Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File: AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier: /t4wWFVyFjaDSHJ5qxLeXouyHSn67rmoa8jmNMi9SNw=
Subject key identifier: A9:AA:0E:29:82:3D:CA:35:12:3B:23:F1:77:11:48:AA:EE:7C:67:D7
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer: /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial: 019E2F969E2FA4105BF63936938258B17A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number: 190B
Signing time: Sat 16 May 2026 07:01:00 +0000
Manifest this update: Sat 16 May 2026 07:01:00 +0000
Manifest next update: Sun 17 May 2026 07:01:00 +0000
Files and hashes: 1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: Z/GxZVLxNKQJo78isRniWnA9vrRCVNXdgVgDEFSOlEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:96:9e:2f:a4:10:5b:f6:39:36:93:82:58:b1:7a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
Validity
Not Before: May 16 07:01:00 2026 GMT
Not After : May 17 07:01:00 2026 GMT
Subject: CN=a9aa0e29823dca35123b23f1771148aaee7c67d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:39:dc:ca:e1:01:ec:a9:be:8e:0d:23:47:
4e:5b:88:bc:da:d2:11:d6:33:4f:c9:e3:24:d2:81:
8c:31:3c:ec:ad:57:e3:1a:09:6e:dd:1c:eb:65:7f:
df:50:a2:71:e9:03:42:e0:96:d7:85:9f:c2:90:c1:
9e:30:89:c6:c3:31:0f:1c:10:38:dc:35:6d:db:f8:
43:f9:4a:1e:62:74:1e:2b:f9:49:4b:df:42:90:84:
31:07:c4:e8:7c:ed:0c:9e:e7:4e:93:93:d8:c7:bc:
9d:91:e5:31:5c:db:fa:81:ee:df:d1:bd:bc:f5:d6:
54:4b:51:2d:7d:dd:a2:98:a0:a1:08:d4:ba:09:55:
27:c4:bd:c2:f6:09:27:3e:db:9d:1d:54:8a:7a:32:
cc:c5:b2:d7:8a:33:f3:ce:96:27:1e:0c:a9:61:bf:
53:b8:fa:ec:74:21:f0:26:94:76:bd:b9:42:44:05:
a7:00:97:4f:2c:18:36:79:68:fa:97:84:65:82:ac:
12:a3:78:09:30:05:2c:e3:c5:d1:f0:2f:ce:a3:52:
9a:6d:cf:a4:90:c7:5e:13:38:7f:72:06:26:55:47:
da:84:e7:cc:2f:58:9d:93:40:b3:03:f5:a2:3c:aa:
5f:a6:ec:7d:a1:c3:fb:5d:39:96:9b:80:c1:50:7a:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AA:0E:29:82:3D:CA:35:12:3B:23:F1:77:11:48:AA:EE:7C:67:D7
X509v3 Authority Key Identifier:
keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6a:03:5b:0e:a3:17:93:68:6b:f5:9c:c0:08:98:d7:03:22:
98:db:d8:63:3e:75:94:28:78:ae:c8:6c:38:be:ac:bf:06:eb:
8c:ac:27:c5:25:83:c4:ea:3e:a0:e2:bf:37:eb:81:f4:8d:08:
46:8f:8e:2a:ee:6d:1b:6b:17:8a:1d:d5:6a:d3:e3:13:06:c5:
c2:ad:66:a4:b8:e7:a9:f4:ac:10:c8:2a:eb:b1:d6:c3:78:49:
11:b3:5d:80:ce:0d:92:a4:41:ea:98:a7:cd:64:50:ab:8d:a5:
e4:45:d6:1d:3c:4e:df:6b:f5:c9:0f:0d:b2:73:83:59:41:18:
74:4b:ee:85:0e:ca:89:d9:e8:5e:4e:c1:42:36:3c:48:af:9e:
80:92:37:e3:52:ce:9c:ec:08:a6:ab:84:8f:0b:06:f3:ae:81:
4d:c1:74:6d:25:f6:e9:4c:73:28:01:d2:c0:c6:13:b9:6c:77:
54:d8:3b:dd:98:22:b5:ef:02:f0:35:75:16:a1:2e:1c:52:a5:
7c:ec:c6:ae:5f:23:47:68:84:7c:d1:e2:2f:e6:94:81:2b:72:
54:1e:a0:b9:5c:a7:89:4c:fb:49:88:a8:51:69:63:fd:5e:07:
bb:ec:2e:e4:68:a0:2a:dd:6b:08:67:93:8f:27:7e:96:4e:39:
de:05:72:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:37 2026 by rpki-client