Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
File: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json)
Hash identifier: tThP3o006RyjPSpDA9SyNHrWMJJYrWYwPfBMf1Ly0Qg=
Subject key identifier: 18:5D:BB:C4:D0:70:C1:07:CE:30:E3:AA:31:9F:98:37:C3:F4:27:95
Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
Certificate issuer: /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Certificate serial: 01A1DCEFD8D28E427D24449C1AEC7C9DC06E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
Manifest number: 1A8A
Signing time: Sun 15 Nov 2026 02:01:08 +0000
Manifest this update: Sun 15 Nov 2026 02:01:08 +0000
Manifest next update: Mon 16 Nov 2026 02:01:08 +0000
Files and hashes: 1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: V8Miqju7y3DO+EigPaQ6Ev0Nti+YnTud/23AavR/kFs=)
2: X3jNBw8Lh4wM_nlBrKCyZ_CiKpA.roa (hash: 0JM67ptoryLNsC+bVRRWV80kYyTFg1yBjH5eusPhq4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:d8:d2:8e:42:7d:24:44:9c:1a:ec:7c:9d:c0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Validity
Not Before: Nov 15 02:01:08 2026 GMT
Not After : Nov 16 02:01:08 2026 GMT
Subject: CN=185dbbc4d070c107ce30e3aa319f9837c3f42795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d3:3c:5c:4a:af:b0:ea:15:ad:8c:42:2f:fd:
67:f0:2c:8c:ca:61:ab:40:6f:b5:31:a2:94:46:b5:
a6:ae:f8:22:95:d4:e5:fc:53:1d:fe:1e:92:e0:c9:
80:7b:f4:90:3e:93:2e:ab:7f:be:14:18:17:97:8f:
98:57:e8:6c:e1:23:a3:d8:8b:0e:e7:3d:a6:63:f4:
06:6a:b6:bd:31:60:60:75:62:41:8a:ac:c0:41:5c:
dd:43:48:aa:ae:c6:a8:96:48:12:df:ce:b0:e4:c6:
bd:3e:f0:f8:17:3b:7f:fc:9c:1e:03:a4:b2:e9:14:
d6:20:a1:8f:9f:16:6d:be:c0:16:fa:91:4e:a5:3c:
72:63:82:72:d1:8d:57:c2:55:27:0f:d6:49:c3:4d:
9b:34:56:d8:f6:28:85:a5:c4:8a:1b:7d:91:66:77:
a0:ee:f7:92:b9:0d:20:1d:69:03:94:6c:1e:81:c5:
c7:69:ff:13:63:5c:d7:f2:0e:90:88:14:5f:a4:18:
1f:9e:68:76:25:b7:8a:69:3a:bb:72:e3:b4:df:e7:
be:18:d1:c2:b0:b6:91:38:ca:34:16:00:3c:17:fa:
b4:4f:db:58:91:45:81:45:43:a9:65:02:c8:ee:f9:
b2:88:06:66:fa:d0:db:94:1e:8e:6c:c9:fd:c9:55:
be:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5D:BB:C4:D0:70:C1:07:CE:30:E3:AA:31:9F:98:37:C3:F4:27:95
X509v3 Authority Key Identifier:
keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8f:49:79:78:bf:1d:4a:9d:8c:62:db:85:0b:ee:bc:c2:77:
66:15:4b:53:69:bc:ca:f2:9d:e8:a6:a8:e7:f1:82:3b:6d:c9:
27:b9:40:e1:4d:0f:6a:de:02:f6:ae:ad:c6:23:d9:a6:2e:99:
91:c3:b0:ff:54:5d:06:9e:55:89:35:af:42:4f:44:2a:c6:ec:
e5:59:69:33:48:46:1c:c0:45:33:8b:75:e5:3e:33:2d:33:d1:
0c:70:0f:a5:57:02:6e:e4:55:af:6e:27:82:26:37:e9:6d:a9:
6d:38:b0:e8:c1:74:20:13:88:a5:df:99:83:49:90:5a:53:20:
d6:d0:38:ac:56:7b:cc:9f:e1:be:22:23:ff:2d:8e:6b:18:12:
5d:b6:df:76:51:f3:61:16:6b:77:24:c1:32:0e:29:e1:52:cd:
ca:b1:d9:43:97:a8:99:b2:e6:2e:c9:27:e6:12:8c:21:55:54:
84:e5:3b:b4:10:3b:c0:7d:12:bb:33:10:2a:40:2b:43:c2:b7:
cd:68:c6:dd:b3:69:51:56:e5:f9:52:f1:07:04:f6:e9:1d:ae:
0d:1e:61:1f:ea:f9:32:73:c6:52:38:81:60:f5:59:fe:82:21:
42:df:fe:9f:b2:97:f1:da:b1:48:59:f7:71:64:0d:3c:bd:65:
fc:91:21:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:54:17 2026 by rpki-client