Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
File: AhfGZs2iPpINFLkK6TY3EzUKrB4.mft (raw, json)
Hash identifier: PnFaMPuz0agiX+oJV3tB3BV3o9nt92yutyCSwPyocXs=
Subject key identifier: 0C:BF:53:A5:E0:EA:E1:5B:88:F9:CE:89:3C:FB:CF:E5:3F:52:7C:30
Authority key identifier: 02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E
Certificate issuer: /CN=0217c666cda23e920d14b90ae9363713350aac1e
Certificate serial: 01A0CDECECBC20B7784FC9A6D352354BD470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 11:00:51 +0000
Manifest this update: Wed 23 Sep 2026 11:00:51 +0000
Manifest next update: Thu 24 Sep 2026 11:00:51 +0000
Files and hashes: 1: AhfGZs2iPpINFLkK6TY3EzUKrB4.crl (hash: s6lWlSFdVdTv7OQvWofEJnS4+S74K/3EOVUE/2CQ4Y8=)
2: LbPyc4hAUlUzut2p0ZpxCw83HnE.roa (hash: cLTartZVu31Sy+PEywLeLASvzBKWyq6c9Am1NnMnkbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:ec:bc:20:b7:78:4f:c9:a6:d3:52:35:4b:d4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0217c666cda23e920d14b90ae9363713350aac1e
Validity
Not Before: Sep 23 11:00:51 2026 GMT
Not After : Sep 24 11:00:51 2026 GMT
Subject: CN=0cbf53a5e0eae15b88f9ce893cfbcfe53f527c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:a1:4d:8a:12:6b:f3:a5:ea:a8:f7:a1:1b:
e1:1b:03:19:32:95:0e:40:f6:dc:7d:27:40:0b:34:
f0:9d:09:db:93:e3:10:6d:88:4d:b6:42:fc:f1:bf:
27:d4:64:23:27:a5:01:fe:35:df:1c:11:0d:8a:d9:
5d:1f:a0:8c:c9:7c:af:b0:52:1c:26:04:14:44:c9:
e2:f0:05:b3:8d:d5:9a:8e:a6:c6:81:1e:6e:19:62:
19:78:c3:24:74:ff:2a:5a:28:49:c1:59:f0:0f:a9:
9b:71:b2:73:4a:97:61:5f:93:4e:79:58:c0:04:f5:
04:75:e2:ad:7e:0d:a1:0d:b3:23:05:17:c8:70:a6:
ea:c3:23:af:fa:8e:61:a2:fc:4e:a6:2c:97:61:b0:
3d:fc:7a:7b:f5:61:d0:01:16:af:48:7d:cc:92:2e:
13:67:72:7a:19:cb:9e:71:e5:66:54:e1:71:fb:24:
79:5b:29:b5:89:e5:99:c9:d3:f6:ee:df:77:22:7e:
e3:4a:20:a9:77:ce:0b:8c:3f:4b:61:b0:75:20:a9:
0b:f3:79:63:af:93:66:84:8e:7d:06:0c:16:67:d3:
78:3a:19:78:be:cb:90:87:6d:4a:06:3d:9f:7c:b7:
17:5e:4d:30:f3:a4:39:23:89:ad:5f:18:8f:ae:9d:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BF:53:A5:E0:EA:E1:5B:88:F9:CE:89:3C:FB:CF:E5:3F:52:7C:30
X509v3 Authority Key Identifier:
keyid:02:17:C6:66:CD:A2:3E:92:0D:14:B9:0A:E9:36:37:13:35:0A:AC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhfGZs2iPpINFLkK6TY3EzUKrB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/cfa0b5-e1a1-41ff-88cb-029715de4c6f/1/AhfGZs2iPpINFLkK6TY3EzUKrB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:15:e4:f9:fb:94:b3:4b:83:3f:7b:74:80:b6:98:79:b2:3c:
05:3c:fe:3e:74:7f:49:75:38:cf:33:7e:9d:d2:df:27:0f:10:
e0:fe:d5:6e:5c:ec:ef:31:54:47:af:71:08:63:02:93:28:aa:
a6:4a:a8:5c:1a:04:64:a4:54:b9:25:a1:59:63:77:1b:a1:ad:
47:d7:9a:46:b2:df:a2:81:60:21:c2:c1:e4:22:a0:79:73:8a:
5c:05:43:d5:09:55:ad:7c:91:a3:35:78:88:e0:a9:e0:f4:6f:
c6:5b:03:c0:f4:60:7d:7f:85:f7:65:2b:a4:5d:c6:11:1a:0e:
bb:ca:09:09:17:1c:dc:17:cc:9b:de:f0:8e:cf:5c:24:36:ed:
54:31:54:58:ac:4f:9e:d3:75:98:9e:8a:be:77:02:25:34:3d:
35:93:cd:04:b3:d1:23:9a:66:99:1a:be:6a:2a:6f:72:a2:b1:
dc:88:74:50:d2:24:d5:72:68:e0:91:2d:ad:f7:d5:7d:90:b9:
c6:81:3d:69:5d:5b:85:9f:84:ba:36:ba:fc:57:2a:cb:3c:25:
02:7a:95:f1:de:6c:34:de:ff:fd:ac:08:51:bc:cf:ad:a3:fc:
6f:af:ff:1e:f8:a4:d7:cb:f7:fc:e2:f3:2c:1e:6b:b7:45:2d:
90:23:f7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:20:52 2026 by rpki-client