Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
File: AahezixTn1hQ-nAfLUWiEn3IZ1U.mft (raw, json)
Hash identifier: Swvng0RuVMqLI8n/RhzqJfvsnuSSYEu/4o7rLsnE5/g=
Subject key identifier: 7B:D4:29:ED:F4:7E:87:0C:16:93:FD:D6:D0:E1:AE:FF:1D:FA:F0:CA
Authority key identifier: 01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
Certificate issuer: /CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Certificate serial: 019F90C7709196090F7EB5DD6BF88730AA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
Manifest number: 0C6B
Signing time: Thu 23 Jul 2026 21:00:17 +0000
Manifest this update: Thu 23 Jul 2026 21:00:17 +0000
Manifest next update: Fri 24 Jul 2026 21:00:17 +0000
Files and hashes: 1: AahezixTn1hQ-nAfLUWiEn3IZ1U.crl (hash: Aw0Yk89vzGe0v0uO6CD5PKZ2SR82DPB3w8ncFxRay7Y=)
2: MaRtt04jowFFk86_uuutN8hcKss.roa (hash: fZU76DAwqdxnrxuVOqFEOQy5RWDLvAlUDG+K/0ngLTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:70:91:96:09:0f:7e:b5:dd:6b:f8:87:30:aa:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Validity
Not Before: Jul 23 21:00:17 2026 GMT
Not After : Jul 24 21:00:17 2026 GMT
Subject: CN=7bd429edf47e870c1693fdd6d0e1aeff1dfaf0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:f7:4e:df:34:5b:1b:da:6b:6c:47:2d:08:
62:5a:ce:1a:71:85:c5:1d:be:09:1b:be:5b:01:e1:
ae:30:76:e8:03:70:eb:07:ab:35:13:c7:02:03:28:
9c:43:f5:31:d0:87:3a:0a:66:17:e8:ad:b5:5d:81:
0e:07:23:74:e4:15:24:5c:e0:63:9a:2e:d4:09:fc:
af:e8:fd:0c:0e:e8:76:bb:6a:a3:18:4d:e2:29:1d:
9a:7e:8f:02:ef:35:be:18:e5:57:ec:62:db:ff:22:
9f:26:a8:d7:41:9e:d9:e2:67:30:0d:46:9e:5c:8b:
3c:c6:28:c2:06:70:4a:2f:17:97:03:9a:8d:4d:f3:
ad:d2:dc:69:58:ab:09:45:9d:a7:ef:ce:03:74:25:
7a:4b:c9:a5:5b:dd:f9:75:ce:1e:5d:05:aa:72:ab:
0b:61:c0:da:27:57:e4:64:f1:9e:74:ec:a2:82:5f:
c5:03:3b:3f:f3:b4:dd:2b:39:ac:d1:0e:90:c4:0a:
30:e7:e4:2b:73:03:cf:95:c0:5b:04:e2:26:e5:22:
4c:a4:65:71:68:52:18:c2:c8:66:3f:32:ed:43:6f:
15:16:55:61:da:7a:13:17:97:e2:3a:63:7a:54:de:
b5:d4:82:01:b2:05:17:7a:84:cb:26:72:27:bf:5c:
64:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D4:29:ED:F4:7E:87:0C:16:93:FD:D6:D0:E1:AE:FF:1D:FA:F0:CA
X509v3 Authority Key Identifier:
keyid:01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:45:51:7b:06:a5:13:29:ff:f6:b5:62:3b:5e:d8:3c:04:f1:
91:a8:3e:24:b9:7d:e9:fc:53:8c:35:17:d2:34:ad:04:af:1e:
f5:49:fe:af:87:3d:6d:aa:59:a9:1f:49:7e:7f:2a:5e:37:3f:
bb:62:28:82:79:e5:46:c3:ce:a9:6d:b8:25:75:59:b3:35:7b:
c6:0d:08:24:7c:2a:88:e5:3e:49:4d:1a:f5:45:63:1b:82:a3:
f2:8a:5d:87:b2:51:36:eb:45:f9:85:25:56:69:33:42:51:6f:
ad:b4:bc:58:8c:38:ff:a2:07:34:02:2c:db:b8:44:c5:2f:37:
9a:fd:cf:8b:a7:c2:ed:a4:1d:69:01:9d:20:02:40:14:e3:b6:
1a:d5:4e:b7:ee:1f:e5:02:e0:95:90:ea:de:44:fb:aa:17:54:
74:32:28:99:86:c1:79:4a:25:61:b9:39:b7:1c:16:98:2a:1f:
86:ba:9c:3e:0b:96:94:00:b9:82:ca:08:33:94:59:3b:5a:20:
2c:c3:c2:e9:48:c1:ba:a2:41:1f:98:1f:e0:60:2b:30:47:79:
bf:99:7d:0e:e0:80:78:10:61:36:af:c3:17:f5:66:dc:03:cf:
7f:73:d0:75:bc:8e:c8:a6:13:fc:22:5d:c9:5c:58:ed:33:db:
8f:d7:f9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:55:30 2026 by rpki-client