Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft
File: AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft (raw, json)
Hash identifier: ZagZm8C0UjuHyuTlA/HuT97ccW7rv6pr3WpIZM4fz90=
Subject key identifier: 44:6D:AC:B1:7D:DF:57:9F:B2:AD:DC:47:73:52:C5:BA:51:D9:28:3C
Authority key identifier: 00:76:AA:BF:4A:8B:16:33:E1:74:82:05:17:FC:53:C4:D6:48:03:59
Certificate issuer: /CN=0076aabf4a8b1633e174820517fc53c4d6480359
Certificate serial: 019F8F10F849BD10386691AA77D66D48CEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHaqv0qLFjPhdIIFF_xTxNZIA1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft
Manifest number: A7
Signing time: Thu 23 Jul 2026 13:01:21 +0000
Manifest this update: Thu 23 Jul 2026 13:01:21 +0000
Manifest next update: Fri 24 Jul 2026 13:01:21 +0000
Files and hashes: 1: AHaqv0qLFjPhdIIFF_xTxNZIA1k.crl (hash: l2yLeQQMPIXvpdmkoxLrXhSZgXUCJ6oZ15ZP6/IEVXM=)
2: SqRQ1Xc9dweEF_ibwrDDRt-xn2c.asa (hash: jq8t/kB2zpTJt0t5OI4bI1d8zvcp3dpQzTeAyEeb/IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHaqv0qLFjPhdIIFF_xTxNZIA1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:f8:49:bd:10:38:66:91:aa:77:d6:6d:48:ce:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0076aabf4a8b1633e174820517fc53c4d6480359
Validity
Not Before: Jul 23 13:01:21 2026 GMT
Not After : Jul 24 13:01:21 2026 GMT
Subject: CN=446dacb17ddf579fb2addc477352c5ba51d9283c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:61:27:94:98:de:49:86:6a:bf:c9:d8:44:96:
db:34:44:90:6b:28:06:32:a4:f2:3d:3f:31:b5:80:
6d:36:aa:ac:96:85:f7:6b:10:ef:11:6e:7c:b1:9f:
9e:43:3f:e7:95:ab:68:90:b1:b4:ac:f3:4b:46:3c:
5a:a6:f3:0c:88:25:3a:72:8a:bf:b6:d5:e6:24:5f:
22:8d:42:07:4b:0d:e9:30:ca:a1:a3:58:be:44:22:
f7:5f:6e:18:c8:c3:c0:b6:f1:6c:7b:b8:eb:e3:9d:
31:d8:6e:ac:2a:7d:cd:2c:31:ba:fe:88:13:a3:01:
53:7e:f9:31:f2:1f:f1:fe:f7:b8:70:10:e4:f1:bb:
79:ff:c6:84:e1:a5:2d:72:70:42:1d:88:73:8e:15:
37:93:a0:49:7b:48:77:1a:cc:44:0f:63:f8:96:1a:
3f:dd:a4:e6:e2:29:76:77:9c:19:13:4d:41:43:c0:
22:24:70:01:3e:75:e2:2b:0b:85:6c:69:8c:2e:7e:
90:7f:a3:69:ce:a8:92:7c:e6:4f:1d:3c:ea:5f:6a:
77:02:dd:4c:85:77:c9:63:ed:48:2d:91:24:a4:22:
d2:87:1d:af:b7:2e:de:b5:04:5c:94:ca:2d:95:f5:
3b:66:d1:53:2e:50:0f:88:54:35:46:b6:52:f8:59:
d7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6D:AC:B1:7D:DF:57:9F:B2:AD:DC:47:73:52:C5:BA:51:D9:28:3C
X509v3 Authority Key Identifier:
keyid:00:76:AA:BF:4A:8B:16:33:E1:74:82:05:17:FC:53:C4:D6:48:03:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHaqv0qLFjPhdIIFF_xTxNZIA1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f45106-2fc9-4183-88dd-7e2494f8c941/1/AHaqv0qLFjPhdIIFF_xTxNZIA1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:68:f6:bc:9a:c6:b7:46:a1:90:7b:0b:f2:c6:ff:44:41:7b:
10:16:f1:32:5b:8d:22:9e:70:dd:c2:68:be:05:2e:f5:1c:41:
e1:5c:53:d1:b9:7f:4f:97:1c:b3:9b:45:fc:ab:48:29:c7:c3:
59:49:2b:4d:f0:8e:18:45:a5:ba:e7:7f:89:b0:f9:39:20:34:
80:80:54:7c:bf:27:9b:9e:e9:a7:e4:0c:04:09:d6:6c:54:61:
3e:bd:3f:e3:c5:e9:53:26:34:2a:50:cc:89:53:e1:3c:1b:ab:
77:1a:54:96:e1:53:b5:3b:6c:f9:44:e4:52:ec:64:96:e5:c7:
5d:bd:ac:ff:f2:c0:b2:82:84:a6:a9:73:1f:f1:b4:6a:5c:ae:
e1:1f:c0:83:87:c2:e7:4c:54:4c:71:24:57:93:1e:8e:f4:ac:
31:c9:2d:26:2d:33:e4:c1:e0:cd:b6:59:a5:57:50:09:b9:51:
58:5f:90:81:f4:69:0f:f1:fe:3d:8a:a3:5b:39:cf:d4:53:23:
9e:d6:be:3b:58:94:b7:aa:1b:b6:2f:8b:40:a6:f5:25:5a:e7:
8e:a8:62:53:61:01:8e:74:48:1b:af:c9:15:fd:1d:d1:36:47:
5a:ff:03:4e:93:09:aa:7e:fd:7d:c5:c6:7b:af:5d:16:d4:10:
9b:cb:87:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:00:15 2026 by rpki-client