Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File: Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier: QYpz1zF+rNK+ILjiNDbdXbdATlM9+kCmONddTNqz4sc=
Subject key identifier: 2C:96:1E:98:51:67:1C:E4:B7:58:6A:84:F3:31:84:EB:6D:BF:E1:B6
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial: 019D2B4E818CF551EBE6DA0EF0D105BB5094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number: 1367
Signing time: Thu 26 Mar 2026 18:00:58 +0000
Manifest this update: Thu 26 Mar 2026 18:00:58 +0000
Manifest next update: Fri 27 Mar 2026 18:00:58 +0000
Files and hashes: 1: AAGe3xmEMwYBz4LTjNkftsQYcRI.roa (hash: H5MxTJchHq7g/9ds3SqpFphxMksUvLoDhqXB21YaWzg=)
2: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: oJnHPO3Uj9/Yt73gO6l2YgQus+smCl52nqg4dxppz4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:81:8c:f5:51:eb:e6:da:0e:f0:d1:05:bb:50:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Validity
Not Before: Mar 26 18:00:58 2026 GMT
Not After : Mar 27 18:00:58 2026 GMT
Subject: CN=2c961e9851671ce4b7586a84f33184eb6dbfe1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:5b:f7:22:43:4d:12:03:56:ce:64:b5:a6:
c8:df:8c:a5:a8:63:bd:43:9f:19:6a:ab:cd:08:9f:
06:e3:2d:be:51:e1:9a:f8:af:9c:9f:3f:25:86:9f:
28:18:e4:5b:12:27:03:53:c6:15:6c:74:57:3d:fd:
bf:39:c3:e6:d8:fe:79:d7:37:48:2c:35:df:40:64:
ad:5e:b7:65:a1:cc:ea:b7:3d:e0:95:dd:e3:cf:82:
e8:9b:12:a1:10:cd:3c:7a:87:94:9f:d2:32:c2:18:
6e:af:7c:9a:1d:a9:bf:27:1e:34:0b:d5:c4:75:44:
1a:9f:ce:d0:0b:a2:d5:51:66:9b:0b:7a:2a:dd:29:
1d:3c:13:7f:3d:d5:02:d0:db:54:e4:5c:e6:dd:e0:
2d:d7:0f:02:cd:a2:64:50:e2:f0:49:1f:93:a9:b5:
2c:e3:c3:89:1e:28:81:0f:6f:7b:72:34:cf:fc:53:
5e:3b:9e:9a:11:6f:9a:1b:d8:bd:f3:b2:5c:e9:71:
ab:61:aa:85:d9:cf:04:bc:a8:56:78:4c:d1:d1:3a:
07:e2:cb:3e:04:67:85:01:16:e1:0a:8a:88:32:2b:
d8:22:84:8d:e6:68:56:ca:2e:ea:34:c8:cb:7c:e4:
87:00:46:0f:06:a9:26:f6:a6:ed:16:85:b6:5f:0c:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:96:1E:98:51:67:1C:E4:B7:58:6A:84:F3:31:84:EB:6D:BF:E1:B6
X509v3 Authority Key Identifier:
keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0e:bd:dd:9d:ef:26:6b:8f:e6:9e:91:f9:89:75:a8:73:5a:
ea:64:3e:43:ed:cf:61:5b:22:07:50:c0:2a:41:78:17:39:d0:
02:8b:45:69:a5:72:8e:71:f8:10:0c:61:b2:d7:34:10:4e:ca:
28:48:1a:c4:02:a8:3f:b0:5f:c1:28:cd:a7:d3:b6:23:c4:2f:
51:53:c7:83:23:70:fe:79:55:ce:02:20:21:1c:c8:fa:06:47:
12:43:55:59:16:d6:7d:ea:c2:e8:14:80:2a:c4:d5:f5:83:a6:
10:4d:68:09:da:f7:99:96:d8:64:af:ae:f2:d2:b4:06:ba:4d:
02:65:3d:82:0c:ec:44:73:4b:75:ac:50:03:9d:ce:48:e1:72:
c8:c7:ab:ad:f4:92:f3:9c:fa:e9:1b:b9:68:21:d0:6e:e8:8e:
52:b3:8a:4f:ee:5a:d2:17:a3:fb:e3:e6:aa:44:98:de:96:9e:
bf:7f:f4:85:2a:e7:01:f4:61:64:ca:d7:ad:82:ef:01:48:b0:
58:5d:0c:83:8d:0c:ea:54:53:84:66:3c:6e:d2:d9:5b:8b:58:
60:e2:a8:d4:31:ab:bc:39:55:5d:e6:c9:89:be:da:c4:e2:d5:
69:86:17:e9:e3:ba:e4:10:59:0d:0b:0b:84:a5:21:39:dd:e9:
bb:10:ff:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:22:14 2026 by rpki-client