Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier: GmQ3aMrcwTl2nSgQxRDqFHA9S5fFghlYIut2EkuamVg=
Subject key identifier: 8C:FF:EF:79:39:83:58:64:9F:28:1C:91:C9:C2:F2:FA:76:A2:62:57
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial: 019F1265A7D50213503BCFF86A07DA6E9B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number: 161D
Signing time: Mon 29 Jun 2026 08:01:19 +0000
Manifest this update: Mon 29 Jun 2026 08:01:19 +0000
Manifest next update: Tue 30 Jun 2026 08:01:19 +0000
Files and hashes: 1: HG9Ba2gI8LG--fPNC-99z5G5PR0.roa (hash: r0cs2bG9l/hgCfQjE51Q5Mu/ZRB68nj2PZBwDW/XxSM=)
2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: Gnv0dnE53L1sEB6NPpZ3j3TjeErzhnAwB+VeWqBfI7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:a7:d5:02:13:50:3b:cf:f8:6a:07:da:6e:9b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Validity
Not Before: Jun 29 08:01:19 2026 GMT
Not After : Jun 30 08:01:19 2026 GMT
Subject: CN=8cffef79398358649f281c91c9c2f2fa76a26257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:28:38:f5:ab:4e:e5:4c:f3:b6:46:38:a4:
b7:ad:27:a8:84:82:6c:fd:c3:89:65:5a:af:cf:c9:
42:15:6f:19:75:17:7d:3a:94:9f:a5:7a:bc:46:43:
e1:7e:7e:7a:bf:b1:93:2b:6d:c2:4d:03:8a:37:4d:
08:bc:17:f4:16:7b:fa:8d:88:77:76:d0:1d:3d:53:
df:6a:fc:3f:de:06:13:05:19:bd:7d:d0:c0:1d:64:
71:66:f3:ad:85:d6:28:12:a9:03:ba:e9:f0:f1:b1:
01:1a:4b:73:71:15:47:a9:e5:b9:19:80:ac:d6:86:
97:83:9e:b2:79:a5:a4:ae:ea:94:f7:f7:a3:36:ec:
fd:97:59:5d:17:8d:a1:3c:a6:5b:3a:e1:bf:9b:2e:
51:01:f4:7c:e6:f0:df:6e:32:d1:7b:78:29:df:79:
b2:03:5d:34:d1:c7:22:5e:20:84:46:6b:df:a9:d1:
b1:49:7d:f0:10:bd:94:bf:bc:bc:ef:d6:25:fe:83:
96:75:c8:43:18:8a:e2:02:5e:68:2f:ea:eb:ab:22:
81:bc:aa:2d:73:1a:69:21:25:12:74:55:be:c6:2d:
02:b9:f1:03:fa:02:be:66:d3:7a:4a:a6:02:58:7a:
a9:4e:43:ec:29:24:b8:70:e3:7f:23:c9:4e:2e:7a:
d2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FF:EF:79:39:83:58:64:9F:28:1C:91:C9:C2:F2:FA:76:A2:62:57
X509v3 Authority Key Identifier:
keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:aa:d2:5b:b0:70:01:3a:71:94:41:82:dd:c2:21:aa:6f:d0:
83:94:65:2e:35:96:56:d5:63:4a:ba:4d:53:45:0e:f1:45:b4:
39:dd:12:f0:79:65:58:dd:98:4c:9c:99:85:34:a3:7a:6e:36:
4e:5a:f2:45:72:37:f4:06:a9:3d:71:5d:c9:4d:73:c7:48:24:
ff:4b:fe:b8:b6:2b:c2:02:5a:ee:96:c6:d8:92:00:e1:1a:33:
82:c5:5c:74:14:53:bc:14:53:a8:9c:6e:2b:4c:6c:96:78:7b:
69:bd:ea:e6:c1:16:a7:b6:bf:45:aa:a9:b3:6f:d0:f8:40:e7:
1c:40:ca:2e:f4:41:ba:07:29:57:a1:ad:95:e4:05:8c:e5:09:
f2:54:e2:2a:4a:b0:4d:b7:66:75:18:3f:83:be:5d:1c:f0:95:
b2:75:f9:f2:0a:71:c1:96:60:c3:d4:b7:08:41:49:c2:5a:69:
be:4a:d1:bf:a4:3d:0a:c7:96:95:1d:50:02:6d:6d:85:ee:0b:
de:7d:5e:f9:b2:b5:e0:27:e5:63:8d:3a:da:97:9d:05:50:73:
26:b5:32:10:69:91:2b:1d:ab:21:89:7f:b2:f8:c7:5e:16:06:
dd:9b:7b:55:41:e0:d7:f7:e6:e5:6f:d7:97:a9:7e:28:59:87:
78:58:64:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:30:32 2026 by rpki-client