Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File: Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier: Ji+IyppdbK8R66LAagr4w2ln4MH3ANRCXW0VFh2/AtI=
Subject key identifier: 08:8D:04:88:12:BE:C0:2F:C3:CA:6A:FF:62:92:D0:2E:8A:32:82:D0
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial: 019F8F7F299774AD3EAC43798CED03EC5C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number: 14A4
Signing time: Thu 23 Jul 2026 15:01:43 +0000
Manifest this update: Thu 23 Jul 2026 15:01:43 +0000
Manifest next update: Fri 24 Jul 2026 15:01:43 +0000
Files and hashes: 1: AAGe3xmEMwYBz4LTjNkftsQYcRI.roa (hash: H5MxTJchHq7g/9ds3SqpFphxMksUvLoDhqXB21YaWzg=)
2: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: FBIPg8luV+2lgEraJYLjYF9L0FgbwQnDwxnJrcNQvS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:29:97:74:ad:3e:ac:43:79:8c:ed:03:ec:5c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Validity
Not Before: Jul 23 15:01:43 2026 GMT
Not After : Jul 24 15:01:43 2026 GMT
Subject: CN=088d048812bec02fc3ca6aff6292d02e8a3282d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:44:5e:72:23:17:2a:b7:8d:97:4d:72:8c:3f:
1c:00:17:a8:0e:28:a8:80:e3:7b:dc:b4:0a:17:58:
cb:f0:f2:e5:21:6f:44:06:b7:a1:79:1c:e6:3f:f4:
6c:c8:58:9b:11:fe:32:04:16:58:cd:a4:89:88:b9:
19:e3:ab:ea:36:62:ca:87:9a:b6:a0:ee:a3:7b:e5:
4b:92:df:69:00:00:09:73:93:f9:52:0c:ad:a0:2d:
93:6e:33:0d:90:1c:0d:69:6b:c7:3b:af:58:73:c5:
24:9f:1b:80:66:6a:91:8a:e1:e7:b1:06:ce:2d:9f:
53:75:1a:e7:3f:ff:a2:d2:f0:4e:4d:e3:0b:d2:e6:
d2:87:5f:4e:7d:1d:27:a5:73:a9:5a:d2:6e:df:17:
c5:fe:1d:02:46:d5:ce:8d:6f:d1:29:61:33:54:36:
2a:ec:cd:a1:20:57:af:95:0d:ca:d4:12:dd:39:11:
c3:40:ff:19:4c:25:b4:86:4d:f0:be:89:b1:33:57:
d1:b7:ac:60:6a:d5:83:f3:0c:03:a6:f7:53:84:e2:
ac:26:d1:8e:e3:38:03:1a:de:e9:23:c9:30:41:c1:
46:29:75:a1:ea:b3:39:25:e1:cc:70:76:9e:34:3b:
d8:f5:d3:f0:05:df:8d:39:19:09:2d:62:19:0a:b3:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8D:04:88:12:BE:C0:2F:C3:CA:6A:FF:62:92:D0:2E:8A:32:82:D0
X509v3 Authority Key Identifier:
keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bc:41:7f:cc:85:f8:70:c9:5e:00:ea:3a:37:24:14:7e:9d:
65:f7:94:44:62:e5:6c:4e:e3:cc:5e:90:9a:a2:a9:3a:ea:27:
ed:03:da:95:52:db:0f:cc:e7:e1:5a:b4:94:af:05:96:55:31:
76:e2:f5:f2:3a:9f:2a:22:d0:3b:13:c4:92:f7:57:4a:35:09:
ea:f0:e0:01:04:8d:e6:bb:6b:49:35:8c:a5:60:54:02:65:b5:
73:ae:57:c0:03:44:90:e1:fa:18:09:49:75:20:cc:e1:89:07:
40:1d:99:20:73:c9:57:da:da:36:c3:22:e5:3d:4e:8c:52:bd:
ab:37:e3:47:e2:39:98:83:96:71:3f:4f:20:a8:d9:91:5d:9f:
af:d5:f9:10:d4:25:93:06:de:ac:f4:c4:ba:e5:6d:fb:13:24:
d1:de:30:cf:58:9a:cc:3d:ed:c9:e4:9b:38:b9:37:f1:49:1f:
a7:d4:10:ec:99:f5:6e:0a:55:11:e6:23:63:f5:d9:c1:67:09:
df:89:82:23:1a:44:70:c7:3b:ca:26:90:06:af:04:b1:8c:e4:
d8:dc:b5:94:d4:c5:db:20:6a:63:9e:c2:4c:b6:da:8b:4b:10:
f9:1f:72:61:01:73:43:45:c6:88:67:78:46:19:de:c3:4e:d3:
70:0a:90:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:53 2026 by rpki-client