Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
File: AhtowZzVXWul-GX7DdDW-MnZ49o.mft (raw, json)
Hash identifier: tPL4r9GW90d7VCsB1gRmHof9mj2GcQsdytO7xA4h6Ko=
Subject key identifier: 4E:B8:AB:0A:F5:B2:07:2F:03:3C:D8:90:97:D1:F4:C0:C4:F5:6D:03
Authority key identifier: 02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
Certificate issuer: /CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Certificate serial: 019E1E35D11CB473BCC5A24676D1A1F3E351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
Manifest number: 03BA
Signing time: Tue 12 May 2026 22:01:43 +0000
Manifest this update: Tue 12 May 2026 22:01:43 +0000
Manifest next update: Wed 13 May 2026 22:01:43 +0000
Files and hashes: 1: AhtowZzVXWul-GX7DdDW-MnZ49o.crl (hash: fFqZJlTk4nNj8uOArJZlAkGPdWhI0g3y6ps7BVnIzWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:d1:1c:b4:73:bc:c5:a2:46:76:d1:a1:f3:e3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Validity
Not Before: May 12 22:01:43 2026 GMT
Not After : May 13 22:01:43 2026 GMT
Subject: CN=4eb8ab0af5b2072f033cd89097d1f4c0c4f56d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:48:2c:dd:84:c5:93:d9:f4:44:91:64:7c:
a5:6d:1f:19:f0:ef:34:4d:90:8c:2d:12:21:82:29:
5f:cb:17:87:ff:e1:a3:cc:42:32:57:0b:bb:9e:b3:
a7:9d:c8:67:d4:3f:5b:4b:ca:57:78:25:8e:c8:46:
db:a7:71:9b:79:03:d3:fb:f6:ae:67:cf:db:a0:a8:
e7:96:66:48:2e:10:64:9e:c5:66:07:ab:c9:95:6a:
46:52:dc:3e:d5:bb:0f:5a:77:64:6d:53:11:e0:e9:
1e:27:fd:85:de:60:ab:79:6a:ad:72:97:6c:a8:db:
97:5c:31:ea:33:02:c3:8e:19:07:a8:83:42:05:5f:
fd:50:9e:16:1d:60:b8:db:b5:75:d5:41:b2:1b:ac:
cb:f2:d9:2b:9c:8e:31:77:e7:81:9c:e8:96:06:5f:
64:83:b1:bb:a4:e2:e9:26:01:ce:31:73:ca:b9:d1:
26:fa:5a:7b:a4:16:9e:3b:cf:4a:3f:70:25:5f:d4:
05:51:ba:76:25:72:c0:ae:72:77:b5:19:dd:5e:77:
c4:89:34:06:c0:fa:53:ba:88:03:38:31:70:74:73:
03:11:71:e3:67:c7:b8:93:96:ad:6a:d1:37:6f:f2:
b9:6b:4b:df:f5:5c:ac:2b:59:6f:0c:e9:2f:ba:b0:
17:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B8:AB:0A:F5:B2:07:2F:03:3C:D8:90:97:D1:F4:C0:C4:F5:6D:03
X509v3 Authority Key Identifier:
keyid:02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:19:d3:94:23:13:38:31:3f:38:8e:0f:0f:f6:2f:c6:17:b0:
c6:f1:6a:38:4e:4f:54:4d:77:05:e4:fb:55:a8:22:dd:9f:02:
d7:8a:20:b2:e2:3c:cc:c1:33:e9:b3:24:30:15:16:f5:b1:79:
63:3b:af:74:95:b3:2f:c5:d9:cf:c0:1e:22:1a:5f:df:77:b0:
1b:b7:2b:29:a2:a2:ce:a0:43:18:c7:fa:5c:eb:97:2b:5c:a1:
cd:dc:57:04:49:9e:d4:94:72:77:20:36:a9:2d:08:fe:96:14:
59:33:4a:3c:db:ac:63:ab:aa:7e:5e:d6:33:96:50:97:47:a9:
50:bd:e6:58:41:e7:11:b6:48:26:37:ae:1d:97:8f:3b:1c:de:
9c:1e:0a:c0:10:e5:87:22:5e:f0:47:b4:33:6e:c4:1e:aa:a0:
36:4a:74:e7:ed:e2:f3:ff:dd:47:48:71:78:68:b9:ab:74:0f:
99:30:d7:01:3f:87:a4:c0:f3:94:58:4e:46:7d:0f:a6:8f:ff:
53:51:ef:d6:6f:61:c5:4a:22:31:3a:52:d4:aa:92:31:35:e7:
92:c6:92:af:1e:d8:d1:72:e0:7d:83:dc:79:3f:b5:64:5f:5c:
db:8f:d6:84:a2:66:21:8b:17:e1:39:ea:c0:2c:a8:7f:64:46:
ee:0b:77:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:05 2026 by rpki-client