Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
File: AhfGZs2iPpINFLkK6TY3EzUKrB4.mft (raw, json)
Hash identifier: ATLL3xzWqho00MJ2T0IMVUZcsGLSRU6vlTFFPdNEG4s=
Subject key identifier: 42:C5:D9:A5:EA:55:E1:7F:9A:5F:17:75:9B:64:FE:A3:55:C2:3A:72
Authority key identifier: 02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E
Certificate issuer: /CN=0217c666cda23e920d14b90ae9363713350aac1e
Certificate serial: 01A0C44511273BD3C197B14412079B797E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 14:00:55 +0000
Manifest this update: Mon 21 Sep 2026 14:00:55 +0000
Manifest next update: Tue 22 Sep 2026 14:00:55 +0000
Files and hashes: 1: AhfGZs2iPpINFLkK6TY3EzUKrB4.crl (hash: gD5W4nac8xBKmPjF8p+0qGMtXBK89zHgsCeJq4emIms=)
2: LbPyc4hAUlUzut2p0ZpxCw83HnE.roa (hash: cLTartZVu31Sy+PEywLeLASvzBKWyq6c9Am1NnMnkbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:45:11:27:3b:d3:c1:97:b1:44:12:07:9b:79:7e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0217c666cda23e920d14b90ae9363713350aac1e
Validity
Not Before: Sep 21 14:00:55 2026 GMT
Not After : Sep 22 14:00:55 2026 GMT
Subject: CN=42c5d9a5ea55e17f9a5f17759b64fea355c23a72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9e:f4:fc:f1:78:b7:a6:93:8f:ec:61:43:52:
14:31:08:5c:cc:3a:a9:f3:94:7f:6a:1a:c8:c0:7d:
87:ee:fa:67:d7:1e:f3:69:f6:55:93:20:33:5d:92:
ef:fd:70:80:e3:de:98:d5:c3:58:f9:c1:f2:12:8a:
8f:0d:5d:c7:5b:b9:df:a9:e4:4c:92:6b:f3:b2:24:
60:a7:db:39:12:f4:1b:8a:cb:bc:ac:d3:bc:03:fd:
03:15:f1:61:e8:82:75:05:33:bc:0e:f7:c9:91:ac:
46:c2:83:be:c4:e5:73:4f:9d:96:17:d5:20:f3:00:
0f:22:a5:f9:f6:24:6c:30:b3:49:86:3f:9f:1a:4c:
ae:e4:dc:c0:4a:09:dc:12:ec:bf:9b:08:a7:91:b9:
4c:6f:ca:63:95:75:29:70:93:8d:71:c0:86:8c:8c:
ed:d7:ad:91:61:51:0b:7a:d4:43:26:3e:2b:9f:b7:
4f:01:12:59:ed:01:65:45:66:69:7e:df:a6:3e:b8:
1e:27:8e:fc:4c:db:f2:44:65:cc:c5:76:3c:c7:81:
e3:29:83:3a:b2:92:1a:cd:60:ba:bf:ca:c5:03:fa:
7a:2d:22:aa:1b:41:b6:b0:c2:4d:54:b8:a3:4e:58:
ad:78:a3:ea:22:0c:0b:b4:80:35:75:01:36:e1:2a:
2f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C5:D9:A5:EA:55:E1:7F:9A:5F:17:75:9B:64:FE:A3:55:C2:3A:72
X509v3 Authority Key Identifier:
keyid:02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1a:60:ae:fe:49:9b:cc:3f:fc:8f:12:e3:7c:f4:9d:4e:00:
63:1d:90:da:8a:d6:75:67:89:7a:ed:7b:1c:b4:35:4e:3a:82:
62:80:88:77:34:a7:68:14:e7:bb:32:9d:0a:ce:43:ff:5d:3e:
c7:d6:a4:96:57:f4:73:f6:73:03:a7:62:ca:c3:4f:65:a8:d6:
5e:9d:e1:58:66:f2:62:78:9e:f6:e0:d2:e5:b7:69:5e:ac:c6:
26:a4:24:e1:de:80:95:e4:cb:34:a2:8a:d0:92:29:4d:6d:31:
e5:8f:b2:7e:4b:7b:d3:51:41:39:36:d4:10:bb:be:ff:9e:95:
ed:c0:99:10:68:79:0c:2e:54:41:d5:0e:8a:52:8b:e5:00:da:
75:df:b9:45:1f:31:fe:63:41:2d:50:c8:16:b9:11:0a:80:bd:
3f:08:f4:12:2b:56:af:f8:9b:35:43:ba:39:ee:42:0c:09:d1:
87:ad:bb:37:6b:51:3b:26:9b:ea:b2:90:2c:67:a3:5d:03:77:
2d:ac:70:3b:8b:51:62:e4:5f:d4:28:dd:d7:eb:81:8d:c0:98:
2f:c5:98:c3:c6:98:24:20:30:45:ff:cd:94:f0:7c:0b:5e:d8:
96:56:db:d0:7a:3a:57:40:08:12:46:5e:df:ac:2c:1a:05:00:
e9:47:12:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:42:12 2026 by rpki-client