Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
File: ahjtHt_p75yYdyAyDp28ketQWa0.mft (raw, json)
Hash identifier: KGS+RfRTRjxkuIXROrVervHlaIfXGFnp/CPbCvglhZQ=
Subject key identifier: F3:C1:5D:B3:38:29:0F:59:76:ED:88:1A:9F:13:4A:1A:88:DF:2A:59
Authority key identifier: 6A:18:ED:1E:DF:E9:EF:9C:98:77:20:32:0E:9D:BC:91:EB:50:59:AD
Certificate issuer: /CN=6a18ed1edfe9ef9c987720320e9dbc91eb5059ad
Certificate serial: 019CABA24608E540A1E518A34A3060E23F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
Manifest number: 15
Signing time: Sun 01 Mar 2026 23:01:04 +0000
Manifest this update: Sun 01 Mar 2026 23:01:04 +0000
Manifest next update: Mon 02 Mar 2026 23:01:04 +0000
Files and hashes: 1: DqLLw513jBHBm_RlA4Oo3_r8Rk0.asa (hash: IWHb/j7IU+k7mN8ssByRx2bqBHaHOEPcjtGKUKCWiHc=)
2: ahjtHt_p75yYdyAyDp28ketQWa0.crl (hash: Tysg+3FBbBXFSgInlUiWUcWBW/ue+0/N5mTyElzOIoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:46:08:e5:40:a1:e5:18:a3:4a:30:60:e2:3f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a18ed1edfe9ef9c987720320e9dbc91eb5059ad
Validity
Not Before: Mar 1 23:01:04 2026 GMT
Not After : Mar 2 23:01:04 2026 GMT
Subject: CN=f3c15db338290f5976ed881a9f134a1a88df2a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ef:18:e7:af:c1:15:6c:e3:55:43:1a:6a:1b:
8b:49:5b:ad:f0:9c:2a:e1:5a:07:a8:c5:36:ae:62:
7d:b4:88:ae:75:48:d2:16:79:fe:bc:af:e8:10:9b:
92:ca:df:83:de:0a:83:59:9a:1c:c0:f2:b7:64:0f:
15:dd:95:a1:e0:06:fc:ad:a6:a6:b2:16:93:00:34:
94:55:df:e1:ba:37:31:e3:2d:2d:c5:ac:0a:94:d5:
d4:79:19:db:4a:09:e8:52:2a:e8:10:98:76:70:f5:
eb:c8:d2:0c:50:ea:f0:28:d9:1a:0b:27:cf:e3:4b:
a8:24:e5:4c:a6:9a:b6:f4:f4:00:74:8a:af:89:a0:
e7:ec:93:bb:76:dc:b7:e9:31:68:50:81:b4:9e:3f:
76:19:9d:62:a5:e7:99:11:99:14:fc:6d:30:bd:c0:
ff:04:b2:4b:81:f0:4d:95:fa:1b:d6:a1:73:b8:5c:
77:a7:3e:30:74:89:a5:36:b8:ec:d5:a6:3e:63:31:
a6:81:33:7d:2f:b3:b1:9e:c5:d7:78:20:ed:05:42:
40:b8:f9:85:82:3b:85:bb:38:e9:c4:b9:f3:93:2d:
3b:33:19:80:5c:09:55:00:0f:31:6b:cf:ec:af:32:
71:1f:42:cb:5f:31:48:20:7f:dd:40:31:df:40:5c:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C1:5D:B3:38:29:0F:59:76:ED:88:1A:9F:13:4A:1A:88:DF:2A:59
X509v3 Authority Key Identifier:
keyid:6A:18:ED:1E:DF:E9:EF:9C:98:77:20:32:0E:9D:BC:91:EB:50:59:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahjtHt_p75yYdyAyDp28ketQWa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2bad-a427-4ebf-ae52-262245e5d4af/1/ahjtHt_p75yYdyAyDp28ketQWa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:67:48:16:19:e5:eb:df:f8:bb:87:c9:99:b3:cf:c4:40:98:
e6:41:bd:60:b7:66:9a:f2:62:5c:a2:42:41:67:65:ca:05:53:
d8:ea:80:4a:4e:ab:37:f3:f6:49:2c:25:8b:1d:2f:b2:78:a8:
a5:9b:83:69:68:85:b7:52:cf:2e:4f:45:fa:fa:66:ae:96:39:
84:57:d1:03:2c:bd:80:77:0d:64:18:61:41:a2:48:5f:c5:46:
f4:7a:26:79:80:9d:44:f3:e8:a8:4b:ee:a7:03:b4:9b:70:87:
24:60:93:5f:79:3f:37:03:a5:49:ad:a0:da:2e:19:d1:a6:53:
8d:f9:29:62:c4:8a:d4:b0:73:8f:67:77:06:95:c3:7f:bb:72:
52:5e:11:e9:69:f0:87:9b:0c:a4:f3:6a:14:69:93:e1:ed:88:
56:20:06:42:8b:81:53:08:14:cc:17:06:5d:ad:91:91:52:80:
96:2d:28:0c:a3:67:8b:64:b4:e5:1c:17:8e:4a:ab:2a:50:f4:
21:7a:89:ab:ba:ad:e6:92:8f:10:8d:5a:9d:f1:0d:0d:38:be:
a4:ae:8b:23:cf:36:94:05:0d:03:0a:2c:7e:6f:d5:bf:cd:d7:
08:fd:73:bd:2e:ec:9e:ad:c4:b3:47:c6:56:d8:38:3c:55:d7:
34:c5:e7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:43:13 2026 by rpki-client