Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File: Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier: OA3+gQIHYbm4WylZBtGWrYEM2qP1OEejHEI+UD16GMc=
Subject key identifier: 92:F2:FA:DE:E1:9A:37:70:6A:22:EC:25:46:F2:B8:91:27:C1:BF:C3
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial: 019E1CB57CD63A35AC43D84246B778F3BB9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number: 13E4
Signing time: Tue 12 May 2026 15:01:56 +0000
Manifest this update: Tue 12 May 2026 15:01:56 +0000
Manifest next update: Wed 13 May 2026 15:01:56 +0000
Files and hashes: 1: AAGe3xmEMwYBz4LTjNkftsQYcRI.roa (hash: H5MxTJchHq7g/9ds3SqpFphxMksUvLoDhqXB21YaWzg=)
2: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: g2BAfPmiuBeT+lOlioJvDlSmVwKSeEEh+RdlUkG6uyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:7c:d6:3a:35:ac:43:d8:42:46:b7:78:f3:bb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Validity
Not Before: May 12 15:01:56 2026 GMT
Not After : May 13 15:01:56 2026 GMT
Subject: CN=92f2fadee19a37706a22ec2546f2b89127c1bfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f6:c5:bf:c2:d6:6f:59:5e:80:d7:d7:a1:d6:
2a:8d:0e:37:9c:3a:6e:e6:f6:d2:20:d4:2e:49:f9:
22:73:b5:31:d8:9f:2c:ac:ef:57:98:3b:a2:4a:8d:
ba:b6:96:15:ed:db:3e:ad:73:a6:e2:8e:47:3b:3d:
69:32:47:08:43:1d:cb:b9:c1:e4:f2:d2:aa:84:40:
71:a5:d3:0c:a3:91:f4:f8:80:df:ee:df:7e:db:bb:
6d:08:06:34:95:68:36:75:52:f6:f2:80:80:7d:20:
7a:7b:16:49:0a:f0:66:2a:cf:cf:53:79:61:d0:86:
3c:ee:5d:23:09:f5:61:7d:eb:5a:07:cd:54:b5:52:
da:96:30:1a:a3:87:60:8f:68:14:a3:57:97:c3:fb:
02:3b:4e:98:b8:51:0c:71:17:03:06:43:bc:19:0e:
10:94:30:df:43:9f:5d:8d:41:8d:2a:7e:e9:65:6f:
a8:1d:47:ea:ed:b9:48:d6:ac:e0:85:83:6d:75:a4:
c2:20:ea:a9:1c:d6:48:4a:cc:22:75:ae:1c:bf:79:
40:91:80:a0:77:85:6c:18:99:1a:50:06:eb:1c:6b:
9e:0c:28:11:9a:0f:76:c6:d2:47:98:b0:c6:88:d2:
1c:92:9e:6c:2f:7f:00:12:36:0e:43:46:3c:6f:a9:
fa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F2:FA:DE:E1:9A:37:70:6A:22:EC:25:46:F2:B8:91:27:C1:BF:C3
X509v3 Authority Key Identifier:
keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7f:35:09:2b:86:36:28:9f:f5:69:c9:cf:13:a6:a1:8d:b2:
f5:1d:1e:5b:ed:3f:77:8b:2f:d6:7e:f9:08:0c:f7:29:08:12:
74:3b:c0:a6:c4:ed:2c:f7:36:c2:2a:88:0b:d0:56:01:1c:33:
c6:4d:87:b5:3a:10:a3:55:3c:b8:74:6e:aa:c4:ba:0c:fe:de:
cb:d5:bc:ce:39:8a:e4:74:bb:62:0d:08:e7:0c:50:d5:46:19:
27:48:7f:9a:0e:1c:6c:06:0d:8c:01:67:52:71:7b:23:ec:71:
2e:4e:5f:3f:da:59:59:a6:10:ca:bc:78:e2:c7:3c:c9:c3:b0:
af:62:44:4f:7e:17:e6:95:e7:73:4b:eb:fa:e1:e0:0f:5d:0f:
14:2a:dc:f5:de:03:89:71:9c:12:4d:07:14:79:82:0e:84:bb:
16:34:1d:11:0f:df:3f:6e:2a:6f:de:8b:f5:68:51:19:02:6e:
b6:7c:09:38:df:94:59:ec:3d:d1:03:d9:37:53:6c:23:eb:17:
0e:ec:8f:7a:7c:75:0b:95:4b:9d:6d:6c:9f:13:2b:a6:06:ec:
55:9f:1a:72:d2:15:36:00:19:7f:10:05:45:39:04:32:12:84:
86:74:b2:ca:f2:a6:89:52:e8:24:6c:19:26:84:8e:e8:57:ec:
d1:c6:a1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:02:28 2026 by rpki-client