Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
File: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json)
Hash identifier: YUxTXdhRRoKPJ5fzcxpJQqe53y7lf9TJW3dHWjSwNpw=
Subject key identifier: 4A:75:76:8E:CB:83:DF:4C:67:F6:B7:75:33:F0:22:0D:E8:8E:CF:CD
Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
Certificate issuer: /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Certificate serial: 019D25F1CBD798F9D5AA10C87D07990111F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 17:01:36 +0000
Manifest this update: Wed 25 Mar 2026 17:01:36 +0000
Manifest next update: Thu 26 Mar 2026 17:01:36 +0000
Files and hashes: 1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: aULsqmzuJtx/gjHpH0yjymvk3ByjS9cMZY6MI9gsvuM=)
2: X3jNBw8Lh4wM_nlBrKCyZ_CiKpA.roa (hash: 0JM67ptoryLNsC+bVRRWV80kYyTFg1yBjH5eusPhq4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:cb:d7:98:f9:d5:aa:10:c8:7d:07:99:01:11:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Validity
Not Before: Mar 25 17:01:36 2026 GMT
Not After : Mar 26 17:01:36 2026 GMT
Subject: CN=4a75768ecb83df4c67f6b77533f0220de88ecfcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:8a:04:f6:73:30:45:54:f6:1a:0a:c7:59:
16:8b:ad:26:6d:a6:b4:e5:b2:da:e5:72:7c:64:e8:
2e:92:7b:ed:4c:3d:09:78:4d:98:63:ef:c3:64:c4:
ad:19:3f:fc:bc:37:f6:ff:ef:f4:21:13:64:3b:3c:
d8:7b:0f:ce:16:eb:ae:4f:75:08:f8:18:00:86:97:
e6:4e:3c:2e:b6:64:13:7b:c3:47:c2:9f:fa:41:cd:
98:51:4f:ab:68:50:2f:8b:1c:e3:ae:f3:48:e8:1d:
67:d6:6f:61:39:15:cf:95:19:71:11:6b:fe:eb:99:
3e:4f:07:56:3b:ab:36:db:0c:c2:e3:1a:ed:57:ee:
c5:12:aa:e2:e6:24:77:c5:2e:eb:9b:14:8a:0d:ba:
74:7f:e9:78:6e:46:cb:e0:f6:b0:22:38:14:b3:3b:
62:68:2f:5e:68:f4:ed:6a:fd:2d:7e:82:c7:42:f2:
b6:95:6a:8e:f7:40:4e:1c:eb:6d:c8:d1:03:cc:3a:
6a:83:e1:6d:74:ba:3f:a9:cf:3b:e1:52:bb:89:58:
5f:d1:24:04:ce:d5:8d:8d:18:86:d8:16:f3:de:5d:
33:3e:63:21:63:e6:7d:73:8f:5a:33:67:f6:c9:0a:
9a:06:54:69:f5:24:8b:a7:8c:fa:64:37:13:7f:b8:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:75:76:8E:CB:83:DF:4C:67:F6:B7:75:33:F0:22:0D:E8:8E:CF:CD
X509v3 Authority Key Identifier:
keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:35:90:3b:dc:6a:00:48:72:d5:b1:4f:ad:28:9c:87:12:c4:
9e:d4:e4:f5:b2:d7:3f:17:e8:10:ec:b5:20:5e:21:b3:e2:fb:
41:c3:e2:a2:1c:09:1a:55:fa:d7:16:6e:64:36:64:9a:00:ab:
5c:8e:a7:5b:c9:7f:2f:a2:86:90:96:1a:94:c8:12:f8:5c:fa:
ec:cf:f8:3c:c0:73:ac:bc:fe:9e:fa:96:3d:4b:d2:47:b1:08:
2c:e4:ba:9c:f9:33:70:4a:97:2a:40:ab:ae:51:de:33:0d:71:
0a:e0:e3:6f:d5:97:f4:9c:c2:17:87:0d:f0:4e:3f:bd:38:0c:
32:6d:58:0f:0f:68:bd:38:72:fa:cb:7f:6b:23:c1:c1:6f:3f:
9c:e8:ec:b0:06:9c:db:8f:bf:4c:c5:a0:59:c3:dc:62:4a:ca:
2c:22:8d:35:99:0c:b7:67:1b:af:ec:90:05:20:a0:af:44:08:
ca:a6:39:7b:fb:0d:3b:7d:db:c7:95:c0:c0:0b:00:4d:0c:b2:
d3:91:e0:0a:12:a1:20:f8:1a:32:57:d4:ed:69:c3:f6:58:94:
ef:6a:99:11:f1:52:00:a0:15:69:80:b1:6d:a4:dd:45:75:b6:
37:14:97:65:a4:ce:27:c3:e3:81:e3:bf:83:83:3f:c9:ba:4e:
bb:8a:da:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:53 2026 by rpki-client