Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File: AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier: tzH23RTky0HTIJaObCeWScfMDTbiPrId2ZBW8cFNkBE=
Subject key identifier: 15:A0:A7:2F:5B:39:EB:1C:0C:AA:E3:C5:65:DE:C4:17:DD:7B:0B:EE
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer: /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial: 019D28F2219D645148C714269DA4C0288F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 07:00:50 +0000
Manifest this update: Thu 26 Mar 2026 07:00:50 +0000
Manifest next update: Fri 27 Mar 2026 07:00:50 +0000
Files and hashes: 1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: AdEmAaNNsFPefB6KEyKh5f0eSGUZAVwbEhktG8gpwvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:21:9d:64:51:48:c7:14:26:9d:a4:c0:28:8f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
Validity
Not Before: Mar 26 07:00:50 2026 GMT
Not After : Mar 27 07:00:50 2026 GMT
Subject: CN=15a0a72f5b39eb1c0caae3c565dec417dd7b0bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1d:27:05:8e:a3:37:59:68:b1:6a:cc:c8:a4:
9d:c8:ab:9a:f8:8b:ea:fc:19:99:9d:92:98:6b:dd:
31:fa:f1:f3:8e:e7:43:e3:80:c2:7a:fe:9f:c8:9f:
b4:cf:4c:69:ec:8d:ff:3c:7c:16:1d:35:d3:bb:bb:
81:c7:2f:c3:cb:e7:8a:b0:52:69:c8:e3:0f:9f:41:
25:3c:c7:ae:e5:9d:d4:fc:5d:ca:cd:05:17:68:43:
a8:01:6e:68:a8:6a:0a:9c:ad:7c:c9:3e:c4:db:fe:
dd:ff:4c:c3:64:03:97:cd:a3:19:b9:6d:df:cf:35:
9b:62:5f:8f:12:c0:c9:fb:36:73:56:73:72:12:48:
69:f3:f8:ee:de:71:ac:d4:0c:80:43:8e:23:b0:43:
89:3e:07:f8:22:28:09:8e:4c:6f:d3:bd:2e:26:25:
71:33:18:b2:20:54:e6:21:e2:27:e6:33:90:6a:8b:
e2:3b:7b:df:fa:34:15:fb:df:98:8b:cf:f6:f4:3e:
8e:5c:7d:fc:73:15:49:c2:6e:dc:63:cf:aa:9c:18:
cc:99:3a:cb:1e:ca:5e:c2:d0:fa:02:c2:24:a4:90:
bb:8a:82:f7:fb:24:2a:b8:b8:5a:5c:7f:cf:14:58:
e3:99:cb:5a:d2:7c:39:8a:87:20:a7:11:3c:82:9f:
d7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A0:A7:2F:5B:39:EB:1C:0C:AA:E3:C5:65:DE:C4:17:DD:7B:0B:EE
X509v3 Authority Key Identifier:
keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:09:66:51:b2:8f:f5:91:8a:87:f1:7f:67:ee:f6:e5:df:03:
d4:b0:cc:2b:27:1e:f8:46:22:10:4b:a5:74:c0:a1:f4:19:88:
ab:de:b2:f0:5c:72:a5:00:f2:5e:05:1a:71:fd:e4:42:e6:22:
d3:d1:37:5f:74:d5:08:10:ae:21:37:31:e7:b2:96:bf:6b:2a:
90:6e:43:4a:28:ab:6c:5f:33:f5:c4:9b:93:37:49:ae:fa:57:
16:24:8f:f4:09:bf:5e:2f:22:b9:2a:e4:f3:2e:2f:21:b3:8d:
6f:09:3b:76:e4:70:90:ea:66:68:e0:59:85:a5:58:84:74:aa:
23:c0:77:f6:67:b2:d2:1d:73:5c:94:6b:ac:de:5a:a1:e8:bd:
91:3c:d6:bd:9a:e7:c5:00:01:e3:ed:77:24:cd:00:61:2f:e2:
97:8c:86:e4:4a:9f:83:26:a4:d3:18:58:a1:6c:ce:b9:03:51:
03:29:ab:75:35:1f:e3:33:76:b8:32:32:20:38:5d:ce:00:7a:
e1:fc:8d:f5:a8:91:6c:01:1b:51:95:4e:6e:28:3e:5c:4c:e5:
b1:8c:24:05:3e:b8:2b:85:09:0c:c2:71:01:d1:8d:a4:0f:7b:
03:7b:1c:01:a5:57:85:5a:57:27:81:5e:2a:87:e1:6a:db:a0:
86:1a:cd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:02:15 2026 by rpki-client