Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File: Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier: Y0+5fxcjcB5flBnMGpzg6/zbc4cyMHX72CKbzRgJKnk=
Subject key identifier: 63:0D:41:DD:09:D9:2B:6D:D8:10:CD:BC:62:A2:EC:65:31:F6:E6:45
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial: 019FA0E0A4181C2FE0961BC23A4CFE8E2951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number: 14AD
Signing time: Mon 27 Jul 2026 00:01:44 +0000
Manifest this update: Mon 27 Jul 2026 00:01:44 +0000
Manifest next update: Tue 28 Jul 2026 00:01:44 +0000
Files and hashes: 1: AAGe3xmEMwYBz4LTjNkftsQYcRI.roa (hash: H5MxTJchHq7g/9ds3SqpFphxMksUvLoDhqXB21YaWzg=)
2: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: AWwcxlXYe1489RaBAiSiaw1iQKNzr1cZqLm4paHCG38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:e0:a4:18:1c:2f:e0:96:1b:c2:3a:4c:fe:8e:29:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Validity
Not Before: Jul 27 00:01:44 2026 GMT
Not After : Jul 28 00:01:44 2026 GMT
Subject: CN=630d41dd09d92b6dd810cdbc62a2ec6531f6e645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:f4:51:1c:13:2b:19:97:c9:34:9b:3b:bb:
30:5a:e2:d7:d3:c2:2e:f5:0e:e6:bb:18:25:af:35:
49:51:5f:5b:da:76:5a:e3:2f:18:4b:23:a4:4c:3d:
c3:a1:a4:22:28:27:fa:75:b3:1f:14:3f:b9:b4:95:
2c:eb:28:9f:77:2c:94:2a:db:be:d3:03:52:4b:b6:
45:55:7d:9a:14:e1:81:61:4c:1a:48:04:8f:c5:17:
6a:d2:af:38:d2:0a:47:35:3e:a4:5e:cd:6b:52:35:
bf:c9:dd:f4:67:bd:d0:58:3a:c1:18:e6:8f:d2:41:
c9:0e:03:c5:f8:f2:5e:31:13:27:30:64:ca:1e:57:
8c:37:22:a2:80:9e:1d:23:93:dd:f6:6e:3e:a0:66:
3c:e3:e7:4e:6a:df:4f:96:5d:3f:55:9a:70:9a:d9:
7c:42:e4:a2:af:c5:fc:f4:76:c0:78:97:64:18:66:
07:5c:74:66:6e:5d:4f:98:bc:6e:ee:47:0f:ef:86:
14:b8:ba:80:ef:a2:37:97:ac:4b:e5:9d:79:dd:06:
e5:f7:dd:fc:4e:cb:e7:33:e1:7c:67:2e:e7:eb:e7:
79:90:58:2a:63:2f:f7:35:9f:f8:95:14:8e:1a:83:
cd:e3:e0:b4:17:cc:ff:98:0d:a5:1d:25:7e:00:80:
01:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0D:41:DD:09:D9:2B:6D:D8:10:CD:BC:62:A2:EC:65:31:F6:E6:45
X509v3 Authority Key Identifier:
keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b7:52:bb:6f:dd:13:e3:43:55:4f:d3:2d:cc:50:14:aa:b8:
f5:09:a7:e7:ab:21:cf:f6:9d:ca:50:bc:ff:cf:3f:5c:8c:98:
a5:44:90:ea:5f:dc:b7:89:8d:28:81:cd:7d:ed:38:f1:79:20:
02:ec:1a:83:d2:a6:11:64:cf:47:3c:00:ef:63:51:d2:c2:e1:
00:b3:f3:2f:de:90:c9:4b:a4:ca:34:e7:37:9c:54:a7:60:51:
67:b8:7e:b1:f1:4e:f5:fa:e4:79:84:d4:24:49:d8:96:b3:52:
bf:7b:2b:02:f3:d2:e4:c0:e0:0d:3c:f1:b8:0e:59:8f:24:86:
ad:35:b0:aa:8d:3f:26:64:7c:2e:d2:98:04:14:d2:0e:a3:29:
fe:cc:d2:ea:5f:f5:b5:1b:8c:d5:72:e8:d0:3a:c1:f0:16:59:
5d:d0:fd:2f:53:6f:16:39:22:c2:a5:0d:6f:60:0c:7a:da:e9:
56:14:4c:02:b1:a5:16:29:41:7b:8e:a1:77:6a:90:5b:df:11:
9a:34:cd:85:b5:1a:1f:1f:65:53:c5:f1:68:88:fb:ed:58:b7:
00:2f:11:37:94:d4:d1:f1:1c:7c:50:16:06:69:cb:26:18:f6:
68:88:86:74:d8:fa:48:92:81:4e:d4:0d:b5:70:71:9f:fc:00:
ed:9f:1a:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4KQYHC/glhvCOkz+jilRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMWFiM2RkMjJjMzMzYTc5YjZmZjMwYWFiN2YyZTAzNmZj
MzcwYWEwHhcNMjYwNzI3MDAwMTQ0WhcNMjYwNzI4MDAwMTQ0WjAzMTEwLwYDVQQD
Eyg2MzBkNDFkZDA5ZDkyYjZkZDgxMGNkYmM2MmEyZWM2NTMxZjZlNjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjb0URwTKxmXyTSbO7swWuLX08Iu
9Q7muxglrzVJUV9b2nZa4y8YSyOkTD3DoaQiKCf6dbMfFD+5tJUs6yifdyyUKtu+
0wNSS7ZFVX2aFOGBYUwaSASPxRdq0q840gpHNT6kXs1rUjW/yd30Z73QWDrBGOaP
0kHJDgPF+PJeMRMnMGTKHleMNyKigJ4dI5Pd9m4+oGY84+dOat9Pll0/VZpwmtl8
QuSir8X89HbAeJdkGGYHXHRmbl1PmLxu7kcP74YUuLqA76I3l6xL5Z153Qbl9938
TsvnM+F8Zy7n6+d5kFgqYy/3NZ/4lRSOGoPN4+C0F8z/mA2lHSV+AIABAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMNQd0J2Stt2BDNvGKi7GUx9uZFMB8GA1UdIwQY
MBaAFAIas90iwzOnm2/zCqt/LgNvw3CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMGZiYjYtZGVhMi00YzdiLWFmYWQt
NGFjZWM2NDc1NzJkLzEvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMGZiYjYtZGVhMi00YzdiLWFmYWQtNGFjZWM2NDc1NzJk
LzEvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerdSu2/d
E+NDVU/TLcxQFKq49Qmn56shz/adylC8/88/XIyYpUSQ6l/ct4mNKIHNfe048Xkg
Auwag9KmEWTPRzwA72NR0sLhALPzL96QyUukyjTnN5xUp2BRZ7h+sfFO9frkeYTU
JEnYlrNSv3srAvPS5MDgDTzxuA5ZjySGrTWwqo0/JmR8LtKYBBTSDqMp/szS6l/1
tRuM1XLo0DrB8BZZXdD9L1NvFjkiwqUNb2AMetrpVhRMArGlFilBe46hd2qQW98R
mjTNhbUaHx9lU8XxaIj77Vi3AC8RN5TU0fEcfFAWBmnLJhj2aIiGdNj6SJKBTtQN
tXBxn/wA7Z8apw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:47:13 2026 by rpki-client