Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
File: AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json)
Hash identifier: Es6qkh8u9NMGc6jqZOTD25znOWhoWD4hKNWYw2ivByI=
Subject key identifier: 1C:49:A4:1B:4D:A9:07:DF:00:D9:65:4E:0E:CF:DE:F7:36:15:20:DB
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Certificate issuer: /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial: 019F93241C46BEE29D658693FC9EE2AD0C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
Manifest number: 128A
Signing time: Fri 24 Jul 2026 08:00:44 +0000
Manifest this update: Fri 24 Jul 2026 08:00:44 +0000
Manifest next update: Sat 25 Jul 2026 08:00:44 +0000
Files and hashes: 1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: dhLkx857q/w+TV7ro0JHp7fFHsJg/hA/mgXfMmQQ5iA=)
2: mIZXI4mZrRbzXPh4YmTsjubQ1Zc.roa (hash: bzN5/dHvXtXSM/Oh2+pMoFqPyzgsKGPGMLfbcUvulmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:1c:46:be:e2:9d:65:86:93:fc:9e:e2:ad:0c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
Validity
Not Before: Jul 24 08:00:44 2026 GMT
Not After : Jul 25 08:00:44 2026 GMT
Subject: CN=1c49a41b4da907df00d9654e0ecfdef7361520db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:08:64:b9:41:b9:3d:0d:c2:e7:01:fa:ae:
9d:9b:fd:99:48:07:17:10:e5:b8:03:b9:4b:ca:d0:
38:5f:64:37:95:b6:5e:75:04:c9:fb:6f:92:1f:23:
30:cf:a1:a1:4c:f0:cd:91:f5:04:7b:cf:58:3f:16:
b5:fa:f7:21:c2:5f:28:b3:0a:92:ca:65:72:1b:9b:
dd:0f:69:d1:4f:f9:a7:2c:47:7e:64:e1:e2:c3:6f:
d6:e3:ec:6b:7d:f7:9b:18:03:6d:29:28:70:49:51:
7c:1c:bb:89:6b:dd:ce:96:9b:39:56:17:95:5c:71:
2a:36:1f:88:dc:24:fa:c6:2b:3f:2f:d8:e0:75:d6:
67:8f:8f:7e:42:39:18:8f:ea:de:7a:2f:f3:35:bf:
27:ba:2a:91:8e:29:b5:1a:95:b4:92:91:72:d2:7f:
35:12:13:ec:7e:53:4d:14:f0:77:f5:a3:36:64:31:
01:ca:e5:c6:8c:2c:57:fd:a9:83:92:3e:cd:b7:31:
f9:c0:cf:7d:2b:18:6a:79:34:a3:50:60:c9:ab:04:
49:a4:a8:f5:ac:3a:9d:0a:38:93:e1:63:14:e6:0a:
fa:e2:8d:34:da:5a:af:ab:f8:39:13:b9:b4:e7:c2:
c0:e2:18:73:87:ec:08:98:6b:80:b6:0d:c9:81:d6:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:49:A4:1B:4D:A9:07:DF:00:D9:65:4E:0E:CF:DE:F7:36:15:20:DB
X509v3 Authority Key Identifier:
keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fb:40:30:58:1c:40:e8:54:60:4c:e4:c0:51:a9:8d:d4:39:
b5:eb:c5:83:92:ff:e2:b9:0a:0a:38:b7:05:e9:b8:7c:58:11:
0d:0d:ce:f4:78:c6:40:69:8f:b5:13:58:8f:93:01:c8:a2:50:
98:73:25:10:94:24:b0:9b:1c:26:68:93:d8:73:e8:b9:09:d8:
05:77:3f:28:81:51:8a:73:0a:23:b9:a2:e6:c8:2c:47:11:8a:
e3:0b:2b:e4:45:7f:2f:2d:92:f9:5b:02:3e:25:50:a3:26:67:
54:e3:3a:94:ec:e3:3f:c5:e5:e4:57:f9:99:e7:65:7f:52:ad:
a1:81:4d:e1:ec:36:80:01:34:a2:42:ed:39:74:ff:54:b7:d9:
79:6f:4b:70:e5:48:01:cf:e4:f6:cb:58:d5:b8:08:c4:29:59:
80:2b:2d:dd:bb:59:06:cb:fc:e1:0e:19:08:68:2a:a0:07:08:
88:d7:ca:95:e2:9a:0f:ba:03:68:b5:87:73:50:b8:74:76:d5:
fe:84:42:e4:80:26:88:62:d2:8e:96:9e:6b:c2:6b:77:01:ac:
ea:e8:60:cb:33:7c:7f:d7:28:94:75:85:2e:f1:2f:4e:31:ee:
2e:60:2e:21:5e:dd:8c:0b:73:3a:b7:85:7e:96:bf:6c:50:8a:
1d:fd:e3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:10:10 2026 by rpki-client