Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
File: AahezixTn1hQ-nAfLUWiEn3IZ1U.mft (raw, json)
Hash identifier: osZ1wAA2ZTSr4hAXpFN4FEXrC6TUP+ZwNNytTGFCYXM=
Subject key identifier: 7F:47:32:09:FC:67:2A:10:33:A1:61:8A:9B:CF:11:6A:57:46:88:98
Authority key identifier: 01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
Certificate issuer: /CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Certificate serial: 01A13F70682D87B0286DEABEE0CA1EB63F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
Manifest number: 0D4A
Signing time: Thu 15 Oct 2026 12:01:33 +0000
Manifest this update: Thu 15 Oct 2026 12:01:33 +0000
Manifest next update: Fri 16 Oct 2026 12:01:33 +0000
Files and hashes: 1: AahezixTn1hQ-nAfLUWiEn3IZ1U.crl (hash: KPraMvPXsacjOub2v9bRaHHsAkjhN3zo5HikLa9MBvY=)
2: MaRtt04jowFFk86_uuutN8hcKss.roa (hash: fZU76DAwqdxnrxuVOqFEOQy5RWDLvAlUDG+K/0ngLTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:68:2d:87:b0:28:6d:ea:be:e0:ca:1e:b6:3f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01a85ece2c539f5850fa701f2d45a2127dc86755
Validity
Not Before: Oct 15 12:01:33 2026 GMT
Not After : Oct 16 12:01:33 2026 GMT
Subject: CN=7f473209fc672a1033a1618a9bcf116a57468898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:20:6f:b6:2a:16:b4:21:fc:65:06:47:80:
8e:7e:c5:d7:e8:59:33:74:04:77:c6:af:84:30:89:
e8:58:c9:3d:3f:6c:b3:92:ca:6f:a3:da:e8:ae:e0:
22:f5:42:98:67:39:90:85:d8:d5:26:cd:6d:08:ff:
6f:4e:87:43:08:b8:68:af:4b:5f:71:11:cf:fc:dc:
26:db:dd:57:9f:4b:58:fb:31:c2:9f:2a:9f:ed:85:
08:38:1f:ae:fb:dd:5f:38:ba:3b:e3:ee:1f:e1:0f:
9e:93:1a:64:67:f0:cf:ca:77:60:8b:0e:54:50:d9:
5a:26:a1:c7:dc:40:65:02:18:76:c6:d6:0b:e2:3d:
e5:05:69:10:58:9b:05:7e:2c:3b:1b:08:33:f4:18:
4b:05:0f:90:fd:bb:07:97:5e:9b:e4:a0:98:3f:8c:
7f:c9:d4:23:d0:68:b1:4b:1e:83:02:6a:d2:f9:84:
8a:e6:47:96:b5:8d:2a:88:5f:48:0f:7d:b8:cc:96:
55:a0:5a:9d:79:14:a0:23:1f:d0:d2:e9:33:d1:98:
8e:fa:ed:d3:d7:c4:69:4b:d6:1d:b5:82:f6:25:e9:
cf:2c:6d:62:45:f6:3f:6e:7f:69:ba:e2:b0:d0:e4:
7e:58:98:b3:99:65:03:57:fb:fb:03:da:c2:e5:92:
fa:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:47:32:09:FC:67:2A:10:33:A1:61:8A:9B:CF:11:6A:57:46:88:98
X509v3 Authority Key Identifier:
keyid:01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:99:32:b7:df:26:1d:bc:bc:10:eb:f3:02:52:e6:bd:93:7a:
fc:61:29:e2:9b:e4:e2:aa:9a:d2:2e:87:b7:49:7d:43:43:00:
12:81:96:d3:40:52:14:69:3e:32:ed:4e:cf:9a:28:54:d0:15:
77:d4:dd:09:c1:9a:a3:b4:81:56:95:01:a0:93:3f:7e:4f:d0:
21:eb:c1:da:f1:33:fb:27:70:59:c0:61:eb:1e:f1:2d:4e:ec:
3e:16:f6:40:c0:a4:3a:37:91:46:3c:8c:e2:e8:2a:92:85:2c:
26:5a:a3:1d:9a:25:5c:ba:ea:6e:72:53:81:42:b7:d5:f7:20:
b7:03:4d:0a:55:72:64:cc:94:8d:3c:53:a5:b2:2b:6b:48:51:
d1:29:58:9f:a9:39:b4:c7:fb:09:04:eb:39:c5:20:96:5b:80:
1f:e6:e2:d4:e4:c1:2f:61:e3:a7:9d:65:2d:4c:9a:2d:6b:f5:
47:e4:31:89:c2:8f:0d:2c:87:c0:cf:80:a8:97:e3:1e:f3:c5:
94:f0:32:49:43:e3:f2:19:44:61:f4:c9:43:1b:c4:5e:d1:3c:
ed:12:e9:d8:43:fa:13:a0:74:86:18:ff:c1:9e:05:a1:12:32:
78:f5:68:ab:5f:2b:c4:5a:61:08:39:3f:60:30:74:42:4b:c5:
87:e4:95:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:09 2026 by rpki-client