Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
File: MAhC2wg32vMRozS3IjGOcLWIsAk.mft (raw, json)
Hash identifier: GakVAGQb/tcJczF7kSkeWhg0MByfzjH5RVbWXjRKEoI=
Subject key identifier: 0D:AE:99:4A:F3:A7:74:E0:E5:E7:0B:B5:84:5F:2B:D6:56:A5:38:C6
Authority key identifier: 30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
Certificate issuer: /CN=300842db0837daf311a334b722318e70b588b009
Certificate serial: 01A104007743EBB23E7460740B7D5EEE1AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
Manifest number: 1A84
Signing time: Sat 03 Oct 2026 23:01:41 +0000
Manifest this update: Sat 03 Oct 2026 23:01:41 +0000
Manifest next update: Sun 04 Oct 2026 23:01:41 +0000
Files and hashes: 1: MAhC2wg32vMRozS3IjGOcLWIsAk.crl (hash: 0e0NSt9mhaZsU6GeZ+5S6mwOIWwFsRvm2mDPfAYdPDU=)
2: deef0kQTVkiZ-iP9kTGY1fZU_WA.asa (hash: qMJyhV5YvZg0IFpQ2HLYt65onYCb8vkHlaPqKePxLhw=)
3: fk98PFEV3mDBaZCuwYolMaoJs9Y.roa (hash: reF0fqPgy7vLy87CUH+mtBW2X+gVQB8QUdLo8VDTjTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:00:77:43:eb:b2:3e:74:60:74:0b:7d:5e:ee:1a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300842db0837daf311a334b722318e70b588b009
Validity
Not Before: Oct 3 23:01:41 2026 GMT
Not After : Oct 4 23:01:41 2026 GMT
Subject: CN=0dae994af3a774e0e5e70bb5845f2bd656a538c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:f9:8e:b4:cc:f2:c4:69:8c:db:d9:ed:b0:
60:5e:53:23:00:3e:e9:be:ed:24:a1:f4:02:22:7c:
24:bb:78:a2:4c:1e:99:7e:a6:81:7c:ab:61:da:16:
bf:ff:c3:14:d6:02:a7:4a:b4:b9:b0:59:d0:0c:b5:
84:5c:10:10:58:69:7f:dc:4c:9f:65:2b:00:be:58:
33:c3:71:16:aa:36:48:58:72:c9:72:55:08:e1:4f:
a2:e2:ff:08:cc:be:ff:68:ce:cf:f7:dd:52:70:19:
31:e8:de:52:6a:39:ec:e2:66:c4:c4:24:00:22:62:
f9:42:49:4f:e0:f4:65:80:50:55:eb:4b:77:56:d7:
f6:b5:51:b5:9e:51:9b:71:6a:06:3e:37:94:d7:88:
69:52:fb:a0:7b:e3:f8:cd:f9:5e:58:37:06:af:08:
fe:33:d0:4c:08:2c:17:2e:35:30:0f:e3:df:eb:fe:
be:c2:02:11:4e:e0:a6:ef:ef:f5:d0:16:ec:62:4f:
30:da:fd:06:2f:c1:74:e0:bd:56:97:50:ff:22:83:
2d:d3:08:56:4a:8a:27:31:2e:d7:a7:5a:72:b2:a9:
44:ae:ec:ff:01:9d:da:f5:6a:c3:29:d3:bc:9f:ab:
ce:1e:a0:c4:83:64:9a:5e:3a:ce:0d:97:f0:63:41:
33:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AE:99:4A:F3:A7:74:E0:E5:E7:0B:B5:84:5F:2B:D6:56:A5:38:C6
X509v3 Authority Key Identifier:
keyid:30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:32:ee:da:21:0d:f3:68:90:f1:41:5c:57:15:f7:d4:35:c4:
a8:5f:36:b1:c5:f7:b5:42:7e:5b:14:ce:d1:ec:05:24:82:63:
89:e1:a4:cc:c9:00:d6:18:89:ae:9c:87:9d:2e:61:a8:5b:f8:
b3:ae:14:f7:d5:cd:0d:00:e3:25:fe:03:63:f5:fd:85:f9:6d:
4b:de:e3:a5:41:9b:e0:91:8a:79:90:b8:ee:5d:60:ab:be:61:
2a:28:e5:76:8d:d1:c6:ac:47:68:33:ea:27:a3:c4:30:3f:b7:
48:c3:33:b3:96:16:7f:bf:e3:96:71:ce:26:a1:f1:b5:9c:36:
a2:d3:30:df:63:94:94:19:8c:ae:4d:c5:02:a1:43:37:05:f3:
3b:2a:d0:c0:20:e3:b4:4b:6b:3f:58:fb:f7:3c:7e:d4:8e:1a:
d8:9c:e1:53:29:44:ef:3a:19:37:6f:b2:45:62:c0:1e:74:a5:
72:c9:b2:d0:ac:8d:b3:09:df:fe:88:5d:4a:6e:5a:5a:b3:64:
62:46:82:49:9f:79:83:b1:e6:f6:17:cc:4c:13:ca:4e:a1:a4:
c1:1a:92:e2:25:2d:ad:18:f7:5b:98:3a:16:6f:ab:47:91:cd:
8c:6d:7d:49:69:75:0a:60:55:31:41:89:26:b5:75:38:73:f0:
cd:25:b2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:04:49 2026 by rpki-client