Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
File: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json)
Hash identifier: wLmGTeAbDrwf2lslnVcEbnevo4aZoZi/R9vyjIftWqI=
Subject key identifier: D2:0F:CE:0A:A6:FF:42:48:50:D9:51:D9:D9:E8:C6:2F:21:C2:C3:6D
Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
Certificate issuer: /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Certificate serial: 01A155C120645A58774FA1E068CF1D60A0C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
Manifest number: 1A44
Signing time: Mon 19 Oct 2026 20:01:22 +0000
Manifest this update: Mon 19 Oct 2026 20:01:22 +0000
Manifest next update: Tue 20 Oct 2026 20:01:22 +0000
Files and hashes: 1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: BPIuSvHDsNVLrRrr5+bXjTWUnvV9mAC0kJoY9eN5NFM=)
2: X3jNBw8Lh4wM_nlBrKCyZ_CiKpA.roa (hash: 0JM67ptoryLNsC+bVRRWV80kYyTFg1yBjH5eusPhq4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:c1:20:64:5a:58:77:4f:a1:e0:68:cf:1d:60:a0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Validity
Not Before: Oct 19 20:01:22 2026 GMT
Not After : Oct 20 20:01:22 2026 GMT
Subject: CN=d20fce0aa6ff424850d951d9d9e8c62f21c2c36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:3c:f4:d5:62:57:98:f3:ec:84:e7:f3:12:
60:e0:72:f4:51:80:7e:d3:15:a7:27:71:43:fe:f2:
02:b3:6a:17:b8:a1:1c:f3:5e:16:31:db:d2:d2:f5:
0f:39:72:77:01:b8:4e:5f:22:06:5d:b6:33:1f:91:
a2:d4:6d:bd:8e:77:31:b4:e4:ec:dd:e0:42:24:a5:
11:c0:3d:82:33:3a:d4:76:86:9f:a7:f7:c7:82:f4:
82:6c:d6:2d:ac:f6:95:34:f5:51:a8:ae:b5:1c:88:
82:4f:16:97:ce:9c:9a:33:00:89:2c:a5:56:08:fa:
f6:8f:7b:cb:31:b5:01:9d:33:f4:65:2b:ca:db:3e:
4b:fb:ce:a2:2a:8f:3e:5c:d2:b7:35:bd:3a:2a:26:
ec:37:48:84:e2:98:05:07:14:90:72:46:24:97:19:
0d:40:5d:cd:ca:0d:c1:3e:65:a8:e3:ca:ac:92:66:
f9:db:1c:86:c7:63:35:ba:10:86:99:7e:95:8b:9f:
f0:8f:f3:3d:a0:d6:06:eb:25:be:56:ba:6d:e2:b8:
9d:f8:ba:bb:82:6f:d2:51:6e:33:8c:0d:d8:60:2c:
cb:5c:1c:3b:71:e6:93:ea:c5:db:dc:fb:58:9c:3b:
ce:7d:2a:35:bc:37:de:e7:58:0a:c6:f2:1c:8b:41:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0F:CE:0A:A6:FF:42:48:50:D9:51:D9:D9:E8:C6:2F:21:C2:C3:6D
X509v3 Authority Key Identifier:
keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4e:15:93:bb:c8:1d:7d:3f:1e:6e:a3:ad:e9:8c:66:9b:c6:
6c:7c:4d:09:74:e1:04:62:6c:59:dd:1c:3f:00:0f:2c:e0:8d:
0f:ee:89:44:d8:7b:5d:80:74:4e:00:a7:62:5d:b0:cc:ce:a2:
84:2d:06:70:37:36:d1:e1:ed:60:de:b6:1f:94:b5:f1:9b:f8:
57:91:95:3a:f0:81:04:55:e3:d2:09:80:db:a4:f2:c1:2c:1f:
55:9d:68:96:ad:f2:e3:1f:61:06:87:53:6e:f4:be:1b:f7:1a:
f8:c0:fd:fb:74:e6:71:df:38:5e:0e:3a:62:1e:b0:25:dd:63:
f6:63:e4:b0:c8:c9:05:23:d3:94:d1:99:99:5b:7a:f7:3e:f7:
eb:a2:19:dc:f7:58:16:1e:fe:78:ea:7d:1a:40:b2:70:99:9d:
d8:ac:7e:3b:7a:2e:24:b2:1d:5e:90:10:75:77:aa:ea:04:f8:
69:d6:7a:d9:9b:9b:c9:71:08:c9:ae:1f:3d:be:3f:00:e8:d5:
6f:81:2b:15:c9:51:e6:2e:4d:87:f4:d2:28:12:b1:cf:59:d2:
7a:74:81:f1:18:a1:b7:3c:c6:e6:b3:88:5f:a8:02:5d:14:85:
49:47:da:1e:89:d5:d4:b1:10:3f:fd:4a:45:2f:88:13:ff:41:
00:45:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:49:26 2026 by rpki-client