Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
File: AahezixTn1hQ-nAfLUWiEn3IZ1U.mft (raw, json)
Hash identifier: GmIFnh5EWFtnD6PI4mhf/HvIfU50tL77KgOtGYYhC7Q=
Subject key identifier: 94:1D:30:75:52:0D:D2:BB:41:AC:BB:5F:EB:57:2A:DF:C6:94:38:A2
Authority key identifier: 01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
Certificate issuer: /CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Certificate serial: 01A0D34A5F39873FCC17845126B8E164DDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
Manifest number: 0D12
Signing time: Thu 24 Sep 2026 12:01:01 +0000
Manifest this update: Thu 24 Sep 2026 12:01:01 +0000
Manifest next update: Fri 25 Sep 2026 12:01:01 +0000
Files and hashes: 1: AahezixTn1hQ-nAfLUWiEn3IZ1U.crl (hash: st4G66bEyPBrXxDL9o9kytAZMNpPxdvt6+icA9QmYVo=)
2: MaRtt04jowFFk86_uuutN8hcKss.roa (hash: fZU76DAwqdxnrxuVOqFEOQy5RWDLvAlUDG+K/0ngLTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:5f:39:87:3f:cc:17:84:51:26:b8:e1:64:dd:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Validity
Not Before: Sep 24 12:01:01 2026 GMT
Not After : Sep 25 12:01:01 2026 GMT
Subject: CN=941d3075520dd2bb41acbb5feb572adfc69438a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:7c:d6:02:c2:73:6e:9b:47:1e:1a:b0:62:
88:3c:83:42:46:23:25:98:fd:05:14:19:f8:09:66:
0d:e5:24:c7:ea:16:06:bd:07:17:c9:b3:21:07:d5:
b3:9a:6b:6d:4e:7e:a0:38:91:cc:a8:49:1f:1c:60:
19:e2:4b:a3:12:25:10:8a:72:01:d2:2c:6d:70:c2:
0e:20:9f:33:7c:db:0a:cf:7d:90:44:89:ca:54:95:
29:50:fa:f4:92:f4:60:ab:f5:fb:78:e8:91:7d:7c:
04:b7:01:2c:52:9c:88:57:a6:1b:96:fa:6c:a1:bc:
58:d8:c6:dc:98:ed:56:ef:82:87:18:4f:2d:46:a0:
04:4e:83:43:e7:1e:25:5f:23:4e:f0:88:db:14:f0:
e6:43:8a:df:0d:4b:b4:7a:05:da:92:74:58:68:02:
17:a3:e0:91:54:43:ab:ce:49:ba:74:21:97:73:da:
73:18:d5:02:d6:c2:68:b1:57:c3:e6:99:da:a1:66:
56:65:e4:23:a9:2f:e7:57:94:d5:f4:a0:7e:f3:52:
e1:3a:41:54:2c:40:f9:f4:f1:5f:f5:71:02:9d:a6:
d7:34:27:11:a1:c3:8c:cf:e3:d8:6a:78:02:0e:29:
49:39:b0:f2:d5:19:f5:94:88:54:b6:d1:20:80:69:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1D:30:75:52:0D:D2:BB:41:AC:BB:5F:EB:57:2A:DF:C6:94:38:A2
X509v3 Authority Key Identifier:
keyid:01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:09:f2:32:09:3e:12:a2:e4:bc:d4:e1:c1:3f:5f:2a:d1:4c:
31:eb:74:84:3a:93:f4:3b:cb:60:32:fb:d7:89:45:b2:d2:7f:
6c:22:5c:f9:10:f0:69:84:cc:dd:2f:1f:f0:7a:86:5c:00:d4:
15:ad:d1:3b:f4:19:41:de:f6:ce:ba:94:9b:22:a8:3a:72:05:
50:e7:96:0b:e1:67:9b:91:c5:db:e1:b4:87:93:18:52:57:98:
41:fb:69:f4:f2:a3:97:d6:07:51:5c:24:ed:70:0f:6d:c4:49:
77:50:4f:56:98:43:c5:e6:aa:71:1c:16:92:71:3f:09:f6:e1:
90:67:25:af:7b:e6:56:d7:21:7c:ad:bc:b8:15:3a:99:7f:27:
95:7e:14:22:8a:f8:3d:74:d5:f4:bc:d6:40:ac:66:0f:6e:6f:
9a:2b:49:7a:7a:ab:57:9f:62:fa:0e:5a:f2:02:94:6e:2c:be:
5c:9e:f6:ed:6a:ea:ac:eb:fd:d0:e5:ed:16:20:d8:b3:49:59:
1d:5d:99:76:57:56:36:77:14:26:8d:58:b6:1f:e5:ec:1e:4e:
98:e9:6e:28:32:a6:6f:e0:57:69:b1:6b:42:54:7d:59:18:3f:
8a:a6:90:27:3a:dd:72:f6:83:73:38:22:19:f1:eb:6d:e3:66:
bf:e0:ff:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:38:20 2026 by rpki-client