Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
File: Ahs-o17f3ROMFVBtdKdgIt03aUs.mft (raw, json)
Hash identifier: yzj47Y/yU3gtbqLE7MQI+oBnwzN2MouisyHfj/HzWqY=
Subject key identifier: 3F:3C:33:0D:34:CB:5B:92:DE:4D:C2:BB:D0:1B:5E:9B:16:D8:3D:AF
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial: 019D284E8427D3F805F04BF742D94AB247BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 04:02:07 +0000
Manifest this update: Thu 26 Mar 2026 04:02:07 +0000
Manifest next update: Fri 27 Mar 2026 04:02:07 +0000
Files and hashes: 1: Ahs-o17f3ROMFVBtdKdgIt03aUs.crl (hash: 1mJPIcUir0OjgQZl84FrCvsTUdxmMG/J+52qt301DdM=)
2: LBRMtk276o1fDtnMdAqhTW7DXC4.roa (hash: 0YIiI16RKFGdQ0JcFhz3zqT49nyQkj7P8gkQ5o32XYM=)
3: M8dYp-L4dw1v-tRfvEaBeetOZDM.asa (hash: BxKqO0ZY48OCWqUnkol0bWVuXrmCWGF4F2EIRoXKyLI=)
4: QmzS2ptv4L0wreFRKwR2b7sYT9o.roa (hash: V15c6ZmrAVOZnZkD5NcAPinTv/zGPeEWxtJ3s9KDwPs=)
5: Rj9rY8c-WTz58dRjWStkxywCLns.roa (hash: 2qqmCIzo+/ipPZRDGptoSNuyqwN9eUc4eLGE8JL6fME=)
6: T64D7DIdeVevp7C-fmZ9i_3HGBI.roa (hash: kO6AaVNTX79L37zwJju08wk0fWE2dJSQ0KHv71bE1XY=)
7: U8u1b5Pq3pRMcKbM8GicLTeR9Tk.roa (hash: R5sho8p6NKUCSWgu2hqUkQHKto75y0jfre83Hes2hwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:84:27:d3:f8:05:f0:4b:f7:42:d9:4a:b2:47:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
Validity
Not Before: Mar 26 04:02:07 2026 GMT
Not After : Mar 27 04:02:07 2026 GMT
Subject: CN=3f3c330d34cb5b92de4dc2bbd01b5e9b16d83daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:d8:e0:84:4c:91:f6:8e:86:fc:5b:8c:6d:
d3:f9:01:3a:7d:99:57:8a:81:ef:53:49:4a:9b:09:
fe:44:d1:15:47:37:5d:de:d5:86:30:7e:d9:a3:a4:
b7:ed:ee:69:29:f4:ef:d7:e5:d2:89:16:af:9d:f5:
9b:66:34:12:54:be:a1:9a:01:7e:bb:08:62:d5:0d:
25:b6:29:fe:9f:4a:74:4c:8c:80:c3:b0:47:ee:46:
a7:96:c7:29:50:d0:5f:94:8c:16:be:80:76:3a:f1:
84:c1:c7:d9:7f:27:01:ed:e5:3d:99:ba:c5:a2:b9:
ae:43:c9:bb:9d:df:9e:88:1a:0b:16:fd:2b:1e:d0:
60:25:0a:48:61:a9:3f:4f:7e:c8:bb:07:f3:2b:0a:
96:04:f2:8d:fc:3b:3c:d0:40:1e:62:88:8c:b1:4f:
fa:df:d1:12:a8:6a:a9:92:09:5b:c5:c8:0f:19:1a:
f2:ca:3a:35:9a:f0:36:ff:a3:1a:13:d7:64:d8:16:
b0:79:45:11:3d:5b:b8:38:80:ca:da:16:de:c0:97:
ed:ff:56:f3:32:a0:73:fa:ff:4f:c1:62:3c:87:d0:
66:a6:b4:22:2c:f3:5c:11:6d:26:39:e7:a7:59:17:
59:d4:a2:02:46:34:fd:f5:29:8e:67:43:2e:97:c2:
9d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3C:33:0D:34:CB:5B:92:DE:4D:C2:BB:D0:1B:5E:9B:16:D8:3D:AF
