Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File: Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier: RIVunW1FblnyKT9ZAth51gLyGSJN/1FVwZues0d44Fk=
Subject key identifier: A2:64:2C:6E:68:1B:17:72:53:88:00:62:AF:61:75:0F:8D:AA:9E:CB
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial: 01A0D011A2615281A6A40A4CB2C059B0B873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number: 154A
Signing time: Wed 23 Sep 2026 21:00:11 +0000
Manifest this update: Wed 23 Sep 2026 21:00:11 +0000
Manifest next update: Thu 24 Sep 2026 21:00:11 +0000
Files and hashes: 1: AAGe3xmEMwYBz4LTjNkftsQYcRI.roa (hash: H5MxTJchHq7g/9ds3SqpFphxMksUvLoDhqXB21YaWzg=)
2: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: 6Q7nDEClYESZJcequk7gRTiKmO8c8qdecCxHOWgDOXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:a2:61:52:81:a6:a4:0a:4c:b2:c0:59:b0:b8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Validity
Not Before: Sep 23 21:00:11 2026 GMT
Not After : Sep 24 21:00:11 2026 GMT
Subject: CN=a2642c6e681b177253880062af61750f8daa9ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ba:b0:e6:bc:79:30:ce:b9:4e:59:25:4c:52:
79:f6:f5:df:57:ed:34:59:f2:ea:44:91:5c:6d:65:
eb:c5:7c:ab:1c:65:35:94:a1:6a:6c:ac:0f:fe:33:
08:ca:75:ab:92:d0:37:81:f4:61:25:44:a7:c7:04:
de:e7:01:10:14:20:5e:e5:93:4a:56:1e:4a:88:65:
0a:c6:f5:a8:5b:c8:a8:50:d4:7a:ae:f2:c4:e0:67:
f7:b2:ca:c5:fd:c3:48:99:38:65:0d:5c:2a:88:1a:
4a:f5:7e:d1:b3:27:2a:55:39:d9:57:75:5b:fe:83:
ef:25:da:17:0a:19:ff:24:82:f9:ff:38:17:bf:67:
2b:ee:f4:64:dc:e4:af:60:01:b0:f8:da:14:e8:04:
f0:02:ca:d2:2a:43:61:e1:10:49:e6:5c:73:24:8d:
48:e2:9c:20:34:3a:ef:be:2a:4c:51:73:ed:e5:10:
c7:e2:18:58:a1:0d:2a:ce:83:ac:1b:d3:b8:6c:91:
fe:6a:24:50:5f:74:e0:8f:20:42:92:af:22:08:7e:
ac:86:b8:18:fa:12:8b:e3:d6:47:8b:55:12:b4:bf:
24:59:da:49:ef:9a:5b:30:f7:18:57:d2:c0:ec:92:
80:8e:71:5e:19:f8:9a:4e:6c:f4:bd:98:fa:52:6e:
19:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:64:2C:6E:68:1B:17:72:53:88:00:62:AF:61:75:0F:8D:AA:9E:CB
X509v3 Authority Key Identifier:
keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:50:2d:3b:ae:05:b5:4a:f3:62:f2:73:40:4f:e7:45:5f:3e:
0d:24:ff:bb:ed:15:9d:f4:3f:48:93:bb:69:c8:0f:e6:82:18:
1f:bb:69:bf:64:24:ef:c4:d1:7c:5c:c6:67:c5:1d:ef:b6:83:
dc:85:75:45:44:15:39:ac:f5:63:0e:2d:96:61:29:0e:e8:d0:
5a:eb:96:c6:c6:ba:8a:df:66:af:2b:26:5b:1c:09:d4:0c:b9:
c3:32:3c:cd:78:59:d7:5a:8a:75:96:f6:05:ae:ab:94:93:ca:
59:6a:65:e7:8f:e3:23:ff:72:5f:ff:a7:ac:92:53:50:7a:5e:
2f:36:5a:35:d6:c4:7e:07:46:ce:f9:36:e5:76:82:ad:32:b1:
79:f4:e3:57:38:3b:7e:46:55:cb:84:fb:ab:e9:01:45:50:95:
8c:b5:ba:8b:81:f4:e2:91:d3:d0:56:a0:b4:7a:68:04:e5:bc:
5d:47:f8:6d:b0:3f:93:2d:68:bd:29:b8:06:10:5b:91:88:e6:
ae:d7:39:22:ee:61:3f:fc:19:52:9c:6a:68:ba:b1:3e:2c:c0:
d1:f0:70:1f:bb:e9:fa:2b:32:01:91:86:1b:d0:10:ea:21:f5:
8c:dc:71:b8:8e:1b:ac:2a:09:12:0b:f0:07:55:f2:bb:53:ea:
f3:e0:1f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:43:33 2026 by rpki-client