Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
File: AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft (raw, json)
Hash identifier: xsZlLWRcEPBBD5Upy5rZ67zrpl8C9jwPo3kU6O+k9QI=
Subject key identifier: 0B:57:BC:02:25:55:89:4F:8F:4B:EB:A6:8F:45:A1:4D:67:45:B2:FE
Authority key identifier: 00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
Certificate issuer: /CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Certificate serial: 019F90231560C771DA833CC9CFDB550F3975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
Manifest number: 1288
Signing time: Thu 23 Jul 2026 18:00:46 +0000
Manifest this update: Thu 23 Jul 2026 18:00:46 +0000
Manifest next update: Fri 24 Jul 2026 18:00:46 +0000
Files and hashes: 1: AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl (hash: D+Ds+R7NqcKvVh207mxJMzAGLp/xTIIky6CbK4zNCXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:23:15:60:c7:71:da:83:3c:c9:cf:db:55:0f:39:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Validity
Not Before: Jul 23 18:00:46 2026 GMT
Not After : Jul 24 18:00:46 2026 GMT
Subject: CN=0b57bc022555894f8f4beba68f45a14d6745b2fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:5f:8e:dc:e5:2f:3c:78:76:88:b0:b4:dd:
b5:77:7b:fe:08:4c:43:4c:ce:29:48:8f:95:05:a1:
a3:a5:f1:f1:92:ae:7e:d1:66:c7:0b:b4:df:8c:0e:
f1:c4:e0:22:17:30:de:ee:a0:e5:1f:64:47:5a:9f:
fd:63:0e:4f:d2:4e:75:de:ce:cb:bc:cd:0b:f0:e2:
5a:25:db:86:66:67:61:56:09:d9:33:11:ac:10:1d:
37:c7:db:f1:7e:44:fd:0b:5f:65:2f:27:05:e5:69:
7b:c6:95:09:fc:7b:a9:df:85:81:5a:e3:de:2d:d9:
6b:dd:b9:b6:cb:cd:2a:03:4d:6f:87:ce:28:f1:50:
58:2d:1d:f8:c7:0d:ec:7b:b1:9f:b7:e9:27:22:7a:
71:fe:e3:d7:68:fa:b1:3c:e8:41:79:0f:02:2f:47:
9e:5c:00:d3:af:20:1c:58:fb:ca:15:16:d7:f4:c7:
0e:bd:56:ee:14:06:d1:b1:44:22:4a:4b:5b:9a:c6:
16:36:43:a4:91:ab:be:58:5e:9a:bd:1c:20:a0:aa:
3d:44:fe:31:de:9c:f1:8f:6e:2e:28:73:52:6a:fb:
74:15:24:e2:fd:a9:08:fc:86:fd:12:96:af:d4:11:
0b:b0:b7:d9:6d:66:ca:a0:7b:40:97:ce:11:61:89:
9f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:57:BC:02:25:55:89:4F:8F:4B:EB:A6:8F:45:A1:4D:67:45:B2:FE
X509v3 Authority Key Identifier:
keyid:00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e3:5b:83:88:c3:af:0c:27:da:44:79:be:97:62:b7:90:fc:
a8:46:49:43:fe:5f:c4:a1:54:59:96:04:6f:27:5f:74:21:4b:
10:dd:ca:f7:f1:02:0c:94:19:41:41:3c:38:0b:0c:82:7a:68:
a7:ef:87:da:b4:f0:59:39:2f:4f:6a:0b:49:8d:35:4a:a8:76:
00:86:d7:5b:73:e2:f5:10:1e:ac:cb:a9:01:cd:14:a2:25:80:
38:f7:53:f0:39:25:33:ea:6d:31:5b:25:ca:a4:31:65:43:79:
36:f5:ca:e0:08:d0:6b:77:b2:f7:e1:8b:dc:2d:f1:ae:2a:af:
51:b0:18:d5:cf:0e:dc:98:bf:aa:33:79:39:54:12:ca:f9:a9:
b7:55:5e:44:36:e2:3a:24:bf:3c:d7:2a:76:b0:d5:ac:df:a1:
3d:fc:1b:cd:6d:59:6b:04:b1:c7:68:41:86:38:5e:98:1c:27:
c2:26:21:71:02:6c:5f:27:19:4e:ef:08:d0:09:dd:7d:c1:d8:
8e:6f:43:d6:4c:b3:b8:ec:98:64:71:33:0b:9e:b7:c3:db:95:
cc:99:1d:86:e2:16:64:cc:3d:90:ae:66:c8:7d:97:45:4d:44:
60:f2:9e:1a:b0:ec:a0:49:bf:0a:49:67:d5:08:fd:e8:89:cc:
88:0c:23:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:20 2026 by rpki-client