Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier: IdXswHWXRLbiKS8rjP0jaVS6qinVAGkww9Fzx4RuhCg=
Subject key identifier: C9:4C:5E:31:00:91:93:6D:12:CB:0E:FE:28:AA:78:C1:9E:3C:0C:FB
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial: 019D29CEA4948A16450389F7B6D454B09B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number: 1520
Signing time: Thu 26 Mar 2026 11:01:41 +0000
Manifest this update: Thu 26 Mar 2026 11:01:41 +0000
Manifest next update: Fri 27 Mar 2026 11:01:41 +0000
Files and hashes: 1: HG9Ba2gI8LG--fPNC-99z5G5PR0.roa (hash: r0cs2bG9l/hgCfQjE51Q5Mu/ZRB68nj2PZBwDW/XxSM=)
2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: hfVA9nOzgqTcLTMT9CDkQEJnwyc9FmVnSRTtlveLzOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:a4:94:8a:16:45:03:89:f7:b6:d4:54:b0:9b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Validity
Not Before: Mar 26 11:01:41 2026 GMT
Not After : Mar 27 11:01:41 2026 GMT
Subject: CN=c94c5e310091936d12cb0efe28aa78c19e3c0cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:56:06:fb:11:cf:06:22:0a:29:dc:73:94:
83:33:6d:ae:fb:03:f4:01:0a:09:75:98:ec:1c:97:
cf:b4:06:e3:2f:bf:f3:a6:1d:af:52:1f:12:ac:e3:
fa:5b:ed:7c:3d:24:ff:7c:ef:5f:ec:79:1e:fc:02:
2c:ca:86:57:96:90:65:27:e0:5e:9b:07:94:00:86:
da:fe:73:96:af:e5:0c:03:9d:20:41:a4:05:50:13:
ca:ba:4d:9a:d6:2f:13:4b:72:4c:b2:0c:21:9d:f0:
12:00:98:89:fd:ab:ce:0f:92:d2:3f:2d:8d:85:db:
9d:34:14:59:97:41:9c:a4:9a:e9:83:20:23:f6:7a:
ea:dc:b7:e6:c1:e0:b3:d2:97:ef:cb:e0:cf:6c:83:
2c:12:cb:cf:47:29:9f:eb:a7:9c:f9:70:db:08:55:
8e:27:a2:4e:46:15:e8:10:99:30:0e:2a:90:e5:f6:
0c:43:44:5b:ee:72:8c:26:b4:cd:62:55:66:7e:81:
b8:a1:03:53:ce:2e:53:65:4f:82:31:a9:d9:3b:32:
1d:6c:26:ad:c8:cf:7b:81:f9:a1:90:1e:55:71:85:
8b:de:6b:f3:b0:85:11:f6:69:62:aa:cc:ee:ac:66:
c1:70:bf:bf:db:5d:fd:9b:5c:dd:48:47:9a:bf:04:
9c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4C:5E:31:00:91:93:6D:12:CB:0E:FE:28:AA:78:C1:9E:3C:0C:FB
X509v3 Authority Key Identifier:
keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f2:08:d1:47:df:c9:cb:d1:74:32:c9:d4:94:f8:b0:84:35:
d7:df:20:da:00:2a:79:dd:34:0f:98:16:74:53:29:73:29:d3:
34:3c:80:c5:1a:bb:53:fa:95:18:ea:0c:c3:22:69:5b:f3:40:
0e:5a:9f:14:22:7d:33:1d:50:77:6e:5c:2f:80:70:64:3a:3b:
62:4a:ee:ff:c4:44:18:a2:ad:7d:9e:04:83:3d:e8:f3:1b:12:
13:e4:8d:b4:4b:bb:fc:92:bf:40:30:e4:08:fb:76:b2:cd:1c:
2a:38:a2:c0:3e:e3:20:ec:39:5d:ff:70:04:38:4d:cd:88:7a:
2a:a6:f2:94:92:90:7a:20:39:43:12:ad:56:99:db:60:16:1c:
4a:78:08:e0:bd:0e:90:34:e9:c0:f9:93:2d:b2:3b:a8:d4:dc:
ad:b9:b9:a6:e7:a8:07:8a:96:eb:e9:50:d8:31:69:11:91:b5:
c9:41:54:07:e0:55:b6:5c:e8:4b:74:95:93:03:3b:ea:31:6e:
1f:34:c5:ec:c0:eb:79:00:3b:82:0e:c1:3c:71:ce:0c:ae:16:
4a:61:b8:92:92:cb:a8:72:11:a9:83:e3:6f:46:22:24:b6:c7:
92:d4:52:8a:ec:d4:29:75:73:4b:01:4c:c5:50:9d:e0:ef:8a:
2e:db:81:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:31:56 2026 by rpki-client