Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
File: AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft (raw, json)
Hash identifier: IuFnC97Eiemgc5COh62hN3RJEn03Hm9mMUSF2a9mYJY=
Subject key identifier: CC:CE:EA:0C:E8:DB:F0:DE:C9:40:BB:63:62:5C:37:EE:7B:22:70:31
Authority key identifier: 00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
Certificate issuer: /CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Certificate serial: 01A00025647B036533A7A2A813D16077C460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
Manifest number: 12C2
Signing time: Fri 14 Aug 2026 12:00:45 +0000
Manifest this update: Fri 14 Aug 2026 12:00:45 +0000
Manifest next update: Sat 15 Aug 2026 12:00:45 +0000
Files and hashes: 1: AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl (hash: W6K9K3ZVjXuCgQ5Z+/ace0mXtTUxnP3PFwFXIoLNdbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:64:7b:03:65:33:a7:a2:a8:13:d1:60:77:c4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Validity
Not Before: Aug 14 12:00:45 2026 GMT
Not After : Aug 15 12:00:45 2026 GMT
Subject: CN=ccceea0ce8dbf0dec940bb63625c37ee7b227031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4e:13:fe:a2:8b:41:b9:21:10:d4:76:c4:4d:
a9:d6:ca:06:91:89:6d:92:fe:36:12:4d:ae:8d:ce:
91:db:71:c8:e1:84:82:11:eb:20:a8:13:55:17:ca:
be:bf:38:9f:a0:cb:af:53:98:6f:8e:0e:b7:e5:6f:
d3:47:d5:e0:bf:32:f1:9e:ff:70:2b:0c:a7:1e:0a:
8b:d2:19:93:08:57:58:a6:c7:58:ad:3d:b9:21:56:
66:01:b4:6d:fc:27:54:0c:bf:e6:aa:4b:cb:55:43:
4f:39:94:e5:f7:cf:5d:3b:a1:c9:9b:54:9c:31:82:
2e:d3:81:a1:2b:a2:7c:71:99:d3:97:ad:cf:ac:6d:
2b:ff:6f:7f:da:d6:e2:63:f8:86:c9:b1:41:e6:6e:
5a:08:28:39:d7:da:3d:92:ad:58:34:73:75:c3:a2:
09:55:b7:f7:a7:f7:fe:c9:da:b1:19:0d:0f:be:c3:
11:4b:87:51:9e:a8:7c:70:8a:0b:89:7a:32:d0:99:
c7:82:74:2d:86:50:a6:96:c3:08:14:54:97:02:81:
02:57:86:65:c3:99:67:e1:c6:bb:be:54:d6:32:cf:
5c:1e:7a:9a:29:90:7a:86:00:76:34:b5:93:26:c6:
53:dc:00:df:ec:c3:3e:6c:c4:26:6c:6f:26:b5:7f:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CE:EA:0C:E8:DB:F0:DE:C9:40:BB:63:62:5C:37:EE:7B:22:70:31
X509v3 Authority Key Identifier:
keyid:00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0f:e1:87:39:b6:2f:80:f5:75:ec:c5:30:0a:23:aa:c1:fd:
cc:31:ec:e1:a1:6b:7f:6c:f8:96:80:cf:de:e5:af:6d:4f:76:
9e:e1:5c:3d:db:c9:07:1b:5a:c0:5a:7b:06:88:c2:17:bc:3d:
88:90:bf:7e:a8:3e:2e:ad:d5:eb:2a:36:de:d4:66:6b:db:f0:
1a:41:bb:54:b5:9d:55:c4:f7:1f:23:41:db:25:d9:b1:52:95:
3b:fc:c6:83:6a:dc:9e:e7:f3:93:ae:db:bb:ae:0d:e2:c8:e8:
c2:43:d9:a8:35:e2:37:3e:0c:e2:f4:98:ad:b6:a3:17:1e:36:
5c:23:cd:20:f1:9a:e1:40:8d:30:3d:6c:62:8f:78:c9:a9:2a:
41:38:cb:02:db:0d:68:ad:5c:54:6e:96:c2:af:82:5c:53:de:
d1:85:70:e8:83:49:7b:bc:3d:9f:50:2d:3f:67:ce:41:a8:2e:
81:12:48:95:51:cf:6d:89:7c:b4:6c:a8:b1:9f:7e:38:26:be:
60:e0:a4:ec:dc:ea:21:a6:a0:ec:d5:7c:c6:fd:79:57:09:99:
d2:f9:0c:0d:a0:db:7f:fe:4e:34:d4:d2:e7:1b:68:fa:f4:08:
bc:3b:ec:72:75:92:b6:7d:11:9a:13:0f:54:93:2b:65:19:5a:
0d:41:49:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:27 2026 by rpki-client