Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
File: AhfGZs2iPpINFLkK6TY3EzUKrB4.mft (raw, json)
Hash identifier: ZDVBcV+BdTiUHMCvdFm7fOQUZjMpcayJU+TU8iFz2Fk=
Subject key identifier: EC:6B:7E:50:AF:3C:7B:36:85:EC:F0:92:72:66:89:B1:EA:C7:99:FD
Authority key identifier: 02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E
Certificate issuer: /CN=0217c666cda23e920d14b90ae9363713350aac1e
Certificate serial: 019FAA5094A69A2E69333457A15B518F5B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 20:00:35 +0000
Manifest this update: Tue 28 Jul 2026 20:00:35 +0000
Manifest next update: Wed 29 Jul 2026 20:00:35 +0000
Files and hashes: 1: AhfGZs2iPpINFLkK6TY3EzUKrB4.crl (hash: HL8rX7zTxZWlv1ApHA/z5gOTQtiiXu73OvoxFoGbaqw=)
2: LbPyc4hAUlUzut2p0ZpxCw83HnE.roa (hash: cLTartZVu31Sy+PEywLeLASvzBKWyq6c9Am1NnMnkbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:94:a6:9a:2e:69:33:34:57:a1:5b:51:8f:5b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0217c666cda23e920d14b90ae9363713350aac1e
Validity
Not Before: Jul 28 20:00:35 2026 GMT
Not After : Jul 29 20:00:35 2026 GMT
Subject: CN=ec6b7e50af3c7b3685ecf092726689b1eac799fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:86:34:a6:3f:ca:9b:60:0f:33:a7:df:3e:
4f:c6:8c:72:bc:c9:6c:ad:c7:b3:d3:60:57:3a:16:
98:a2:a9:05:17:70:c2:60:f8:28:1c:e6:18:19:1b:
d9:5d:9e:60:da:a5:a1:fd:8b:47:f7:5e:ed:a2:31:
79:42:0c:8e:52:db:22:14:34:a0:ae:fa:04:91:17:
c3:fc:f2:42:52:aa:63:6c:ce:39:40:b7:60:c3:40:
26:6c:96:60:45:31:bb:e1:85:a6:4e:6c:20:d4:95:
3b:c1:7d:8f:0f:1b:14:97:1e:3d:9c:14:91:d5:d5:
16:f1:6a:9f:10:90:ee:e4:17:42:23:d6:97:ce:fa:
e5:d1:8c:2c:c4:34:6e:40:85:b1:7f:d1:50:0b:9e:
d5:b5:09:18:02:c5:08:f1:f0:d0:8f:06:dc:e3:c1:
ab:3f:61:58:65:bc:e4:b8:cf:05:c0:2e:aa:5f:89:
c6:a4:04:9b:84:df:7c:62:aa:e7:ca:db:9d:39:8f:
ee:1f:40:9e:6e:5a:60:49:ac:b3:d9:7c:75:7a:a4:
e5:9d:71:57:d0:12:91:4a:cc:ee:05:6c:2a:33:12:
53:43:82:aa:35:13:45:23:12:86:19:30:64:e5:91:
2e:0b:f6:60:9d:df:57:f9:61:17:4d:f5:b6:73:d4:
f6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6B:7E:50:AF:3C:7B:36:85:EC:F0:92:72:66:89:B1:EA:C7:99:FD
X509v3 Authority Key Identifier:
keyid:02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0c:e0:b9:54:94:e3:66:72:54:85:d9:be:92:96:56:22:02:
d6:f4:71:03:4c:16:90:20:f9:94:41:de:f4:e3:3d:c0:cb:b4:
f4:9a:70:e2:7e:e0:2a:f9:78:15:d6:1b:26:a8:a6:21:42:50:
c4:23:38:20:7e:48:04:04:d0:01:e8:cf:83:cb:36:5a:8e:d4:
c0:5f:ff:8b:35:d1:73:8c:f8:34:d2:b6:bb:ad:85:25:c0:a7:
65:c2:aa:22:16:58:5d:e1:5d:24:2c:c5:07:ba:3a:e2:1f:9c:
de:68:a4:49:d3:79:e0:ce:94:a5:de:7d:5a:27:5d:10:39:48:
b1:38:01:17:a0:a9:9d:b9:d7:cf:94:8c:f7:8e:93:0a:fb:5a:
fd:33:86:14:b6:19:ed:8e:91:a0:c3:06:6c:c4:dd:15:ce:2d:
f9:36:3f:b2:90:57:5a:90:5f:f4:62:dd:02:ef:5e:cf:9c:f3:
d3:9c:88:77:07:7f:31:0a:2c:78:7a:c4:35:6b:6f:83:19:90:
86:95:43:94:a4:be:a2:1a:69:e5:dd:e6:7e:42:70:16:ca:1e:
a8:d0:78:bc:ba:7a:7d:0b:4b:54:e6:e2:b3:70:84:aa:7a:14:
58:38:8a:8f:d3:c5:e5:12:36:53:52:83:c8:48:f7:c0:17:01:
50:c3:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:07 2026 by rpki-client