Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
File: AhtowZzVXWul-GX7DdDW-MnZ49o.mft (raw, json)
Hash identifier: xhyRxtMkUUob0o67Ptz7pHW8Aty4kULmpQS8DnHO4EA=
Subject key identifier: 49:E3:40:6E:EA:AC:07:83:AB:EC:2A:9B:06:E5:80:DA:E9:71:C5:F4
Authority key identifier: 02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
Certificate issuer: /CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Certificate serial: 01A0D7606BBA6F283FDABCDAB428EA18AD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
Manifest number: 0523
Signing time: Fri 25 Sep 2026 07:03:35 +0000
Manifest this update: Fri 25 Sep 2026 07:03:35 +0000
Manifest next update: Sat 26 Sep 2026 07:03:35 +0000
Files and hashes: 1: AhtowZzVXWul-GX7DdDW-MnZ49o.crl (hash: ZajAnn9crr2DihYiynTuZ+V2nqriQTISzjsfTUbdnPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:60:6b:ba:6f:28:3f:da:bc:da:b4:28:ea:18:ad:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Validity
Not Before: Sep 25 07:03:35 2026 GMT
Not After : Sep 26 07:03:35 2026 GMT
Subject: CN=49e3406eeaac0783abec2a9b06e580dae971c5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:df:43:d6:a7:6f:7a:0c:0d:80:33:38:ab:
2a:4d:bd:a4:b7:5f:a1:0c:67:09:ee:8b:4e:26:c6:
74:c5:9a:a7:01:50:37:e5:f3:1f:93:29:cd:21:fa:
31:aa:82:52:f9:f7:e0:1e:2c:54:bd:af:98:f6:e0:
ab:cc:80:de:7e:88:d5:0f:60:54:19:0d:4b:cb:09:
16:df:f6:87:b2:ef:9f:a1:84:25:2b:b9:82:20:80:
e0:21:25:44:ee:3f:76:b9:ab:a4:53:09:d8:e8:19:
16:42:70:2a:00:dc:d0:c7:b5:54:44:fb:8d:85:be:
09:f3:cf:d7:f1:be:37:1c:e8:39:1b:ef:f8:83:dc:
35:6f:1d:99:45:98:fd:06:0f:9e:f5:b3:c2:7a:a7:
c9:20:c4:5b:77:91:80:c5:38:75:f8:97:c7:fe:6e:
c2:fa:b8:a8:37:53:7c:59:e5:7c:e2:4a:1c:23:46:
8b:9a:16:c0:66:f9:37:40:40:24:87:80:1d:31:f5:
a2:4c:f7:d8:6e:4e:e9:8e:3e:a3:14:98:99:ec:6f:
6d:d3:3b:79:73:0d:63:79:b6:e1:74:5f:f0:ac:83:
6c:ff:18:cf:8b:83:82:4c:80:7b:ad:45:81:8b:66:
e6:c1:df:24:84:24:dd:ea:c9:6b:7d:17:5d:39:5b:
a6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E3:40:6E:EA:AC:07:83:AB:EC:2A:9B:06:E5:80:DA:E9:71:C5:F4
X509v3 Authority Key Identifier:
keyid:02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ff:31:7a:e4:c7:0e:90:37:d6:4a:94:24:ad:b3:db:0f:7f:
9b:90:e8:bb:40:f4:43:24:e5:11:5e:81:12:7e:bf:6e:0f:c0:
5b:e2:ee:df:ba:60:60:88:e5:46:cf:79:f8:88:21:a3:f2:90:
21:22:0f:b7:b0:b2:6a:5a:a3:0f:9c:b5:33:51:4e:d2:56:36:
21:5c:66:69:8c:00:a6:cb:69:d4:48:7e:cd:82:6b:cb:d4:b2:
b2:e2:0f:82:51:22:e5:08:f1:f0:d3:82:4a:f7:08:7c:45:b1:
fc:c0:ef:e4:73:fb:04:86:34:25:c1:b6:f3:a7:07:a8:f7:31:
d4:94:a1:2a:f5:75:6f:65:51:1e:0f:bb:c1:a7:0f:1b:23:77:
a5:32:fe:9a:86:d4:d5:94:66:5b:f8:28:a1:35:61:eb:10:c5:
e4:80:53:b8:56:67:66:c0:bb:ca:c6:f5:e3:bf:b0:47:92:8e:
73:28:f6:92:a5:6f:c5:63:bb:7b:85:cd:14:d0:db:68:13:52:
5d:28:b1:3a:a5:65:e0:2c:14:eb:c2:20:ec:9b:f1:56:3e:42:
4e:82:a1:87:13:ed:3e:d8:cf:1c:f0:15:84:81:89:ed:0f:31:
7c:2b:6f:17:b0:b0:bf:01:0b:3f:08:aa:01:97:d4:ee:59:20:
e0:bd:fc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:51:29 2026 by rpki-client