Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File: Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier: YQNirENdB0ZaPoLVhH3tn80Kz5H1vQJVuby+8WgWanE=
Subject key identifier: D6:E7:DE:4A:E0:8B:6C:0A:50:CF:67:88:9B:B0:9F:A6:6F:AA:6A:E8
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial: 01A0889E89D2C67E9B138E0238DF8A79191A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number: 1525
Signing time: Thu 10 Sep 2026 00:01:26 +0000
Manifest this update: Thu 10 Sep 2026 00:01:26 +0000
Manifest next update: Fri 11 Sep 2026 00:01:26 +0000
Files and hashes: 1: AAGe3xmEMwYBz4LTjNkftsQYcRI.roa (hash: H5MxTJchHq7g/9ds3SqpFphxMksUvLoDhqXB21YaWzg=)
2: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: gPIqPCShe6L8QOv2cLXuuoAWZOy6aefD+2KZ2Vjolc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9e:89:d2:c6:7e:9b:13:8e:02:38:df:8a:79:19:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Validity
Not Before: Sep 10 00:01:26 2026 GMT
Not After : Sep 11 00:01:26 2026 GMT
Subject: CN=d6e7de4ae08b6c0a50cf67889bb09fa66faa6ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:98:a8:eb:e7:b3:2a:c0:45:23:9c:ac:f3:
53:28:3f:6d:5c:d0:fc:7d:09:54:4d:8e:14:c0:ba:
ba:19:7d:e4:ad:e8:40:da:f0:5c:85:91:5b:cf:9e:
45:b9:0f:0f:99:fd:91:86:5a:f1:64:05:f3:d6:2c:
fd:00:4f:66:27:73:80:a6:92:35:13:c1:f4:3a:aa:
b2:c9:38:71:f0:1d:04:bc:4a:7a:2e:d1:37:0e:1a:
32:e5:08:ec:41:0d:b8:bf:a3:b5:c5:5f:99:8b:a5:
61:4c:c0:74:bd:4a:c1:2b:db:9e:5f:cd:f0:c1:22:
01:e4:e6:96:ab:23:36:00:99:d6:a1:90:4c:38:62:
dd:57:54:e9:51:ac:c9:92:20:28:30:51:89:80:f9:
88:c2:e3:a4:67:83:04:7b:22:28:7d:ae:d9:58:e8:
27:c9:9b:ca:53:93:8c:77:60:f1:71:1a:17:13:23:
7d:97:79:59:70:a7:fd:f6:af:52:cf:00:a4:22:2e:
43:57:f2:ec:58:92:e8:fc:47:c3:d0:5a:1f:3b:fb:
ad:ac:c6:23:d0:3c:e7:fa:3a:d0:40:cb:98:3c:c8:
ff:85:0c:dc:19:5d:60:ea:03:c9:ac:e7:d5:5c:ca:
cb:06:61:2f:f8:5f:95:51:32:8a:01:46:c6:16:ac:
23:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E7:DE:4A:E0:8B:6C:0A:50:CF:67:88:9B:B0:9F:A6:6F:AA:6A:E8
X509v3 Authority Key Identifier:
keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:78:fa:d3:79:68:fc:ee:fb:bc:72:87:dd:b8:62:ce:42:1f:
13:db:a1:97:0d:ca:08:bf:93:23:39:15:47:9b:ca:fe:24:33:
e5:20:fc:81:1f:71:56:99:fb:cc:18:7a:40:ce:da:b4:95:aa:
87:ef:fa:73:39:48:74:27:1a:f5:72:48:32:0d:4a:ea:83:79:
ec:6c:7e:09:8f:6e:0e:51:bc:7d:67:3b:78:6d:c0:0e:ea:32:
15:28:13:ab:7b:0c:ac:52:56:34:e3:f1:37:66:13:52:6d:d1:
15:15:1d:ad:fd:af:b4:bb:87:1e:96:74:62:a7:6d:d4:c1:98:
ba:38:a7:30:b8:0e:f6:72:83:92:cc:11:a1:2e:e0:10:73:e6:
91:b6:a0:06:c0:d0:80:91:32:bf:9a:a6:d4:49:e1:d6:fc:5e:
f5:e0:89:79:58:c5:3d:ab:ad:66:3c:1a:a5:4a:ee:47:cc:df:
76:7e:4e:ae:6a:4c:2d:b4:d4:dc:df:78:7e:f8:04:7a:9c:ff:
a0:2c:bc:59:0f:9e:08:1e:44:fc:5b:4a:c2:34:f9:f1:bd:7c:
4c:d1:df:40:6f:b5:23:b0:25:a4:f8:99:c6:6b:59:bb:6e:4a:
c6:fb:64:87:0a:34:5f:66:a8:72:85:04:8b:52:0b:7c:a9:20:
9d:52:77:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCInonSxn6bE44CON+KeRkaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMWFiM2RkMjJjMzMzYTc5YjZmZjMwYWFiN2YyZTAzNmZj
MzcwYWEwHhcNMjYwOTEwMDAwMTI2WhcNMjYwOTExMDAwMTI2WjAzMTEwLwYDVQQD
EyhkNmU3ZGU0YWUwOGI2YzBhNTBjZjY3ODg5YmIwOWZhNjZmYWE2YWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSeYqOvnsyrARSOcrPNTKD9tXND8
fQlUTY4UwLq6GX3krehA2vBchZFbz55FuQ8Pmf2RhlrxZAXz1iz9AE9mJ3OAppI1
E8H0OqqyyThx8B0EvEp6LtE3Dhoy5QjsQQ24v6O1xV+Zi6VhTMB0vUrBK9ueX83w
wSIB5OaWqyM2AJnWoZBMOGLdV1TpUazJkiAoMFGJgPmIwuOkZ4MEeyIofa7ZWOgn
yZvKU5OMd2DxcRoXEyN9l3lZcKf99q9SzwCkIi5DV/LsWJLo/EfD0FofO/utrMYj
0Dzn+jrQQMuYPMj/hQzcGV1g6gPJrOfVXMrLBmEv+F+VUTKKAUbGFqwjgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbn3krgi2wKUM9niJuwn6ZvqmroMB8GA1UdIwQY
MBaAFAIas90iwzOnm2/zCqt/LgNvw3CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMGZiYjYtZGVhMi00YzdiLWFmYWQt
NGFjZWM2NDc1NzJkLzEvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMGZiYjYtZGVhMi00YzdiLWFmYWQtNGFjZWM2NDc1NzJk
LzEvQWhxejNTTERNNmViYl9NS3EzOHVBMl9EY0tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXj603lo
/O77vHKH3bhizkIfE9uhlw3KCL+TIzkVR5vK/iQz5SD8gR9xVpn7zBh6QM7atJWq
h+/6czlIdCca9XJIMg1K6oN57Gx+CY9uDlG8fWc7eG3ADuoyFSgTq3sMrFJWNOPx
N2YTUm3RFRUdrf2vtLuHHpZ0Yqdt1MGYujinMLgO9nKDkswRoS7gEHPmkbagBsDQ
gJEyv5qm1Enh1vxe9eCJeVjFPautZjwapUruR8zfdn5OrmpMLbTU3N94fvgEepz/
oCy8WQ+eCB5E/FtKwjT58b18TNHfQG+1I7AlpPiZxmtZu25Kxvtkhwo0X2aocoUE
i1ILfKkgnVJ3kw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 08:12:48 2026 by rpki-client