Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
File: ahRjzDw0FHZhFRif2a-ORMXblBI.mft (raw, json)
Hash identifier: yoHtLjFiBUartUHnhqQq3aOZDnGzJC9KkajMd4GsvmQ=
Subject key identifier: 3F:E3:19:B3:17:CB:71:A6:55:FD:CB:D4:F8:4B:80:2E:00:46:76:87
Authority key identifier: 6A:14:63:CC:3C:34:14:76:61:15:18:9F:D9:AF:8E:44:C5:DB:94:12
Certificate issuer: /CN=6a1463cc3c3414766115189fd9af8e44c5db9412
Certificate serial: 01A0C934967BE6A45B88C2E630F663177CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
Manifest number: 0155
Signing time: Tue 22 Sep 2026 13:01:01 +0000
Manifest this update: Tue 22 Sep 2026 13:01:01 +0000
Manifest next update: Wed 23 Sep 2026 13:01:01 +0000
Files and hashes: 1: 7A5Mo_HCT5tIYge5BK9JUhMg5Hw.roa (hash: Ep+Z/ryezb/UZFnKTPmt1RNdUI3JuXr1O0msLtfQ0TA=)
2: ahRjzDw0FHZhFRif2a-ORMXblBI.crl (hash: kMf6WCPr1qfB33SsR/5klOOv363BDFnB0rNV2f8xYe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:96:7b:e6:a4:5b:88:c2:e6:30:f6:63:17:7c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1463cc3c3414766115189fd9af8e44c5db9412
Validity
Not Before: Sep 22 13:01:01 2026 GMT
Not After : Sep 23 13:01:01 2026 GMT
Subject: CN=3fe319b317cb71a655fdcbd4f84b802e00467687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:76:fe:fd:c7:c6:93:16:a3:f9:45:14:1c:ef:
f7:f4:f1:1e:9d:f6:5e:3d:50:27:a2:2b:9b:f7:29:
23:6f:d7:58:ea:aa:9d:df:4a:4b:68:86:aa:a2:b5:
e5:05:c5:39:74:90:a5:3a:48:ab:ec:66:73:2f:6c:
71:f2:e7:8c:f0:b9:05:72:08:11:65:85:ae:9e:74:
4d:2c:40:bd:81:c9:48:b0:9d:b8:ce:84:e5:c1:44:
a6:d4:0d:60:93:c8:78:d0:f5:04:72:0c:c9:74:f6:
9a:1e:e8:93:04:fb:99:d7:d3:ba:57:0b:01:34:45:
1e:4a:20:f7:20:a8:6c:37:8a:94:66:5b:08:df:84:
9c:04:01:f6:6f:29:73:f9:a7:bd:52:be:45:79:30:
e6:1b:61:a1:2c:39:d4:65:c0:8b:70:f5:b5:18:69:
72:63:0d:72:b2:b8:ed:3f:9c:f4:19:06:d2:bb:30:
e6:1c:e5:f1:c3:35:2f:af:21:bd:38:ac:ce:fc:43:
c2:f6:84:87:b2:3f:ee:35:12:ec:58:f3:3d:55:0f:
83:9b:bc:11:41:13:de:41:01:29:8a:8e:5e:24:2d:
f7:e1:82:00:e2:7a:2f:54:2b:ec:c5:df:e8:99:28:
f0:7c:a2:d8:8d:44:c4:0b:8b:f2:42:71:5c:8c:76:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E3:19:B3:17:CB:71:A6:55:FD:CB:D4:F8:4B:80:2E:00:46:76:87
X509v3 Authority Key Identifier:
keyid:6A:14:63:CC:3C:34:14:76:61:15:18:9F:D9:AF:8E:44:C5:DB:94:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahRjzDw0FHZhFRif2a-ORMXblBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/cc0dc5-b8cc-43c3-85b7-ac62ebfb0616/1/ahRjzDw0FHZhFRif2a-ORMXblBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:f2:8b:7d:5c:1e:31:7a:b9:1a:3f:9a:b0:9f:75:63:18:c6:
0f:ca:5d:70:84:62:b6:e2:21:2d:96:0c:b5:a2:a1:66:43:35:
35:9b:ff:58:35:3d:ed:34:1b:8d:cc:26:3b:34:37:ae:e3:11:
b0:ac:c3:5a:f7:f7:04:22:79:9c:68:8a:45:ac:2e:ac:33:3d:
1d:7c:88:61:4a:50:29:a9:ff:0c:6a:5d:af:69:db:12:6e:15:
ba:0a:88:fe:bc:31:e0:dc:54:62:88:16:aa:7a:71:ff:53:1a:
7b:ac:db:38:7d:6a:1d:75:b7:b9:63:4d:67:65:27:7b:1d:13:
25:61:e7:80:ea:58:96:0c:cc:cf:e2:0b:b6:f2:1c:35:9b:f8:
e1:83:fc:6a:82:29:c8:21:bb:ab:95:fd:4a:5a:de:b8:03:97:
47:48:fc:97:63:44:f2:b2:b8:85:f4:fc:27:91:2b:5b:1d:95:
71:7b:a5:15:4a:fc:15:5a:12:e3:f7:2c:b4:d5:6a:30:8e:e3:
64:b2:12:a1:00:26:1d:37:8e:85:a5:38:2a:e3:a0:e0:1c:0e:
b1:b7:9d:60:e2:e4:c5:07:82:96:76:25:e9:99:8f:52:9a:b4:
01:26:1f:8e:dd:c7:4d:dd:11:8b:65:29:0c:2a:f3:04:85:e2:
4c:46:76:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:02:57 2026 by rpki-client