Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
File: AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft (raw, json)
Hash identifier: hwb7ogsKIml6Fye2IZck+UhNsJmV08IpACAoNZHtGpE=
Subject key identifier: D1:C0:06:07:D9:B1:CA:97:C4:3D:48:39:10:A3:07:EE:1A:32:2C:FE
Authority key identifier: 00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
Certificate issuer: /CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Certificate serial: 01A0D4942FDADD2CFC1F74C75A5C04C8D1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
Manifest number: 1330
Signing time: Thu 24 Sep 2026 18:01:16 +0000
Manifest this update: Thu 24 Sep 2026 18:01:16 +0000
Manifest next update: Fri 25 Sep 2026 18:01:16 +0000
Files and hashes: 1: AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl (hash: 1EnrJN+xOuv20wYondpepx42PydpInH7+59nQrrohZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:2f:da:dd:2c:fc:1f:74:c7:5a:5c:04:c8:d1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Validity
Not Before: Sep 24 18:01:16 2026 GMT
Not After : Sep 25 18:01:16 2026 GMT
Subject: CN=d1c00607d9b1ca97c43d483910a307ee1a322cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d9:6a:58:f6:5e:3d:71:ee:a3:bb:a0:7d:f8:
c2:15:ee:c8:d2:58:44:ac:91:d4:14:14:04:2a:4f:
b3:3c:e1:cc:35:34:1e:78:9a:ab:c8:c5:c0:0b:a0:
68:9e:1e:9a:82:9e:a0:d9:ff:57:6d:e7:4d:1d:15:
18:3f:4c:7e:7e:44:c1:3a:d2:74:1d:f2:34:85:c5:
c3:b9:1a:df:11:c2:a5:b7:01:b5:5b:d3:61:7f:9d:
af:15:8d:bc:8f:67:19:db:5b:ae:5b:aa:80:99:81:
d5:d7:8f:47:df:60:14:92:30:ae:22:d1:93:4f:f7:
23:dc:7c:33:e4:0e:c0:a7:39:56:8c:62:6d:d6:49:
26:77:5f:ca:d8:7e:42:32:0d:49:cd:3f:f5:51:8b:
16:41:95:a5:5b:30:c8:df:c8:62:0b:5e:a3:f3:26:
dc:f1:87:fe:da:7c:18:1b:0d:88:7d:69:ed:35:79:
df:64:7b:bc:81:0b:da:98:c2:7e:ad:bc:a3:05:ce:
3c:e3:7a:55:94:2f:74:43:72:85:fd:2e:68:dc:bb:
06:dc:27:d8:f6:aa:d4:14:af:4d:c2:53:76:7b:bf:
6a:20:ca:69:1a:ef:27:3f:a2:1d:0b:17:28:9f:0f:
bd:b5:93:1c:33:3f:3e:b9:ef:6f:29:c1:57:d1:38:
30:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C0:06:07:D9:B1:CA:97:C4:3D:48:39:10:A3:07:EE:1A:32:2C:FE
X509v3 Authority Key Identifier:
keyid:00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:27:ec:91:22:ca:0d:92:77:70:39:9d:6c:4e:ee:d7:d7:3d:
f7:92:f0:8a:0e:cf:00:22:43:83:43:84:f5:32:a1:c7:df:68:
42:30:4f:34:da:0d:6d:a7:5c:a9:61:dd:9f:18:f6:72:e1:6a:
d6:57:d0:9a:bf:26:28:2d:81:ad:a1:48:70:0d:c7:f7:52:ad:
d3:5e:6a:3e:a7:d7:d1:9e:11:c8:2b:aa:05:02:fe:d0:fc:28:
98:c4:ad:46:18:ce:d4:27:26:98:5f:96:84:00:59:5a:cf:c2:
53:80:5a:e0:8d:17:e7:40:62:ac:67:5c:d1:88:77:be:62:2c:
7d:79:9b:43:d2:2e:91:5b:f5:78:6a:08:9d:3d:29:ad:3b:43:
88:5e:17:1e:39:99:c1:94:13:af:1b:88:9e:97:92:c0:6f:21:
85:68:32:2e:9a:f9:86:43:84:11:6a:cc:3c:90:09:9c:b3:3c:
c0:c5:68:e2:b5:15:50:1d:4e:04:e7:8e:30:77:0c:ae:39:9f:
f9:58:2b:55:48:28:ce:4c:bd:45:57:f7:88:5b:1b:d7:a1:52:
82:c0:ad:a8:16:8c:23:ae:f0:0d:45:24:71:a1:8e:22:88:19:
9b:15:cf:6a:6f:2c:0b:59:6b:b8:03:41:f3:ed:0c:b6:49:96:
13:60:df:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUlC/a3Sz8H3THWlwEyNHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMDg1ODk0OTZiZjg2ZDJkMGY4ODc0Yjc2Y2FjODQzMDI1
YmNkM2IwHhcNMjYwOTI0MTgwMTE2WhcNMjYwOTI1MTgwMTE2WjAzMTEwLwYDVQQD
EyhkMWMwMDYwN2Q5YjFjYTk3YzQzZDQ4MzkxMGEzMDdlZTFhMzIyY2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NlqWPZePXHuo7ugffjCFe7I0lhE
rJHUFBQEKk+zPOHMNTQeeJqryMXAC6Bonh6agp6g2f9XbedNHRUYP0x+fkTBOtJ0
HfI0hcXDuRrfEcKltwG1W9Nhf52vFY28j2cZ21uuW6qAmYHV149H32AUkjCuItGT
T/cj3Hwz5A7ApzlWjGJt1kkmd1/K2H5CMg1JzT/1UYsWQZWlWzDI38hiC16j8ybc
8Yf+2nwYGw2IfWntNXnfZHu8gQvamMJ+rbyjBc4843pVlC90Q3KF/S5o3LsG3CfY
9qrUFK9NwlN2e79qIMppGu8nP6IdCxconw+9tZMcMz8+ue9vKcFX0Tgw4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHABgfZscqXxD1IORCjB+4aMiz+MB8GA1UdIwQY
MBaAFAAIWJSWv4bS0PiHS3bKyEMCW807MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFoWWxKYV9odExRLUlkTGRzcklRd0pielRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kMWMwNmEtZGZhNS00Yzc4LTk4MGEt
NmJlMmY0ZDI0Yzk2LzEvQUFoWWxKYV9odExRLUlkTGRzcklRd0pielRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9kMWMwNmEtZGZhNS00Yzc4LTk4MGEtNmJlMmY0ZDI0Yzk2
LzEvQUFoWWxKYV9odExRLUlkTGRzcklRd0pielRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgifskSLK
DZJ3cDmdbE7u19c995Lwig7PACJDg0OE9TKhx99oQjBPNNoNbadcqWHdnxj2cuFq
1lfQmr8mKC2BraFIcA3H91Kt015qPqfX0Z4RyCuqBQL+0PwomMStRhjO1CcmmF+W
hABZWs/CU4Ba4I0X50BirGdc0Yh3vmIsfXmbQ9IukVv1eGoInT0prTtDiF4XHjmZ
wZQTrxuInpeSwG8hhWgyLpr5hkOEEWrMPJAJnLM8wMVo4rUVUB1OBOeOMHcMrjmf
+VgrVUgozky9RVf3iFsb16FSgsCtqBaMI67wDUUkcaGOIogZmxXPam8sC1lruANB
8+0MtkmWE2Df3Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:54:21 2026 by rpki-client