Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
File: AhtowZzVXWul-GX7DdDW-MnZ49o.mft (raw, json)
Hash identifier: HNaJvU2ibiQX4ameSN3Imrvsapq2NthdAVVkHDZJ6yo=
Subject key identifier: 64:E5:87:36:91:9B:15:2D:FB:7F:63:C4:EC:C4:72:92:A5:84:92:AC
Authority key identifier: 02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
Certificate issuer: /CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Certificate serial: 019F92ED89A65FB0A06706E3062809DF0E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
Manifest number: 047B
Signing time: Fri 24 Jul 2026 07:01:08 +0000
Manifest this update: Fri 24 Jul 2026 07:01:08 +0000
Manifest next update: Sat 25 Jul 2026 07:01:08 +0000
Files and hashes: 1: AhtowZzVXWul-GX7DdDW-MnZ49o.crl (hash: jgXeN5kkfmm8Co4wokgQ/X7APQ6Fl4F0xW54QaCx38I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:89:a6:5f:b0:a0:67:06:e3:06:28:09:df:0e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Validity
Not Before: Jul 24 07:01:08 2026 GMT
Not After : Jul 25 07:01:08 2026 GMT
Subject: CN=64e58736919b152dfb7f63c4ecc47292a58492ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:96:a9:f5:87:f2:c0:e9:b1:05:cf:8e:85:c1:
ca:28:fe:94:a3:bb:04:04:3d:30:13:60:fa:f8:e3:
15:ee:b3:00:94:5e:f6:28:7f:48:d2:21:b3:12:cb:
62:a4:9f:70:b5:b4:c5:5b:7e:5d:8f:f5:d4:c3:42:
b7:23:00:e1:f7:cb:2d:1f:82:0d:78:42:eb:d7:0b:
55:af:ef:fb:7a:52:e8:70:38:51:c0:5b:af:09:28:
96:14:62:51:cc:75:4e:64:3a:fb:80:9f:53:ab:c5:
36:8f:3b:eb:1a:b3:c0:84:8f:a6:62:46:20:51:17:
81:21:ff:75:12:1e:a8:02:7e:ee:d3:c1:9a:ae:3e:
ee:aa:52:76:cd:2a:3e:21:98:72:38:bd:90:91:de:
b5:fa:81:c5:8c:1f:e5:70:69:57:96:58:7e:d0:67:
ef:40:b6:25:f8:f0:76:a6:08:60:ef:63:b2:7e:68:
d6:0a:ce:1b:d9:82:1c:e0:3d:8d:52:10:09:32:b8:
12:0c:ae:0c:f5:fb:fa:f6:f4:29:51:c3:0c:c9:d7:
93:8d:20:7e:e1:64:1e:c5:af:a7:da:fb:45:e5:6c:
f0:6d:85:f3:e3:74:b8:a0:e3:b6:4e:c6:ee:6e:27:
79:af:5c:56:f2:5d:31:63:2c:8c:ab:9e:24:74:7a:
29:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E5:87:36:91:9B:15:2D:FB:7F:63:C4:EC:C4:72:92:A5:84:92:AC
X509v3 Authority Key Identifier:
keyid:02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b4:21:8a:d4:75:4c:9c:e4:bf:e5:e7:89:44:26:1e:99:bc:
a3:61:90:a4:77:41:58:9b:1c:a1:6b:70:f4:a1:cc:f2:e4:b0:
ec:83:f4:d7:bf:23:04:e8:1f:50:71:0c:39:e9:77:f6:74:31:
ac:87:99:bd:b2:57:01:b6:fd:05:c8:db:2f:cf:4c:d0:a3:9e:
91:86:ea:09:a5:d7:19:1d:0e:76:29:80:a3:7c:ce:73:40:5a:
b3:23:ee:c4:f1:9a:4b:61:33:48:f8:ed:ff:cc:4d:c1:a4:4f:
77:a1:2c:00:1d:74:70:78:cf:c9:9f:6f:be:f9:78:81:2d:11:
3b:77:c3:d4:cd:1d:20:ad:6a:33:18:18:05:22:89:fa:61:83:
0e:dd:27:5e:67:bc:4f:f6:0a:7a:83:a0:af:71:ab:81:aa:60:
c8:ac:48:1c:14:df:76:1a:f1:b8:68:22:d1:ea:d9:45:c5:e4:
d5:14:df:69:cf:5e:28:34:c8:93:a2:59:d5:0d:11:9c:40:a1:
54:d8:ac:c1:be:cc:e0:86:e0:13:92:b0:4c:b4:f3:50:aa:c2:
0e:c2:33:e8:af:a9:21:49:8c:28:fd:e6:81:96:72:04:39:8f:
84:e3:04:5d:d6:02:ce:5c:2a:f6:29:bf:23:6f:f1:d1:81:cc:
06:f3:b5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:18 2026 by rpki-client