Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier: GUpoHSXgLmqS68PWzz5eHWvSYD3JeWq6mVx7N/INXd8=
Subject key identifier: 24:01:84:CA:4D:ED:2B:79:35:FB:0A:2C:94:47:56:A4:A0:1A:FB:3A
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial: 01A0DC16B05A2A19950290D0B7BABC8B1771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number: 170A
Signing time: Sat 26 Sep 2026 05:01:09 +0000
Manifest this update: Sat 26 Sep 2026 05:01:09 +0000
Manifest next update: Sun 27 Sep 2026 05:01:09 +0000
Files and hashes: 1: HG9Ba2gI8LG--fPNC-99z5G5PR0.roa (hash: r0cs2bG9l/hgCfQjE51Q5Mu/ZRB68nj2PZBwDW/XxSM=)
2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: E4ABXIuVpwRAGpaFWkHTG/GQHQc1DU5Rz0/dH5dQd7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:b0:5a:2a:19:95:02:90:d0:b7:ba:bc:8b:17:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Validity
Not Before: Sep 26 05:01:09 2026 GMT
Not After : Sep 27 05:01:09 2026 GMT
Subject: CN=240184ca4ded2b7935fb0a2c944756a4a01afb3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:0a:0c:ad:e2:3b:00:2e:4e:87:2c:39:42:
a2:f9:86:07:67:5f:23:5f:96:c2:82:d9:b2:08:53:
d2:6e:92:6a:2b:a5:f2:7b:96:be:bf:f6:6d:b4:29:
24:65:63:b7:44:23:c9:f8:4e:dc:45:29:95:70:37:
80:cc:9e:c9:2e:ed:c3:02:cf:f1:6b:08:7c:4b:95:
b5:c4:09:e0:4e:2f:48:88:b7:a7:1e:5e:04:e3:5c:
63:1e:7c:8e:3b:95:f5:99:6c:88:e6:45:5f:81:ab:
90:30:17:16:fb:3e:65:1f:dd:7c:2d:3a:a4:06:38:
2d:f4:5c:92:17:bc:48:c4:0d:98:c3:7e:59:f8:78:
11:5e:45:3c:01:42:b2:3e:d2:98:67:31:fc:1e:40:
b5:1c:50:aa:ee:d4:80:3c:f9:5b:30:95:31:24:74:
b0:39:12:21:66:a6:2d:7f:6e:1f:23:5d:b9:59:c1:
29:38:b3:98:e4:33:39:7e:f8:b4:15:bb:69:27:ef:
a7:cd:4f:05:02:14:45:3b:be:b4:5e:5f:b8:28:92:
dd:e8:8c:b3:77:31:95:d0:9c:d2:f6:5b:de:bb:0e:
a3:ac:cb:34:06:35:c4:a5:5f:ed:93:00:7a:52:d1:
74:22:df:f2:66:81:a6:38:43:6a:d4:4e:dd:0d:25:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:01:84:CA:4D:ED:2B:79:35:FB:0A:2C:94:47:56:A4:A0:1A:FB:3A
X509v3 Authority Key Identifier:
keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:14:b7:99:d4:c3:d9:48:c9:48:d0:4a:f4:72:ce:05:85:57:
d8:2d:05:84:28:2f:75:8f:d7:49:51:08:d8:20:9d:78:36:82:
a3:66:23:19:ec:d2:6b:b7:dc:73:b4:0f:2b:2e:7c:4d:0d:2c:
f5:a3:f9:05:31:b5:8b:4d:90:d2:ad:98:5e:6f:f2:14:dd:57:
9a:24:9a:af:b8:be:1d:9c:70:4e:63:fd:b7:af:6d:c0:0c:ae:
26:66:fb:0d:e4:9b:3d:1e:5e:38:d8:55:89:5a:be:08:01:54:
8e:ba:4b:31:79:0a:f1:c1:16:49:a6:2d:17:a9:14:d1:25:4c:
74:77:b8:b4:69:59:78:b2:f6:04:cd:b7:42:7e:99:97:63:42:
12:13:3a:e3:cc:1b:89:9d:4a:4d:d6:e7:08:75:4b:01:17:24:
c7:54:4f:35:8a:2b:97:af:50:b5:4f:4e:36:65:d3:62:57:d2:
eb:cd:2c:c8:62:9f:db:1e:d2:72:bc:ea:7b:10:01:d3:e7:16:
80:79:66:c3:e0:39:bf:f1:e9:4b:f4:60:a9:1e:35:38:e5:06:
5a:6c:a1:87:55:80:b6:24:13:0a:36:28:c0:b4:86:23:77:fd:
2c:c6:4a:bb:3e:07:26:69:e6:7f:f0:68:c9:1b:cf:15:d5:6d:
3e:4a:07:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:33:39 2026 by rpki-client