Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
File: AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json)
Hash identifier: /1DJ5yKvBy0/7TIUrYhsNDOXWc0k8J2OozRuvrsymeA=
Subject key identifier: 8C:CB:B9:E0:53:36:0D:5F:FC:90:0D:DB:EA:56:C6:0D:1F:E0:EB:C6
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Certificate issuer: /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial: 01A0D1C910C5954E791AAB0293BB6353E891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
Manifest number: 132F
Signing time: Thu 24 Sep 2026 05:00:10 +0000
Manifest this update: Thu 24 Sep 2026 05:00:10 +0000
Manifest next update: Fri 25 Sep 2026 05:00:10 +0000
Files and hashes: 1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: kpzOQ4RPBwnriEM+gpNvZwH4cdgxXZuvtLWK3/1Gbbs=)
2: mIZXI4mZrRbzXPh4YmTsjubQ1Zc.roa (hash: bzN5/dHvXtXSM/Oh2+pMoFqPyzgsKGPGMLfbcUvulmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:10:c5:95:4e:79:1a:ab:02:93:bb:63:53:e8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
Validity
Not Before: Sep 24 05:00:10 2026 GMT
Not After : Sep 25 05:00:10 2026 GMT
Subject: CN=8ccbb9e053360d5ffc900ddbea56c60d1fe0ebc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:73:0f:f1:2e:9e:72:51:3d:8b:54:0b:84:
68:ee:e8:00:37:76:8c:02:56:21:60:4f:cd:67:24:
bc:37:dc:83:a3:94:05:41:97:ed:bb:a8:31:7b:67:
9e:1e:65:3c:d4:d4:49:f9:7f:6a:6f:6a:62:e8:52:
d2:dc:ff:1e:0b:e7:30:70:0c:c3:f7:f8:d9:91:c0:
a9:ed:c1:65:b7:a3:89:f0:ad:76:aa:cf:8e:d7:90:
69:87:ea:ac:6f:25:00:f1:71:9a:ae:19:17:fb:7a:
cf:2d:b4:b0:0a:9a:0f:c0:92:16:32:a3:81:de:89:
f6:9b:df:2f:65:d0:62:d0:36:a9:d7:0e:fa:cf:aa:
69:f7:84:4a:45:7b:ff:87:b7:ff:3f:fc:3c:79:29:
8e:00:5a:b0:dd:39:b2:8c:2b:e4:59:6b:37:bf:4d:
f3:a1:c1:f9:3c:64:14:39:00:f6:bc:32:42:dc:a1:
73:11:6b:e9:a4:d0:10:e2:fb:dd:25:c6:99:9f:01:
57:66:14:68:ce:40:3b:2d:81:9b:be:8c:e5:9d:12:
d8:96:3f:45:40:c4:24:d6:bf:52:98:19:4e:f4:45:
ec:12:0e:42:ed:ea:3d:60:e3:25:09:ec:09:9b:34:
15:e7:68:43:30:69:53:b3:71:38:07:52:66:20:89:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CB:B9:E0:53:36:0D:5F:FC:90:0D:DB:EA:56:C6:0D:1F:E0:EB:C6
X509v3 Authority Key Identifier:
keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b8:78:88:7a:3d:f3:94:e7:8a:cd:04:68:97:36:6f:0e:42:
ae:00:7a:a1:1d:83:77:b2:cf:01:73:50:92:f7:28:bb:18:49:
57:7f:c5:57:d9:b2:05:b3:db:54:d1:a4:4d:a3:fa:83:cb:aa:
c9:56:75:63:61:44:a8:17:13:43:02:d3:28:c4:74:3a:9c:23:
93:a4:f3:33:9c:52:c0:46:83:45:68:ca:19:6d:57:a6:c5:00:
3a:f4:9f:84:a3:f5:30:e0:d1:34:11:3e:d1:8b:82:72:c9:c5:
be:5f:3a:4a:17:05:ff:e1:c1:c4:6f:9b:79:0c:74:ae:71:23:
6c:1c:58:f1:34:a5:e2:27:ad:68:fd:24:c6:79:14:f1:06:bb:
2b:41:bd:99:1b:43:48:a2:78:10:6d:30:e3:18:a2:2a:00:c9:
26:d1:5f:f7:9d:1a:17:7f:57:33:9b:c7:68:ea:21:42:54:d8:
df:8e:30:08:d1:22:d6:53:af:ea:2e:70:d4:51:7c:b0:e8:7f:
67:bb:67:0b:dd:b5:17:37:5d:d4:27:2e:da:15:37:48:17:fc:
7b:5c:ac:eb:4b:bc:5b:bd:f0:c6:90:83:07:59:b0:51:84:a2:
17:9d:f3:08:51:7b:15:68:c1:15:3b:82:f5:09:79:d3:c1:19:
34:9f:69:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:48:56 2026 by rpki-client