Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
File: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json)
Hash identifier: X5DwMLpyOtcEhY7lJy/Y3uU2/QOYcg/R7g4k5y22BRg=
Subject key identifier: 7F:58:6A:68:B9:A4:29:B0:AA:E5:A3:D1:3D:74:A1:4F:3F:A7:7A:99
Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
Certificate issuer: /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Certificate serial: 019D97E22AC2F7CD64EC74E59D94744621BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
Manifest number: 1854
Signing time: Thu 16 Apr 2026 20:01:14 +0000
Manifest this update: Thu 16 Apr 2026 20:01:14 +0000
Manifest next update: Fri 17 Apr 2026 20:01:14 +0000
Files and hashes: 1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: RBKOdmT+mbyVaLpgbz2qaErHiaD5jjGNBZhdj5KiwEM=)
2: X3jNBw8Lh4wM_nlBrKCyZ_CiKpA.roa (hash: 0JM67ptoryLNsC+bVRRWV80kYyTFg1yBjH5eusPhq4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:2a:c2:f7:cd:64:ec:74:e5:9d:94:74:46:21:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Validity
Not Before: Apr 16 20:01:14 2026 GMT
Not After : Apr 17 20:01:14 2026 GMT
Subject: CN=7f586a68b9a429b0aae5a3d13d74a14f3fa77a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9b:0c:6c:ca:e0:e5:27:1d:18:64:d1:5e:2c:
aa:1f:3b:f1:f8:be:3d:d3:20:05:88:33:54:b1:5f:
f4:ab:18:4e:6a:37:94:d8:de:15:4a:87:4f:ce:23:
00:95:93:a0:db:18:92:0f:bf:28:84:25:96:69:1a:
a7:e0:5c:e7:3a:70:e3:bd:e8:75:5b:c1:fa:af:35:
f5:02:3b:f0:f1:94:05:3b:1f:99:5b:66:3c:e1:8f:
95:72:0b:38:0b:41:05:58:ad:ed:53:e3:6f:89:e0:
c1:b0:ab:09:72:e0:0d:8e:7d:79:b2:69:c4:12:84:
89:75:44:91:e4:3a:55:24:e5:73:1a:90:6c:42:f5:
65:52:5e:f3:b9:41:5e:8d:50:8d:5d:f1:a1:1c:4e:
25:17:8c:c5:c8:04:5e:4b:39:27:9a:46:c7:31:6c:
5a:cd:8e:fc:10:ed:4f:7d:16:dc:fb:1e:41:bf:ad:
cc:71:87:02:a0:ab:09:9a:e3:d2:02:fe:b5:39:e0:
9d:eb:13:22:fe:fc:e9:21:db:69:84:e5:0d:44:74:
c5:aa:ae:a9:cf:c3:ac:1e:78:04:9b:8f:1c:ff:84:
1e:d1:67:6c:90:59:fd:29:52:82:39:0a:b2:99:44:
d3:02:32:ed:d8:1e:ad:10:53:3d:b1:ed:67:4f:d3:
07:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:58:6A:68:B9:A4:29:B0:AA:E5:A3:D1:3D:74:A1:4F:3F:A7:7A:99
X509v3 Authority Key Identifier:
keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f0:cb:cd:0e:ec:d2:76:aa:28:73:7f:1b:08:df:a5:c8:9e:
c1:82:07:9e:91:e6:9d:57:e8:39:87:98:39:7d:b9:c8:bf:82:
de:7a:90:e2:ce:e7:84:97:c6:88:13:0f:31:14:6f:e4:df:31:
81:25:82:9f:1d:58:19:b5:e1:f0:6d:71:17:15:1e:1a:a1:fc:
63:c0:c9:50:d6:2c:ba:bb:e2:35:33:11:52:6b:c7:5c:d2:a3:
ef:ab:1a:19:95:6f:04:bf:a8:ef:9a:85:9d:35:ce:1f:d4:30:
96:02:79:00:1d:3b:d2:64:94:32:59:de:e3:de:50:50:f8:d7:
63:47:c8:32:1b:18:2f:06:00:41:39:af:6b:b2:02:15:25:74:
b2:04:0e:6a:a2:49:d4:da:be:fe:fa:dc:67:66:a4:91:61:fb:
8d:18:e7:b6:53:22:ec:92:45:01:a5:cc:9c:a6:8a:b9:5a:e0:
07:9b:8b:7c:e1:70:31:ad:74:41:9f:53:c2:f3:d3:0b:1f:68:
51:6e:22:e2:b0:8d:04:d6:e7:9c:88:19:ac:90:2e:56:dc:cc:
df:55:89:21:84:8e:51:46:5f:75:d0:39:18:9a:54:c5:7f:a9:
79:ea:c8:5f:5e:49:ea:9b:ff:3b:af:0e:56:65:c1:dd:e3:dc:
32:f7:9d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:59 2026 by rpki-client