X509v3 Authority Key Identifier:
keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ea:d7:0a:77:d3:d3:7c:3c:27:76:88:2b:17:a0:a4:8e:57:
cf:9f:bb:ab:a9:6b:a5:ac:c3:00:d0:d6:d4:6c:1f:5e:06:43:
45:c5:83:2e:e2:ff:da:c6:e8:7c:65:5b:d2:19:4e:c8:02:32:
1f:24:c5:d0:64:ed:78:86:bd:86:f3:db:3c:a6:24:4c:cc:7b:
0b:82:d5:2e:87:93:a7:20:6e:9e:8b:08:28:37:a3:a5:db:db:
3d:47:12:54:40:73:c3:03:e9:a8:2a:3c:9e:e5:7a:68:5b:65:
a6:f4:8e:8d:04:71:0b:1c:41:2a:06:21:d2:96:95:5e:4a:d3:
c2:e1:26:87:37:2a:4d:02:65:30:e2:bc:1f:c9:e8:4f:9b:51:
c0:87:8a:ad:c5:77:e7:ca:2f:49:88:bf:e0:c2:e0:20:a5:f7:
7c:87:b1:b0:65:6f:8b:17:07:0c:f8:69:d4:26:fc:fb:8e:52:
50:8e:f0:5b:28:3d:1c:90:3d:e6:fc:48:f6:59:73:44:bd:65:
4f:97:4f:0d:4d:a3:4b:b3:c4:47:0b:c5:ea:f8:17:54:4c:a1:
a7:2b:61:7b:07:61:2f:37:f8:fe:ef:7e:34:1d:b1:b7:39:63:
5e:2b:80:c9:66:3f:d6:24:84:10:6d:56:30:b2:69:14:83:74:
a9:09:73:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oToQn0/gF8Ev3QtlKske+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMWIzZWEzNWVkZmRkMTM4YzE1NTA2ZDc0YTc2MDIyZGQz
NzY5NGIwHhcNMjYwMzI2MDQwMjA3WhcNMjYwMzI3MDQwMjA3WjAzMTEwLwYDVQQD
EygzZjNjMzMwZDM0Y2I1YjkyZGU0ZGMyYmJkMDFiNWU5YjE2ZDgzZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyPY4IRMkfaOhvxbjG3T+QE6fZlX
ioHvU0lKmwn+RNEVRzdd3tWGMH7Zo6S37e5pKfTv1+XSiRavnfWbZjQSVL6hmgF+
uwhi1Q0ltin+n0p0TIyAw7BH7kanlscpUNBflIwWvoB2OvGEwcfZfycB7eU9mbrF
ormuQ8m7nd+eiBoLFv0rHtBgJQpIYak/T37IuwfzKwqWBPKN/Ds80EAeYoiMsU/6
39ESqGqpkglbxcgPGRryyjo1mvA2/6MaE9dk2BaweUURPVu4OIDK2hbewJft/1bz
MqBz+v9PwWI8h9BmprQiLPNcEW0mOeenWRdZ1KICRjT99SmOZ0Mul8Kd3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD88Mw00y1uS3k3Cu9AbXpsW2D2vMB8GA1UdIwQY
MBaAFAIbPqNe390TjBVQbXSnYCLdN2lLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mODliNjQtODdiNy00OGY0LThiNjAt
YzMyMDRiZGU3NzczLzEvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mODliNjQtODdiNy00OGY0LThiNjAtYzMyMDRiZGU3Nzcz
LzEvQWhzLW8xN2YzUk9NRlZCdGRLZGdJdDAzYVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQerXCnfT
03w8J3aIKxegpI5Xz5+7q6lrpazDANDW1GwfXgZDRcWDLuL/2sbofGVb0hlOyAIy
HyTF0GTteIa9hvPbPKYkTMx7C4LVLoeTpyBunosIKDejpdvbPUcSVEBzwwPpqCo8
nuV6aFtlpvSOjQRxCxxBKgYh0paVXkrTwuEmhzcqTQJlMOK8H8noT5tRwIeKrcV3
58ovSYi/4MLgIKX3fIexsGVvixcHDPhp1Cb8+45SUI7wWyg9HJA95vxI9llzRL1l
T5dPDU2jS7PERwvF6vgXVEyhpythewdhLzf4/u9+NB2xtzljXiuAyWY/1iSEEG1W
MLJpFIN0qQlzGw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:53:17 2026 by rpki-client