1:d3:94:e4:34:8b:32:ff:5a:f9:d6:98:49:03:0e:b0:
b5:7b:29:56:52:fd:46:6e:5a:b3:ab:e1:0f:4c:f2:07:13:2e:
c6:24:cc:01:b7:16:5b:35:da:ca:cb:2d:c5:84:2d:ba:47:85:
59:2c:91:26:42:23:dc:a3:4f:e2:a8:c1:40:32:fd:f4:75:7c:
01:40:ab:1f:a3:46:e5:9c:f0:8c:5e:72:1b:37:c0:a1:77:68:
76:04:24:f1:67:7d:61:0f:23:ef:d3:5e:24:a0:46:af:93:e6:
c7:7f:c8:21:24:87:4f:1a:3a:23:16:aa:b6:58:f2:b2:e3:97:
f8:09:4c:3f:25:70:55:e0:17:a8:85:ee:3f:0d:9c:22:63:b8:
68:90:47:8c:0d:30:5d:81:a8:11:23:68:9c:1b:aa:76:d6:08:
86:62:5f:a9:1b:e8:49:85:53:91:f5:16:7d:64:5b:c1:b1:81:
0b:78:03:c5:87:25:50:01:93:72:3d:c1:fd:b7:5f:75:f0:a8:
e2:55:cd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 13:14:23 2026 by rpki-client