Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
File: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json)
Hash identifier: Tq6FLxdlw/VCrTouc8/6mrLdujpU0H/XJBNTNJQk/YM=
Subject key identifier: 1A:92:56:8B:F8:D5:FA:E4:EE:A5:90:70:E9:1F:C9:25:3D:CF:C6:D1
Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
Certificate issuer: /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Certificate serial: 01A0C2FB3AA540B64BE37C49A28A11D23251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
Manifest number: 19F8
Signing time: Mon 21 Sep 2026 08:00:39 +0000
Manifest this update: Mon 21 Sep 2026 08:00:39 +0000
Manifest next update: Tue 22 Sep 2026 08:00:39 +0000
Files and hashes: 1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: rlchDucSrsCAbBqlb/uYmz52tSquRowYpKXjokz1Qdk=)
2: X3jNBw8Lh4wM_nlBrKCyZ_CiKpA.roa (hash: 0JM67ptoryLNsC+bVRRWV80kYyTFg1yBjH5eusPhq4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:3a:a5:40:b6:4b:e3:7c:49:a2:8a:11:d2:32:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Validity
Not Before: Sep 21 08:00:39 2026 GMT
Not After : Sep 22 08:00:39 2026 GMT
Subject: CN=1a92568bf8d5fae4eea59070e91fc9253dcfc6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:6e:2e:4c:51:eb:87:b9:da:4d:9e:bf:16:
dc:de:c7:c2:14:58:20:36:a9:9e:de:b4:d9:74:7c:
88:91:bd:4a:d0:45:6a:32:60:49:42:ee:1e:2b:44:
0e:13:71:fa:ca:68:13:b7:72:a4:dc:9f:9c:1c:a3:
d2:c0:31:b2:1e:31:c7:fd:0d:2b:c9:54:27:10:bf:
60:92:af:87:74:d3:61:d4:a9:8f:95:30:7a:0c:7a:
bb:b2:56:80:27:c8:3a:aa:f4:7f:cb:c1:dd:11:6b:
af:ad:63:64:01:2e:69:7c:49:27:09:56:8d:0b:bb:
45:4e:f3:8f:11:f9:1b:f3:ec:a6:cc:85:99:ea:ca:
dc:d1:1f:ea:80:b7:e4:8b:47:db:06:ad:89:8e:fe:
42:d9:f8:aa:30:d1:28:61:1f:87:0b:13:a8:c7:d7:
76:d7:2c:e4:8e:4a:16:6c:86:62:6e:51:20:38:df:
71:a9:36:9c:03:71:b3:c1:ec:d7:91:e6:c5:5f:c3:
34:95:a9:2d:04:35:a3:02:e3:fa:d9:a1:e7:c7:5a:
77:1c:fc:f5:20:80:18:bb:4e:48:d0:d7:00:e9:08:
81:9f:9f:27:12:89:44:ee:4d:fc:69:06:95:41:76:
81:61:90:bd:14:e6:9b:43:30:10:56:84:7d:b2:9d:
d5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:92:56:8B:F8:D5:FA:E4:EE:A5:90:70:E9:1F:C9:25:3D:CF:C6:D1
X509v3 Authority Key Identifier:
keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:51:92:4a:9f:c2:65:2e:fa:00:ce:0a:22:69:36:66:44:c4:
30:e1:df:e4:c2:ef:fa:05:62:77:f8:99:71:17:d0:e5:3b:80:
78:35:f6:48:23:e7:e2:65:05:71:4f:d5:da:4c:4b:88:62:5c:
eb:f3:14:85:37:3b:a1:91:12:37:ac:bc:a7:10:c9:73:ba:b7:
8e:4b:8e:2b:63:9a:91:8b:60:be:d2:9e:5e:a3:48:f8:45:9a:
fc:8c:a6:f4:e8:1d:bb:a5:0b:bd:16:a9:5c:7a:4a:76:ad:f1:
88:b2:71:05:c8:66:f1:29:27:62:55:d8:8e:75:93:4c:63:26:
01:5d:6a:da:e5:db:16:5a:2d:3d:83:20:08:45:48:af:50:0a:
a9:87:7b:9c:65:23:d3:90:93:59:a6:d4:85:31:13:d1:af:b4:
29:fb:74:c4:5f:68:33:0f:9f:00:d1:2d:77:10:74:db:a8:6a:
5a:dc:81:2e:a2:b9:05:57:0f:e3:75:b4:c4:cd:d7:9b:47:f5:
d5:f0:ec:9f:41:db:e6:b3:70:20:c1:cf:df:56:19:c0:02:da:
d4:46:71:73:35:51:91:5e:22:06:e6:e2:6a:9b:81:86:32:ef:
c0:e9:6e:de:2e:a1:3e:fd:73:97:04:6d:9c:dc:5b:8b:15:d3:
6a:45:5f:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+zqlQLZL43xJoooR0jJRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzRlYzNlYzUzZjUyZjdmNTI4MzViYjUxMGFiNmJlZGFh
MDBhM2QwHhcNMjYwOTIxMDgwMDM5WhcNMjYwOTIyMDgwMDM5WjAzMTEwLwYDVQQD
EygxYTkyNTY4YmY4ZDVmYWU0ZWVhNTkwNzBlOTFmYzkyNTNkY2ZjNmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+FuLkxR64e52k2evxbc3sfCFFgg
Nqme3rTZdHyIkb1K0EVqMmBJQu4eK0QOE3H6ymgTt3Kk3J+cHKPSwDGyHjHH/Q0r
yVQnEL9gkq+HdNNh1KmPlTB6DHq7slaAJ8g6qvR/y8HdEWuvrWNkAS5pfEknCVaN
C7tFTvOPEfkb8+ymzIWZ6src0R/qgLfki0fbBq2Jjv5C2fiqMNEoYR+HCxOox9d2
1yzkjkoWbIZiblEgON9xqTacA3GzwezXkebFX8M0laktBDWjAuP62aHnx1p3HPz1
IIAYu05I0NcA6QiBn58nEolE7k38aQaVQXaBYZC9FOabQzAQVoR9sp3VJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqSVov41frk7qWQcOkfySU9z8bRMB8GA1UdIwQY
MBaAFAB07D7FP1L39Sg1u1EKtr7aoAo9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhUc1BzVV9VdmYxS0RXN1VRcTJ2dHFnQ2owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MDhhOGEtNThkYi00NTA5LWEyODUt
MWFjMmVkZGE4ZTJhLzEvQUhUc1BzVV9VdmYxS0RXN1VRcTJ2dHFnQ2owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85MDhhOGEtNThkYi00NTA5LWEyODUtMWFjMmVkZGE4ZTJh
LzEvQUhUc1BzVV9VdmYxS0RXN1VRcTJ2dHFnQ2owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplGSSp/C
ZS76AM4KImk2ZkTEMOHf5MLv+gVid/iZcRfQ5TuAeDX2SCPn4mUFcU/V2kxLiGJc
6/MUhTc7oZESN6y8pxDJc7q3jkuOK2OakYtgvtKeXqNI+EWa/Iym9Ogdu6ULvRap
XHpKdq3xiLJxBchm8SknYlXYjnWTTGMmAV1q2uXbFlotPYMgCEVIr1AKqYd7nGUj
05CTWabUhTET0a+0Kft0xF9oMw+fANEtdxB026hqWtyBLqK5BVcP43W0xM3Xm0f1
1fDsn0Hb5rNwIMHP31YZwALa1EZxczVRkV4iBubiapuBhjLvwOlu3i6hPv1zlwRt
nNxbixXTakVf6A==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:59:06 2026 by rpki-client