Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File: AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier: 3EGJ825caTguReh6LUX+d0EM29JiyUz5PRs1Da1VQfA=
Subject key identifier: 15:1C:70:DF:B8:61:70:C7:04:23:5B:AD:2B:0C:20:E4:37:57:66:EF
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer: /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial: 019F90FF44E5138BEB210B1EC750B9DA81E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number: 19C2
Signing time: Thu 23 Jul 2026 22:01:16 +0000
Manifest this update: Thu 23 Jul 2026 22:01:16 +0000
Manifest next update: Fri 24 Jul 2026 22:01:16 +0000
Files and hashes: 1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: ISKvKcnvS+bQkkzH9z6LiJSLlVTILi9bJeDjGKHvr3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:44:e5:13:8b:eb:21:0b:1e:c7:50:b9:da:81:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
Validity
Not Before: Jul 23 22:01:16 2026 GMT
Not After : Jul 24 22:01:16 2026 GMT
Subject: CN=151c70dfb86170c704235bad2b0c20e4375766ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f5:ab:25:ee:b5:88:18:f5:f4:70:44:09:06:
c5:40:41:a4:47:4c:11:78:19:58:44:eb:c6:44:cc:
9c:73:c8:d2:13:71:4a:ed:94:4f:bd:49:66:42:15:
2c:e1:7c:08:ba:09:8d:40:78:8b:0d:f6:40:66:55:
69:9b:b6:89:ba:48:c7:ef:44:34:b2:6c:03:2b:25:
c8:41:00:2e:94:58:9f:10:51:c5:58:84:6d:9d:b2:
de:aa:30:c7:92:a9:54:85:db:63:56:32:09:96:2c:
f4:76:70:ab:67:87:40:7b:00:f2:eb:78:e8:8a:89:
b3:8d:df:3e:9e:03:9e:e9:3c:39:93:ee:48:97:5b:
84:1b:41:87:bd:5b:ad:ae:d7:2a:c1:09:fb:88:12:
b5:fc:cc:bf:ea:d7:20:47:fd:ac:ec:43:64:33:c1:
3c:a2:df:25:ff:f5:4c:12:4c:ab:49:3f:ce:b8:c8:
7b:f2:22:7e:b7:7b:40:14:3b:f9:bb:0a:1e:90:ab:
3c:10:23:1a:4c:25:d6:02:1b:9a:7a:9a:a6:ee:08:
00:17:ad:30:6a:f8:6c:34:2c:e5:22:a0:78:9e:0b:
4e:12:65:e5:d5:ae:2f:23:99:d1:97:10:55:4d:83:
de:df:18:ac:58:6a:ea:30:4d:03:48:07:7d:50:ce:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1C:70:DF:B8:61:70:C7:04:23:5B:AD:2B:0C:20:E4:37:57:66:EF
X509v3 Authority Key Identifier:
keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:76:83:29:58:53:82:9f:ec:14:ff:72:04:48:e3:a7:98:67:
44:f4:ec:10:26:13:08:b7:10:5f:28:d3:24:7d:f7:0f:e1:17:
c6:c5:8e:d4:1f:49:2c:ed:56:61:22:7a:c9:a5:38:2f:ad:2a:
f7:ea:f8:b6:6f:f9:13:d0:0f:36:b2:66:67:86:92:32:f9:76:
b6:fd:0d:d6:ce:48:d5:38:61:f1:1a:f7:55:32:85:04:0e:02:
9b:80:30:78:28:6e:4e:3b:d0:af:ef:cb:dd:f2:0a:90:31:ec:
59:bb:89:fd:79:c6:d3:44:cf:18:7d:db:9a:a2:c6:67:77:74:
98:16:4e:29:2b:2f:2e:28:7b:c2:1f:f6:0d:a3:dd:71:1b:a2:
ff:dc:95:0b:0f:46:4a:a3:0f:f3:7e:eb:98:e5:58:65:21:a7:
cc:00:fe:23:47:ed:7f:5f:f5:4b:90:9f:cc:c0:19:2e:bd:35:
e2:4d:13:63:f0:d7:5d:e3:f6:0e:58:1c:bf:47:26:7a:f5:f7:
23:92:be:c9:d7:76:b0:ff:0e:1a:af:09:1b:c0:2c:d3:83:5d:
58:0e:a3:a3:21:12:c5:38:3d:bc:c1:e8:70:3a:f2:08:33:c5:
57:67:b7:98:7e:29:d2:c5:78:19:9f:1c:5c:51:23:94:b1:e5:
04:8b:a3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:33:33 2026 by rpki-client