Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
File: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json)
Hash identifier: vM9DDJWE2bKmmLgStAQEnXrEd2emzjBUwGA5rJI7huM=
Subject key identifier: AA:C1:26:78:34:F2:D6:8F:52:97:72:0D:72:05:AC:C3:C0:01:10:5A
Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
Certificate issuer: /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Certificate serial: 01A0C6D807858EF25A7AFC04B4C566BA705B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
Manifest number: 19FA
Signing time: Tue 22 Sep 2026 02:00:41 +0000
Manifest this update: Tue 22 Sep 2026 02:00:41 +0000
Manifest next update: Wed 23 Sep 2026 02:00:41 +0000
Files and hashes: 1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: NZuYTntiHR/e7voMEnpWh44aOsrdo+H1RU9kcaLcbok=)
2: X3jNBw8Lh4wM_nlBrKCyZ_CiKpA.roa (hash: 0JM67ptoryLNsC+bVRRWV80kYyTFg1yBjH5eusPhq4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:07:85:8e:f2:5a:7a:fc:04:b4:c5:66:ba:70:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Validity
Not Before: Sep 22 02:00:41 2026 GMT
Not After : Sep 23 02:00:41 2026 GMT
Subject: CN=aac1267834f2d68f5297720d7205acc3c001105a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:08:66:92:75:c3:35:76:30:c2:81:7f:65:67:
85:12:9a:1f:49:ff:18:bb:73:7b:6e:ac:82:f8:16:
0f:05:45:5e:b7:61:ac:f4:5b:84:4b:65:1c:e5:20:
81:28:32:95:5b:51:aa:c0:95:79:b3:1d:39:1b:92:
b2:fc:d9:89:f2:50:1d:0f:b4:37:90:90:06:65:a2:
32:9e:24:f3:d7:c3:5b:ae:d6:f4:5a:23:5f:9b:2b:
bf:e6:aa:36:58:a4:44:3d:85:cd:09:34:7c:33:cc:
9e:e5:d8:e8:02:7b:ac:73:09:8e:50:c5:0c:36:bc:
8b:a3:2b:fb:e1:eb:2f:dd:ca:87:51:42:d5:e3:cb:
9d:81:01:c9:08:c7:eb:4f:83:ae:dd:39:b6:ba:33:
f0:8d:71:6f:01:b4:01:d0:0d:39:e5:91:c3:48:0e:
c4:5a:2d:a2:91:1e:71:ac:36:2d:e3:56:82:26:3d:
2c:cf:e1:3e:ca:8c:c2:f1:0c:99:39:53:75:c1:28:
66:bb:eb:7d:19:14:5f:c0:c9:e2:11:ca:68:cd:1e:
80:d2:01:b7:37:b5:ef:05:21:23:ba:ff:16:b3:67:
08:af:e3:dc:3d:31:99:5e:1a:f9:44:27:d6:d7:fd:
ff:f1:6a:34:0b:86:ed:e1:15:2e:1f:a4:ae:63:64:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C1:26:78:34:F2:D6:8F:52:97:72:0D:72:05:AC:C3:C0:01:10:5A
X509v3 Authority Key Identifier:
keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:92:cd:0e:32:d6:95:7f:19:8c:d2:7d:98:a2:ff:e1:bf:2e:
8d:5d:2d:53:ff:df:c5:16:cd:c4:33:50:30:23:cd:03:c8:93:
cd:1d:4f:ea:64:12:ad:05:58:bc:20:6b:50:b3:35:dc:f1:3c:
0a:f2:a4:86:1e:94:49:bd:56:b6:42:ad:ae:aa:ed:9d:c7:98:
06:98:86:f1:31:09:12:fb:60:87:3f:9f:c7:73:5f:ac:b4:c0:
52:a8:be:4f:86:00:f3:58:60:48:a4:ed:c6:5b:41:bc:26:9a:
a4:b6:ae:dd:72:82:60:de:23:2b:ed:95:be:6d:78:30:4d:fd:
99:85:90:11:fa:81:43:d7:a8:46:34:b5:44:4a:9c:d1:29:d7:
ec:71:d9:c6:a0:f5:bc:e4:0c:47:73:96:aa:2c:af:17:2e:d0:
90:0c:a7:c9:14:24:09:f2:d2:6c:42:c9:10:af:2a:2c:7a:f4:
26:8f:00:15:39:b9:dc:e1:7d:15:d9:2f:a4:e8:ba:7b:84:77:
29:e0:32:f9:82:e9:86:ae:2f:f5:a5:67:77:b7:2c:42:4c:6f:
a9:1d:d1:ef:d5:70:d4:c8:ea:37:50:0c:66:cf:bd:06:87:9c:
ce:fa:6c:39:c9:7f:7e:b4:83:96:4c:ef:cd:c2:34:a4:54:bd:
ac:fe:a4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:37:55 2026 by rpki-client