Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft
File: Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft (raw, json)
Hash identifier: 9WWPRWAUVn3eUKtPAoXr62mLO9hIbTY+shvx4JhkZP0=
Subject key identifier: 86:2C:F4:82:55:5A:A4:3E:8D:9C:AE:72:B0:2E:05:63:AB:D1:5B:1C
Authority key identifier: 02:1E:5B:4E:4C:2D:55:F0:91:D4:94:A3:3D:86:06:E6:4E:7D:A7:F7
Certificate issuer: /CN=021e5b4e4c2d55f091d494a33d8606e64e7da7f7
Certificate serial: 01A0E8F69E3ECA00D4B7862D7C5D49BF2265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ah5bTkwtVfCR1JSjPYYG5k59p_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft
Manifest number: 019F
Signing time: Mon 28 Sep 2026 17:01:11 +0000
Manifest this update: Mon 28 Sep 2026 17:01:11 +0000
Manifest next update: Tue 29 Sep 2026 17:01:11 +0000
Files and hashes: 1: Ah5bTkwtVfCR1JSjPYYG5k59p_c.crl (hash: R1qaHRvgcBR2yhSjRrCzZguAoZBMvyow9ik0oFZpA5Q=)
2: VYFbbCZGX6OViZYJs2QJsv7BOWs.asa (hash: aA2l1O9+TsmhM1jTSdaJv3MOhZ42Fqiq9eSX13sVeZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ah5bTkwtVfCR1JSjPYYG5k59p_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:9e:3e:ca:00:d4:b7:86:2d:7c:5d:49:bf:22:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021e5b4e4c2d55f091d494a33d8606e64e7da7f7
Validity
Not Before: Sep 28 17:01:11 2026 GMT
Not After : Sep 29 17:01:11 2026 GMT
Subject: CN=862cf482555aa43e8d9cae72b02e0563abd15b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:76:af:fb:08:ac:3e:e7:f8:5f:35:73:26:
fb:02:1d:cc:07:6c:03:41:a3:10:29:4d:ab:f9:34:
56:06:3b:b2:a4:e8:38:ed:72:91:57:4a:7c:c5:da:
30:a4:f6:d6:e0:8e:1f:ec:35:11:ec:d3:30:c8:be:
5d:6a:9f:8a:10:db:84:8f:2e:6c:64:92:57:df:13:
80:69:f5:b7:e2:dc:9c:37:2b:03:e1:73:46:c2:b5:
3b:dd:08:fa:9a:bc:01:0e:24:9d:6e:1f:60:94:22:
79:26:a0:51:18:82:5b:51:80:42:1b:8b:e5:58:15:
aa:fa:5d:86:d7:51:3e:1a:f3:c7:e1:bd:e0:ca:63:
7e:0a:79:dc:79:05:58:46:a7:1b:74:83:36:d3:9d:
84:7d:2f:10:68:ea:0c:74:51:8b:22:a7:90:3e:09:
b7:3f:99:0a:4c:dd:b6:5c:b7:ec:8b:be:a9:72:65:
8e:72:2e:99:c9:d7:bd:c1:66:52:0e:90:aa:08:25:
30:ad:69:3f:36:be:e6:7e:fd:b6:69:8e:5f:1e:62:
2e:f7:6c:d7:c0:b5:ce:53:e3:e2:a4:fb:7c:c7:b1:
f2:47:9a:bf:fc:0a:fc:2e:06:99:9d:57:34:25:69:
f4:7d:d2:3a:9d:73:23:65:56:84:5d:db:29:42:ed:
4a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:2C:F4:82:55:5A:A4:3E:8D:9C:AE:72:B0:2E:05:63:AB:D1:5B:1C
X509v3 Authority Key Identifier:
keyid:02:1E:5B:4E:4C:2D:55:F0:91:D4:94:A3:3D:86:06:E6:4E:7D:A7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ah5bTkwtVfCR1JSjPYYG5k59p_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1ac379-ff55-48c7-9691-006c32d46a7b/1/Ah5bTkwtVfCR1JSjPYYG5k59p_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e8:d7:f6:dd:b0:89:74:cb:80:74:7b:92:b3:91:43:80:8d:
96:dd:e3:82:ae:a0:f3:a6:1d:4a:8e:59:34:04:98:c8:10:33:
f4:18:20:a5:f3:31:2f:f7:b9:c4:ea:93:aa:9b:e6:df:db:fe:
20:75:ed:14:8c:7c:02:55:70:82:1e:1e:bc:6f:bf:ea:dd:08:
73:12:69:4a:f1:b2:00:68:72:6c:a3:2f:7d:37:d5:88:2d:4a:
74:3c:62:f7:19:8a:49:79:bf:4e:55:09:36:f6:64:75:8a:e0:
bf:5f:ed:11:00:5a:04:bc:09:01:0b:ed:7f:3c:f7:7a:87:e3:
58:21:29:d5:a9:ad:a3:41:ce:8f:8c:9e:78:87:c4:82:be:89:
97:77:9b:63:c3:74:55:b4:a7:e9:36:02:87:96:a0:e3:f8:8a:
87:78:b3:b0:7b:cc:54:78:66:31:91:ca:c3:2f:b0:04:c6:c8:
90:18:21:ad:f8:98:37:12:5e:80:db:24:a7:ca:46:e0:c0:fc:
35:fb:0a:c1:87:e8:df:66:82:14:ff:39:cc:e3:52:5b:19:f5:
7c:c2:68:34:98:cd:fb:dc:8f:4a:55:6a:21:7b:32:ab:25:70:
12:07:9f:6a:95:93:42:db:c0:ce:dc:99:3c:2a:9d:26:8c:37:
7e:1c:cc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:48:09 2026 by rpki-client