Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
File: rAhSr1qOQ2stTacukrZBFOH00V8.mft (raw, json)
Hash identifier: Nxf6ccpHGHuRzva+Lw55y+ID55h50TMCNj/bNYPjLuM=
Subject key identifier: 29:A6:12:74:6F:2E:8E:60:34:6D:43:A8:B4:37:DE:C1:E6:E3:8D:4A
Authority key identifier: AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
Certificate issuer: /CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Certificate serial: 019E2A39391CECC2E3F660C2D796A90FEA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
Manifest number: 0889
Signing time: Fri 15 May 2026 06:00:53 +0000
Manifest this update: Fri 15 May 2026 06:00:53 +0000
Manifest next update: Sat 16 May 2026 06:00:53 +0000
Files and hashes: 1: RYjmwwSeitE7YflGQ-BXVuEOw-Y.roa (hash: +mZHJEVEx50dKyXD00LKvcDkY+DRVgSg2B5Jqah+/wo=)
2: rAhSr1qOQ2stTacukrZBFOH00V8.crl (hash: uNRL0j2Ysu9FTkqa3i+bD/04zE2T/Oi+McIjjnUWIJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:39:39:1c:ec:c2:e3:f6:60:c2:d7:96:a9:0f:ea:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0852af5a8e436b2d4da72e92b64114e1f4d15f
Validity
Not Before: May 15 06:00:53 2026 GMT
Not After : May 16 06:00:53 2026 GMT
Subject: CN=29a612746f2e8e60346d43a8b437dec1e6e38d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:11:8c:21:57:d3:c0:3e:ee:8b:e1:95:70:
2c:36:1f:9b:64:6f:f8:0d:58:87:41:ae:db:0a:31:
cd:c4:94:ae:b3:7f:29:ce:f3:21:13:7f:7b:0a:14:
6d:77:57:9a:d4:85:e8:fc:ab:8b:12:f8:3d:8d:57:
8d:6c:94:11:96:bc:b8:7b:fb:5c:2b:ba:e7:4e:12:
bc:39:f5:20:8b:f9:50:0a:a1:20:48:a6:f5:d5:b0:
6b:68:22:c4:08:5f:5a:63:17:ad:ea:2e:fe:15:87:
47:07:69:84:da:4a:3e:55:3b:f7:5e:e5:f5:81:6d:
c5:bf:e0:cc:7b:9a:c3:c9:d5:71:c7:6d:73:07:7d:
7f:d3:51:0b:b4:bc:b4:3b:4f:90:d9:2d:68:6e:36:
d1:43:8b:c5:e8:b5:54:f9:fd:c1:30:2d:ea:c3:cc:
83:04:9f:5f:c2:88:e5:99:92:e4:7e:8b:f1:2b:9b:
98:d9:08:f6:0b:44:c4:2a:ab:55:1e:21:45:14:52:
54:6d:a6:10:45:fe:fb:1c:89:5d:69:3e:1c:6a:5f:
b0:c5:f0:c0:00:10:94:64:81:28:86:bb:6d:9e:1b:
8f:15:ab:0e:91:72:19:70:5e:d7:7b:e5:f4:97:e3:
c1:d3:14:a3:cd:28:1c:6e:50:57:ab:00:b2:5e:e8:
a9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A6:12:74:6F:2E:8E:60:34:6D:43:A8:B4:37:DE:C1:E6:E3:8D:4A
X509v3 Authority Key Identifier:
keyid:AC:08:52:AF:5A:8E:43:6B:2D:4D:A7:2E:92:B6:41:14:E1:F4:D1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAhSr1qOQ2stTacukrZBFOH00V8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4dbcb2-3a96-4817-9971-5007dde35045/1/rAhSr1qOQ2stTacukrZBFOH00V8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4b:12:e7:2d:3f:31:fc:cf:b9:c3:ad:c9:42:30:97:cc:9c:
0b:4e:e1:d1:b0:6c:81:01:4e:64:26:5e:29:b8:17:b7:11:39:
32:2d:cf:a3:87:22:56:0b:aa:ca:52:e7:15:ee:18:29:59:d7:
99:cb:e6:e8:d5:40:7c:8d:10:f5:9f:ee:a7:21:db:52:1b:6c:
54:74:2e:c6:79:09:c6:db:85:11:a2:2e:e9:b8:b1:27:e4:2a:
bb:c1:36:ed:ec:08:f0:36:ad:1b:a8:d7:45:c6:a9:ca:d2:d1:
cb:03:44:51:8e:d9:49:85:a6:4e:c3:d0:ab:e7:7f:ff:1f:ce:
34:13:e8:5a:61:8a:2d:a5:8c:79:a8:98:e2:d5:64:cd:f9:87:
bf:27:33:0b:89:60:ef:2b:3e:2f:e3:38:87:b9:1c:fd:55:93:
0f:ab:ba:81:59:1c:d9:33:5e:1e:08:2b:73:71:3d:f3:0e:00:
ad:de:07:be:c1:90:d3:ed:90:b1:f5:84:f0:0d:ba:8a:ee:85:
d6:42:72:1b:59:ab:b3:67:e9:57:43:7f:d8:10:cf:f3:fe:c5:
3e:2c:f9:36:52:32:e6:1b:e7:2f:97:0b:5f:bf:29:6a:26:cf:
2b:fd:34:ac:2d:da:19:71:2f:47:1f:43:e5:2d:21:74:c8:50:
90:f2:fc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:08:13 2026 by rpki-client