Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json)
Hash identifier: tA6yPufebI7tHimfkga5abyjmGXyMCECwbceTbfVtJU=
Subject key identifier: 25:27:E0:6C:B2:F3:8A:AC:05:1F:4A:88:85:93:E1:BE:70:1F:15:D0
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 01A0E1744750CC26508D80423B7D8ED57A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
Manifest number: 09F1
Signing time: Sun 27 Sep 2026 06:01:28 +0000
Manifest this update: Sun 27 Sep 2026 06:01:28 +0000
Manifest next update: Mon 28 Sep 2026 06:01:28 +0000
Files and hashes: 1: RYjmwwSeitE7YflGQ-BXVuEOw-Y.roa (hash: +mZHJEVEx50dKyXD00LKvcDkY+DRVgSg2B5Jqah+/wo=)
2: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: 05DBt0CvEj6WlwX8DDv0K0L9HgQX9krtDvkhgK3AkIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:47:50:cc:26:50:8d:80:42:3b:7d:8e:d5:7a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: Sep 27 06:01:28 2026 GMT
Not After : Sep 28 06:01:28 2026 GMT
Subject: CN=2527e06cb2f38aac051f4a888593e1be701f15d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:eb:91:fa:06:e1:44:13:63:81:c0:2e:e6:
a6:37:2a:e4:64:44:6f:d4:37:b5:3b:28:d3:10:93:
ac:46:c2:7f:e8:3e:b9:9f:57:c6:50:8e:a8:a8:af:
86:41:b2:a7:98:05:e9:2a:81:71:d9:63:91:01:bd:
b5:bb:76:be:6e:7f:9e:a8:ad:28:58:fa:3e:e6:b4:
a7:c6:8c:eb:30:0f:77:59:4d:98:61:d7:0c:8d:2e:
f5:28:a3:ee:f5:d9:57:6d:83:ac:24:e3:e2:f3:73:
43:a1:cd:6b:0e:45:2f:4f:b5:66:29:e5:eb:bd:62:
c4:42:59:88:4d:eb:0b:35:b2:00:b1:80:c2:4d:ad:
42:6a:d7:00:48:2c:38:2e:5a:84:34:c7:b5:49:a1:
cc:b6:6f:eb:4d:bc:08:3e:66:3e:98:3c:55:56:ca:
a8:2c:61:27:c3:5b:f8:37:ee:86:41:d3:eb:4d:5e:
fb:1d:eb:3a:cb:96:f1:bb:36:49:13:5e:f4:22:68:
20:b7:45:0c:88:f7:33:19:d0:90:4b:a4:c3:b9:48:
ff:57:69:86:d3:eb:45:53:d5:96:75:28:d0:8f:af:
4a:a5:96:3c:69:e5:24:8d:76:65:94:6d:14:55:e8:
38:17:5c:68:78:56:3c:7d:2d:ca:b0:8b:46:c6:5d:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:27:E0:6C:B2:F3:8A:AC:05:1F:4A:88:85:93:E1:BE:70:1F:15:D0
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4f:b3:ae:cc:57:46:4e:d8:b9:15:76:aa:27:c9:25:08:9a:
a0:65:10:76:e9:49:9b:8f:34:d2:38:9d:9d:d9:a6:7c:ae:63:
fb:ae:6a:fd:31:dc:84:e5:6f:7b:eb:67:23:db:8b:8d:f4:ae:
e2:fb:ba:7f:23:9d:e4:fe:30:35:7b:d4:3f:f9:8c:eb:3b:9b:
7f:d1:1a:3c:ea:ec:dd:13:ac:df:c7:f2:2f:4f:df:1f:fa:a4:
c1:db:3c:6c:a0:c8:aa:aa:9b:f1:ba:2b:20:05:be:e7:27:75:
41:db:d4:6c:3c:e3:dc:35:3b:f7:7b:d2:64:47:ec:0f:b0:c4:
e7:b5:4c:d3:c7:ae:70:5b:fc:dc:10:15:86:19:68:cf:d5:0d:
74:1c:02:eb:29:fd:a3:5d:18:01:67:d4:24:6c:95:e9:50:ed:
7a:87:3e:8c:44:88:1a:5a:b2:7d:c0:44:89:60:67:27:e2:5d:
5c:ab:dc:49:b2:cb:fb:83:43:9f:d5:1f:01:9b:75:ac:df:ce:
8f:02:3d:a7:30:93:a5:e1:88:b4:42:bb:93:dd:7b:aa:c9:61:
a7:d6:92:98:8e:20:1d:c4:2d:28:25:fe:c7:ed:02:54:e7:92:
87:84:79:ba:f3:9b:56:4b:77:6f:e4:5a:81:67:6c:e9:0a:29:
95:68:d9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:58:24 2026 by rpki-client