Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
File: AhtowZzVXWul-GX7DdDW-MnZ49o.mft (raw, json)
Hash identifier: AR2+rYgUiPZ/2nt9dcVbanKxR+pecCUPO8PMdXf31eI=
Subject key identifier: 8A:37:9D:33:8D:3B:31:31:BD:07:4D:71:E8:E4:EB:6D:A6:8D:BB:D4
Authority key identifier: 02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
Certificate issuer: /CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Certificate serial: 01A040BC1B79BBA61FEEE02EB0997DD5252C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
Manifest number: 04D5
Signing time: Thu 27 Aug 2026 01:01:04 +0000
Manifest this update: Thu 27 Aug 2026 01:01:04 +0000
Manifest next update: Fri 28 Aug 2026 01:01:04 +0000
Files and hashes: 1: AhtowZzVXWul-GX7DdDW-MnZ49o.crl (hash: 8O9JshfGtct1JJTCurWWgzk2yT316cCpiFPiD8TeG/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bc:1b:79:bb:a6:1f:ee:e0:2e:b0:99:7d:d5:25:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Validity
Not Before: Aug 27 01:01:04 2026 GMT
Not After : Aug 28 01:01:04 2026 GMT
Subject: CN=8a379d338d3b3131bd074d71e8e4eb6da68dbbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:06:4e:c8:ad:23:0c:93:36:7a:38:2e:61:3e:
65:7c:45:8f:38:62:85:80:8e:ed:7e:6a:62:20:fe:
2f:b3:7b:bc:ff:e1:6a:e6:4c:66:9b:58:e5:e8:2f:
b8:f6:ae:7f:10:e4:54:e0:7f:ec:ac:b7:f7:95:e8:
af:a0:bb:0e:d9:cf:95:2a:c0:d5:5d:d5:d5:17:5c:
cb:cc:91:39:55:36:eb:11:4d:e0:a7:75:27:08:6e:
21:50:7d:08:25:36:5a:1c:1c:a2:60:ec:8d:a9:16:
af:70:c0:60:d3:69:40:a7:70:9b:fe:4d:0b:ce:68:
8f:2e:35:e3:a4:dc:3c:9a:18:2b:00:0e:4e:b1:7e:
35:be:98:6f:b8:e0:db:f7:9d:c2:f2:22:ba:aa:1c:
4d:74:d8:9c:1e:16:96:cd:be:c8:4e:ce:0b:c2:ba:
13:3c:80:ca:24:34:af:5d:be:73:84:00:8e:94:30:
36:2e:c7:8b:62:55:71:8e:13:73:1e:4b:a4:f6:20:
8a:22:ba:19:f9:c6:56:30:54:2d:20:bb:0d:07:d0:
4d:45:b0:ca:fd:73:82:18:02:68:37:d0:0d:bb:79:
f6:b7:94:38:d4:cf:5d:53:73:0c:5f:04:5e:7d:5d:
e6:a7:9e:c9:48:fc:86:03:f4:1d:fd:44:df:0a:d2:
c1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:37:9D:33:8D:3B:31:31:BD:07:4D:71:E8:E4:EB:6D:A6:8D:BB:D4
X509v3 Authority Key Identifier:
keyid:02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:66:26:61:ae:d0:d0:b1:9f:af:44:c3:31:cf:e5:3a:7e:8e:
19:4b:4e:ee:bc:bc:c1:58:3d:10:46:30:82:5a:12:3a:18:47:
6c:ec:86:37:ff:2a:8d:d0:5a:3d:55:de:cc:b4:dc:ba:df:12:
cf:e8:72:d5:2d:45:fd:da:e6:bc:89:49:4c:26:f3:f7:0b:ce:
df:6b:8f:58:ca:d3:5c:a0:02:f5:ff:87:3e:01:db:02:a1:c6:
85:59:57:5a:71:8c:03:76:07:59:5c:56:68:3d:f2:6a:36:c4:
77:b4:99:a2:58:09:8a:7e:73:a4:c0:83:ba:25:d1:1b:09:58:
36:26:d9:04:34:57:54:89:08:e9:f4:56:65:1a:82:e8:82:4c:
03:da:56:79:f1:98:51:8f:18:46:a3:43:e1:60:94:43:bb:f7:
1c:ea:2e:03:10:25:24:e3:7e:6b:d3:3b:f5:76:a5:93:00:41:
e5:49:41:72:d5:50:ff:a5:6b:98:cd:af:87:d1:be:b3:90:65:
b8:d2:25:16:48:1b:84:48:60:bb:a0:80:ff:c6:c7:67:6b:2f:
73:8c:c7:35:87:90:61:05:4a:0e:a5:f4:f5:b3:1e:41:9c:0c:
33:8b:2e:f5:d2:27:ec:e2:76:d8:37:aa:34:f0:59:08:3f:18:
d5:36:dc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:22:29 2026 by rpki-client