Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier: 6xN08xn/0YUghP8r7HXOHUAkF2EAqQeVq/i5sOnCy6c=
Subject key identifier: DD:E9:64:20:C0:9A:85:B4:98:DD:E1:AA:D7:BC:7B:D9:CA:7C:CD:6F
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial: 019D3941137F86F114DD8F1E0AB6F3A8712C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number: 1528
Signing time: Sun 29 Mar 2026 11:00:59 +0000
Manifest this update: Sun 29 Mar 2026 11:00:59 +0000
Manifest next update: Mon 30 Mar 2026 11:00:59 +0000
Files and hashes: 1: HG9Ba2gI8LG--fPNC-99z5G5PR0.roa (hash: r0cs2bG9l/hgCfQjE51Q5Mu/ZRB68nj2PZBwDW/XxSM=)
2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: i07WiklpnJjeyDAeKOk1jUS7xMDKlucpp8DCjj55CQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:13:7f:86:f1:14:dd:8f:1e:0a:b6:f3:a8:71:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Validity
Not Before: Mar 29 11:00:59 2026 GMT
Not After : Mar 30 11:00:59 2026 GMT
Subject: CN=dde96420c09a85b498dde1aad7bc7bd9ca7ccd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:6d:d5:50:fe:e1:77:87:bb:a0:08:9a:b0:
95:06:c6:9f:31:12:64:93:19:e2:fb:5e:38:19:ff:
38:0c:35:8b:82:7d:8b:27:3e:89:ac:8e:0c:c7:29:
8f:ff:2c:3b:11:de:71:3d:7f:87:21:6a:a7:3e:fb:
b4:79:3a:47:73:89:a4:16:09:c9:23:b6:1c:2a:29:
64:bf:74:6d:9f:f1:7a:4f:71:ad:30:4c:86:5a:9d:
d1:7e:2c:eb:2f:4d:0e:9e:d3:b8:8f:4a:4d:db:eb:
60:52:70:18:ba:c1:c6:24:d1:26:1e:b3:ed:06:d6:
a9:a9:d0:b9:22:35:d5:8e:d1:d9:a0:b6:9b:4c:27:
4c:77:17:f9:52:d3:da:59:d5:5d:66:f3:38:85:68:
2d:73:3d:7e:f5:e4:c0:df:3c:ab:04:21:86:57:c9:
6f:25:49:39:bd:71:fe:cf:05:1c:bd:36:5d:73:30:
51:de:a5:47:af:2e:31:a2:9b:8e:08:52:06:bf:ef:
dc:70:27:c5:7d:66:c0:0e:3d:ef:28:4e:c3:41:e6:
c9:ac:78:01:e0:4f:0a:da:fa:a0:c4:08:9f:64:e9:
21:6d:3a:62:bb:f5:98:1a:fc:e0:0c:65:17:81:e7:
b1:ac:5d:60:df:14:a3:c3:79:6e:07:75:41:6d:a1:
dc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E9:64:20:C0:9A:85:B4:98:DD:E1:AA:D7:BC:7B:D9:CA:7C:CD:6F
X509v3 Authority Key Identifier:
keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:37:92:f5:f8:e3:c9:69:03:43:51:af:80:cf:07:eb:c2:c7:
c2:1d:9f:f4:c3:2a:4c:ce:85:92:6b:a4:82:ef:6f:48:ed:4f:
f1:b0:f1:cc:bc:32:e8:c1:d7:6e:dd:19:e2:8a:31:f7:ba:05:
0e:d2:ad:63:be:f6:1f:6f:00:da:81:a5:00:c2:ad:a9:f4:21:
88:d5:da:77:77:81:90:21:99:ff:2e:98:d2:bd:ac:93:62:df:
97:df:f4:d3:1f:1f:ac:e9:74:e7:48:ce:ad:58:22:ff:a5:6b:
65:c5:19:a4:89:31:71:60:1f:df:01:96:de:40:d0:97:e2:6e:
2b:bc:d3:34:20:37:7d:71:25:a7:8a:34:44:fe:58:0d:10:7b:
c7:34:36:26:28:55:33:73:ea:03:c6:51:5b:04:c6:c0:72:35:
8d:e5:fe:7a:94:ea:dd:28:3b:4e:fd:fe:73:43:bd:d9:33:3c:
84:7d:22:93:86:2c:c8:41:56:15:a2:a0:63:77:14:e1:07:5d:
5a:c0:b0:af:d8:76:cb:47:f1:06:aa:4d:f1:d1:fe:ce:70:25:
bc:2c:ca:51:06:85:6f:ae:04:e2:87:51:c8:4b:02:99:62:e3:
36:54:71:ed:5c:d1:94:25:7f:5d:3b:94:19:6e:15:89:41:0a:
f3:6d:a4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:10 2026 by rpki-client