Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
File: MAhC2wg32vMRozS3IjGOcLWIsAk.mft (raw, json)
Hash identifier: aodgtvPRd0ljwq3cmX1fepHwjGomX41TS5bNeF+08S4=
Subject key identifier: 2D:73:39:25:7C:55:C5:B5:5F:BE:35:38:F0:60:5D:36:C5:04:29:39
Authority key identifier: 30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
Certificate issuer: /CN=300842db0837daf311a334b722318e70b588b009
Certificate serial: 01A0DB72482877EF97E70D11D42717499941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
Manifest number: 1A6F
Signing time: Sat 26 Sep 2026 02:01:34 +0000
Manifest this update: Sat 26 Sep 2026 02:01:34 +0000
Manifest next update: Sun 27 Sep 2026 02:01:34 +0000
Files and hashes: 1: MAhC2wg32vMRozS3IjGOcLWIsAk.crl (hash: fUam9SNGs4jq4XVZINWZuvYB7AAL2OM45/uTolbQSr0=)
2: deef0kQTVkiZ-iP9kTGY1fZU_WA.asa (hash: qMJyhV5YvZg0IFpQ2HLYt65onYCb8vkHlaPqKePxLhw=)
3: fk98PFEV3mDBaZCuwYolMaoJs9Y.roa (hash: reF0fqPgy7vLy87CUH+mtBW2X+gVQB8QUdLo8VDTjTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:48:28:77:ef:97:e7:0d:11:d4:27:17:49:99:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300842db0837daf311a334b722318e70b588b009
Validity
Not Before: Sep 26 02:01:34 2026 GMT
Not After : Sep 27 02:01:34 2026 GMT
Subject: CN=2d7339257c55c5b55fbe3538f0605d36c5042939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:91:18:cd:7e:73:d8:17:8f:8b:b8:e0:df:
d5:f5:91:d9:00:69:b0:2a:62:9e:24:a2:84:60:7b:
17:c2:67:17:b9:6d:ef:a7:f8:9d:70:0f:1e:dc:86:
99:35:09:a7:a2:f5:e2:9e:51:bc:3a:32:bb:72:4e:
c0:a8:8f:b8:11:89:86:c1:28:8c:a2:e2:b0:c2:3c:
f8:4f:d5:5b:a8:3c:2d:45:6f:0e:aa:09:e4:97:38:
5d:7a:31:d2:10:c7:5a:13:9e:2d:7a:5c:da:11:18:
90:a0:17:a7:82:6d:d3:fb:78:5a:3a:2e:f9:a5:b3:
b0:d6:c7:d6:22:92:ce:9c:ac:1b:88:66:97:14:24:
1b:2b:2a:b2:1e:af:fe:1c:96:7c:74:c1:60:af:b2:
d2:4a:c0:bc:72:c4:c6:0e:99:27:32:3f:f9:ae:c5:
b6:75:cd:67:42:d4:39:da:1c:0f:5d:33:08:29:7b:
de:b6:af:b0:b8:15:9c:d5:ed:16:67:d3:25:7f:ed:
87:ae:2b:8d:7f:be:33:24:6d:0b:ea:74:0e:65:8b:
93:07:f6:e8:02:8c:bc:4a:21:02:30:64:b7:43:b3:
2a:0d:9c:74:f9:0f:4a:d7:f2:a9:00:5f:91:6f:ed:
be:64:74:4d:63:58:dc:f2:26:21:39:4f:5b:4e:9f:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:73:39:25:7C:55:C5:B5:5F:BE:35:38:F0:60:5D:36:C5:04:29:39
X509v3 Authority Key Identifier:
keyid:30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:6a:0b:2e:f4:dd:3e:8c:20:01:ee:b4:df:c8:1f:e6:1f:e1:
6d:ff:de:53:eb:3b:70:11:35:7c:53:3b:38:c5:54:3d:14:33:
42:7b:24:cc:37:15:52:5c:f3:94:12:87:e3:e9:21:07:56:04:
75:4f:38:90:3e:f2:4b:46:0b:4d:c5:73:03:c1:8e:f2:9a:ae:
f7:7c:a4:68:1c:fb:0d:7c:1b:95:9f:c2:99:67:85:4a:20:49:
90:10:42:f1:0c:cc:11:00:1a:76:ed:b6:0a:e9:f1:26:22:cf:
0b:a6:1d:25:ce:51:b1:59:d5:70:9a:1a:85:0b:63:15:ab:e7:
e7:93:d2:99:04:a8:3f:e5:04:69:b5:0a:bd:e1:69:3c:ff:12:
5d:eb:3c:9d:b5:58:85:da:a3:b3:57:4c:ca:9f:21:16:bb:a0:
c5:02:1d:64:fe:8b:f5:02:ee:61:77:c9:0e:a6:aa:2b:54:e9:
bf:05:ad:1f:b2:9c:e6:43:1e:0b:3d:3a:59:c6:99:e5:db:5d:
61:48:51:8f:53:e4:cd:02:e2:85:a3:b2:94:85:3c:57:fe:a0:
24:b0:b1:fc:b4:8a:5a:29:f8:d9:1b:fe:09:31:26:99:28:92:
0f:f1:f5:f5:0f:83:44:dc:57:90:28:da:a3:34:3f:f5:d7:87:
d4:ee:28:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:16:39 2026 by rpki-client