Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier: moM7RnvkAS4ksNOnUlWkKG1R8Oj84x3xsQAhQdv9BHQ=
Subject key identifier: 9B:C9:87:A5:14:31:2D:89:7A:BB:03:6B:24:21:BF:7B:22:1E:5C:24
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial: 019E28B98CB7E9C031A9119E1AEF6E34FB0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number: 15A4
Signing time: Thu 14 May 2026 23:01:49 +0000
Manifest this update: Thu 14 May 2026 23:01:49 +0000
Manifest next update: Fri 15 May 2026 23:01:49 +0000
Files and hashes: 1: HG9Ba2gI8LG--fPNC-99z5G5PR0.roa (hash: r0cs2bG9l/hgCfQjE51Q5Mu/ZRB68nj2PZBwDW/XxSM=)
2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: agcFgoOxzY9RjEM94IXAisFxQJXvgYbj6t8Ipy+npm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b9:8c:b7:e9:c0:31:a9:11:9e:1a:ef:6e:34:fb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Validity
Not Before: May 14 23:01:49 2026 GMT
Not After : May 15 23:01:49 2026 GMT
Subject: CN=9bc987a514312d897abb036b2421bf7b221e5c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:bf:5c:e9:34:ec:38:50:8e:65:39:8e:4b:
92:84:be:93:6b:ce:0a:ae:87:ee:10:21:72:18:0a:
83:b8:f3:65:04:61:ab:34:29:12:0e:83:e3:ff:22:
db:3d:09:46:0b:08:d6:03:70:4b:0f:31:ec:97:d9:
6b:a7:20:88:88:82:99:a8:f6:98:9d:6a:7c:26:f4:
04:b9:ea:18:e2:68:a7:8a:20:a8:97:25:a0:fd:14:
3b:24:82:1d:ed:d7:5f:d2:d1:29:0c:a9:9b:26:ac:
52:2a:b1:6b:48:a3:43:68:a9:ab:d3:ed:ab:78:4e:
96:ad:06:36:04:52:e0:8a:d0:7c:5f:b7:88:e3:09:
95:8c:10:87:a4:52:bc:0a:10:74:6b:f5:32:33:8a:
b5:6f:9f:40:ed:9b:41:37:68:60:6c:90:f5:8e:3d:
1c:de:f8:38:39:0e:b8:8e:da:e5:76:65:90:55:a0:
c6:69:4a:8a:bc:df:6f:2f:9f:d6:ca:88:ac:b2:ac:
34:87:1f:1b:38:70:44:00:db:ec:8a:cf:37:f6:64:
0f:f2:5c:72:1f:44:0f:05:19:21:ac:d9:0e:55:e3:
c4:dd:75:8c:b8:9c:77:ad:a6:91:ac:1e:37:43:a6:
4e:25:1f:37:6f:d5:ae:17:7f:34:f6:3e:36:9c:2e:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C9:87:A5:14:31:2D:89:7A:BB:03:6B:24:21:BF:7B:22:1E:5C:24
X509v3 Authority Key Identifier:
keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:33:02:5f:e4:ee:30:7d:67:ba:ff:a9:dd:3d:92:d5:e1:9f:
bc:5e:41:ad:c6:fa:57:68:cc:b7:61:e9:a6:37:15:f6:d4:9d:
cc:b1:75:d4:fc:27:48:e9:a7:30:01:17:1c:87:ce:18:e6:5d:
87:55:b6:92:36:3b:28:4d:43:ff:b4:c6:02:ad:18:ea:c3:08:
c5:54:c6:19:65:16:bb:d3:8a:6d:ca:07:ba:b4:36:ef:a3:e3:
9e:a4:53:17:52:7f:87:d6:c8:18:60:1d:b9:bc:77:58:ea:e3:
71:ba:b9:20:4f:4c:d1:6d:bc:56:c1:8e:4f:c0:b5:7a:ba:81:
09:21:2b:78:93:7b:e5:41:97:1c:a1:1c:c8:c7:96:d4:3e:4a:
c2:75:bb:4e:4a:7d:d6:88:d3:35:06:35:f1:e7:40:bf:0c:54:
9f:ee:10:91:31:cc:a8:0b:ce:92:c4:e3:a1:c7:f2:b4:61:32:
db:d4:ce:43:ad:76:0c:59:d5:9b:cc:7c:54:0d:62:5f:a4:35:
30:76:00:56:6e:97:56:2e:1f:2e:71:d7:71:89:85:06:47:85:
77:90:e8:ee:62:49:e7:18:bc:77:10:29:1d:e1:29:1e:89:40:
14:ec:60:a6:93:76:2b:9c:10:b2:78:bf:53:6d:53:10:58:ec:
d1:56:5e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:59:34 2026 by rpki-client