Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
File: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json)
Hash identifier: 5UqjYe/NtP9Me82z4m9Cfk15b+QaHe+6Ywj4bQWrBfE=
Subject key identifier: 9A:1B:44:A0:F3:48:38:C0:D3:5E:A4:F8:D1:87:DF:71:31:73:F1:5F
Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
Certificate issuer: /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Certificate serial: 019CAC46DB495E4F2875874CCB0F284EB5AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 02:00:50 +0000
Manifest this update: Mon 02 Mar 2026 02:00:50 +0000
Manifest next update: Tue 03 Mar 2026 02:00:50 +0000
Files and hashes: 1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: j9OdRtF/1698HXIDCDVO2zCbMO1Qpw9gZtslbrFU0pA=)
2: X3jNBw8Lh4wM_nlBrKCyZ_CiKpA.roa (hash: 0JM67ptoryLNsC+bVRRWV80kYyTFg1yBjH5eusPhq4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:db:49:5e:4f:28:75:87:4c:cb:0f:28:4e:b5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Validity
Not Before: Mar 2 02:00:50 2026 GMT
Not After : Mar 3 02:00:50 2026 GMT
Subject: CN=9a1b44a0f34838c0d35ea4f8d187df713173f15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:b6:d5:63:8c:20:38:4f:b4:47:99:2a:e6:
97:0a:77:ed:68:e7:9e:73:2a:6c:94:ac:2c:c5:ab:
ef:06:45:0a:b7:3b:85:7a:99:b3:db:80:59:13:22:
25:45:0e:07:50:6c:9a:fd:92:2c:e0:03:a2:7c:f5:
d8:fb:d5:ed:02:80:80:49:05:02:7a:e2:3e:a3:32:
72:7e:8e:72:71:4c:6c:06:92:68:ce:a7:98:83:cf:
5f:85:c1:f8:98:78:2a:19:77:cf:58:76:28:1a:2f:
56:fd:6c:93:76:93:0a:12:6b:97:d3:37:d1:09:23:
cb:4d:eb:48:d7:67:95:df:0b:5d:0e:d3:da:dd:0f:
1e:dc:dd:c6:91:35:8d:8d:f4:f4:44:32:10:0e:f2:
e7:3d:1d:58:03:9f:24:82:04:6e:85:ea:b1:c4:12:
30:cc:91:ed:86:a8:28:b6:90:0d:a2:4e:3a:7d:4f:
5b:73:6c:2a:5b:5c:a2:6b:2e:2e:48:d3:cb:6d:af:
ff:1b:2f:54:37:29:ce:ee:50:2c:61:03:14:81:e6:
bd:1a:28:fd:d7:fc:1c:be:6c:42:d6:ba:4e:3b:85:
80:ec:cf:14:00:cf:cb:78:ac:aa:d4:5a:2f:83:c0:
65:ac:6e:70:aa:fd:55:7d:b6:70:55:5c:e3:dd:b0:
bf:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1B:44:A0:F3:48:38:C0:D3:5E:A4:F8:D1:87:DF:71:31:73:F1:5F
X509v3 Authority Key Identifier:
keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a6:d8:2a:7b:bc:34:13:50:e0:1d:f3:42:68:16:41:1d:58:
68:28:9d:61:a2:c4:5f:5a:f8:9d:c4:bf:e7:a4:de:db:47:26:
d0:73:22:7c:18:78:4d:42:69:4c:8b:9d:64:eb:38:89:7f:46:
64:82:b2:e9:e2:4f:cd:2d:cb:15:2b:88:69:c2:e5:00:be:79:
69:52:aa:c1:36:e1:66:05:16:6a:7a:aa:9d:01:66:64:70:b4:
68:83:4f:9b:e9:83:d8:ba:2d:96:83:1c:2c:74:32:f8:4b:c8:
b1:68:e3:af:5a:2a:ba:14:bc:51:3b:60:81:eb:1b:16:ee:1b:
5c:c3:d5:25:c6:83:3c:e8:75:be:46:a4:59:37:ef:75:9e:07:
ba:ca:de:f0:9d:af:fc:60:fa:89:46:a9:0f:84:20:2f:28:8b:
b2:57:79:cf:f0:f2:61:6b:82:83:f5:61:72:58:fa:24:58:c4:
7d:33:d1:e8:c8:99:e1:8d:60:9d:a6:f5:3a:08:65:6a:9e:1e:
0b:2b:f0:d0:c5:2c:a8:58:31:29:86:8f:fc:ee:a1:d2:12:1e:
8a:64:dc:f4:d5:5f:4c:1f:02:35:2f:c7:90:5c:8a:90:1f:15:
15:75:2f:62:7b:38:11:6b:77:e6:01:fe:67:45:a7:7f:f4:af:
90:e4:39:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:34 2026 by rpki-client