Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
File: AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json)
Hash identifier: kCCrjrLK10nnTMKQKAW1HE0rSpAFkWfLYKRpT9hxW9o=
Subject key identifier: 8E:9B:FA:42:03:DB:A9:02:F1:4B:5A:10:52:E6:50:35:B2:33:DB:0D
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Certificate issuer: /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial: 019D254CC2D8934D3ADC16D0E171C812226E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
Manifest number: 1148
Signing time: Wed 25 Mar 2026 14:01:20 +0000
Manifest this update: Wed 25 Mar 2026 14:01:20 +0000
Manifest next update: Thu 26 Mar 2026 14:01:20 +0000
Files and hashes: 1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: ap7lAxt3R033Z1vtXeGWalUt34KiUF0VW/4vtTfMy0g=)
2: mIZXI4mZrRbzXPh4YmTsjubQ1Zc.roa (hash: bzN5/dHvXtXSM/Oh2+pMoFqPyzgsKGPGMLfbcUvulmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:c2:d8:93:4d:3a:dc:16:d0:e1:71:c8:12:22:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
Validity
Not Before: Mar 25 14:01:20 2026 GMT
Not After : Mar 26 14:01:20 2026 GMT
Subject: CN=8e9bfa4203dba902f14b5a1052e65035b233db0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:54:be:12:09:53:26:0a:a5:dc:de:9a:72:
29:56:15:33:cc:c9:d4:25:9b:06:8a:98:16:5b:9c:
0f:bc:24:cf:08:d4:f6:d1:57:5b:52:80:1a:3a:42:
f0:4f:04:5b:96:41:e3:de:5e:f9:67:e3:40:34:05:
2a:4b:20:54:0e:49:e9:f4:cb:3c:48:47:15:ec:71:
90:31:82:27:36:fa:4a:7c:88:2e:6e:b8:e0:91:66:
ee:c7:41:39:28:ac:d9:c0:69:16:02:e0:a5:ad:f4:
a3:f2:e9:95:16:28:3d:5c:2f:dc:c4:c8:58:4e:3b:
cc:6c:f4:6e:9a:c6:b5:b2:e8:9a:83:e7:42:a5:e9:
53:bc:b2:ee:a4:03:d0:f4:2c:29:93:fa:c1:19:21:
03:f3:48:7b:42:bb:7d:5f:56:01:42:cc:5e:81:02:
e9:c8:49:34:64:17:2b:33:19:7b:77:03:59:12:7d:
e7:0f:74:e6:3c:d0:1a:95:c7:b6:0b:c1:4a:7a:0b:
b6:9c:aa:ff:0c:07:7a:99:9e:0e:c7:53:b4:e9:ea:
81:8e:dc:37:f2:2f:aa:cb:f5:58:1d:6e:ad:0d:ed:
62:1e:82:61:f4:9f:2a:32:84:f5:9c:69:fe:92:4a:
69:ec:bd:34:7f:fa:d9:e3:54:7b:3f:28:a0:fc:66:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9B:FA:42:03:DB:A9:02:F1:4B:5A:10:52:E6:50:35:B2:33:DB:0D
X509v3 Authority Key Identifier:
keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1e:4a:f0:86:a1:1e:bf:54:96:d1:2c:b4:80:02:2d:18:0d:
1e:41:08:ca:a6:65:5d:9c:3f:e9:98:f1:90:91:4e:82:ec:ec:
b4:66:6b:ad:f4:e7:c3:7f:45:1f:bd:e6:b9:71:13:78:ac:38:
c5:d4:db:6c:6c:af:3f:70:64:02:e9:2b:6d:1b:95:4d:32:0e:
c1:58:9d:b7:31:42:03:27:a0:e3:5f:9b:37:d0:de:94:e9:3e:
1f:9e:ed:9c:ce:f1:82:e8:d1:ca:c3:1a:e6:3b:ea:01:d6:ed:
77:5a:18:34:88:5d:48:33:59:4d:8a:02:c0:24:57:96:00:3e:
63:dc:aa:eb:e1:fa:67:49:4b:bb:61:75:e8:4b:a8:8f:95:17:
23:eb:85:e7:41:46:cd:de:f3:7f:ce:df:8c:54:d1:f2:74:49:
20:23:c1:77:c7:5c:10:d0:3e:2b:5b:63:38:68:e9:d4:cb:81:
e6:c4:3f:0c:92:d4:d9:50:a9:42:dd:87:c9:1e:18:57:49:3b:
3f:22:f2:c7:4c:5e:bf:a2:07:9e:4e:ba:f1:ee:96:7f:b1:1b:
28:9b:ef:16:cf:af:cd:7e:58:70:0d:cf:4a:ec:e0:ad:11:b2:
09:16:6d:f3:e2:cb:5f:5c:13:06:57:eb:b3:52:6c:25:7b:00:
8c:cd:18:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:31 2026 by rpki-client