Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
File: AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json)
Hash identifier: RbEMKSBX0/BJxrglSgalmftu4lsyk61+vS94pmHlAHs=
Subject key identifier: 28:29:2B:D3:72:BA:4F:8E:77:0E:EC:56:A6:5A:09:D3:8E:23:9F:57
Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Certificate issuer: /CN=0241063b2d57e4efaef6824f623d465a1c37b843
Certificate serial: 019F8F1081AA530E67A03AA1567BFC7CD58B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
Manifest number: 10B6
Signing time: Thu 23 Jul 2026 13:00:51 +0000
Manifest this update: Thu 23 Jul 2026 13:00:51 +0000
Manifest next update: Fri 24 Jul 2026 13:00:51 +0000
Files and hashes: 1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: 0OmGWLsUE6dietoMBt9WnycJuCNMvfNIaNsFzmyq1JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:81:aa:53:0e:67:a0:3a:a1:56:7b:fc:7c:d5:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843
Validity
Not Before: Jul 23 13:00:51 2026 GMT
Not After : Jul 24 13:00:51 2026 GMT
Subject: CN=28292bd372ba4f8e770eec56a65a09d38e239f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:c8:36:d8:97:0b:6d:b6:02:2f:13:8b:7e:
be:0c:95:1c:ee:40:2c:92:36:a0:a4:2f:e6:8a:1d:
4a:de:42:79:0f:4f:cb:08:4d:ff:34:91:c9:76:c1:
4e:3a:52:1d:1a:bd:db:e9:cb:80:84:fa:5c:8a:c3:
1a:d4:0d:f3:c3:dd:df:d3:69:26:e3:00:22:ea:34:
ce:43:9d:77:ec:08:82:b2:be:f7:7f:92:24:e5:39:
f1:c7:db:c2:b5:1d:fb:34:45:ec:82:b5:a9:b3:a8:
c0:41:21:9d:22:e0:f9:35:a2:3a:7a:44:9e:00:1e:
30:6a:a6:46:18:74:d4:97:1d:49:b6:cc:c5:ff:8f:
4c:42:4f:fe:31:74:e2:68:90:72:7a:4a:b8:a6:e5:
8a:34:cd:03:d0:16:15:3e:e6:7a:4f:a1:b7:e3:cc:
7c:f6:d8:79:1a:12:f8:ed:cf:78:69:34:cd:6f:40:
22:d8:d7:04:84:11:22:ec:f3:97:13:9e:09:56:7f:
a0:41:6e:3c:b6:4d:61:71:bc:29:a9:b5:70:86:0e:
43:5e:95:e4:2d:50:2f:f6:14:0d:65:dd:97:6e:58:
9f:d1:b2:f0:a3:92:c6:79:34:4b:e6:ce:5a:36:d4:
3a:17:9f:ad:2e:68:b8:c9:37:5f:f6:36:d8:2b:19:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:29:2B:D3:72:BA:4F:8E:77:0E:EC:56:A6:5A:09:D3:8E:23:9F:57
X509v3 Authority Key Identifier:
keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8d:69:5b:ce:12:28:79:dc:84:7b:23:e5:34:c6:22:ba:72:
bb:f0:e3:1e:93:35:be:78:91:fe:d3:96:a5:44:76:ff:06:40:
70:89:00:47:cf:a7:0a:f6:d9:8c:2c:3d:86:c7:02:37:6a:19:
18:5f:5c:bd:01:97:4a:08:77:22:55:ab:3e:94:3e:f8:fa:d5:
85:e5:07:76:56:a5:32:96:85:c9:e1:15:c6:0c:a6:fc:69:49:
49:8c:df:80:fe:9a:de:18:b9:8a:cb:a6:7f:61:3d:eb:b3:e8:
e0:be:38:df:69:ce:e7:15:5e:e3:d3:41:4c:28:69:49:12:f0:
7e:1e:93:11:a5:6c:31:01:ba:12:26:55:2b:f0:c9:39:ef:10:
67:d3:d1:ef:56:8d:6a:b9:32:fd:aa:1c:61:cd:8c:6b:10:d3:
37:93:2c:0f:2d:e8:60:b7:b9:7a:4c:aa:e4:dc:c0:fb:71:ae:
4b:19:af:b7:71:b7:cd:d7:f2:c8:6c:65:c5:c8:ee:10:d9:7d:
c1:dc:5c:b8:e4:be:96:3e:c0:db:29:07:c4:f1:65:66:a2:96:
f8:29:16:8e:29:b1:73:23:2b:6a:40:c2:6c:a3:4b:67:ca:24:
0a:5f:e5:31:4a:ab:d3:12:ca:ef:4c:7e:63:dd:4d:0f:a3:26:
31:b6:4e:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEIGqUw5noDqhVnv8fNWLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDEwNjNiMmQ1N2U0ZWZhZWY2ODI0ZjYyM2Q0NjVhMWMz
N2I4NDMwHhcNMjYwNzIzMTMwMDUxWhcNMjYwNzI0MTMwMDUxWjAzMTEwLwYDVQQD
EygyODI5MmJkMzcyYmE0ZjhlNzcwZWVjNTZhNjVhMDlkMzhlMjM5ZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEDINtiXC222Ai8Ti36+DJUc7kAs
kjagpC/mih1K3kJ5D0/LCE3/NJHJdsFOOlIdGr3b6cuAhPpcisMa1A3zw93f02km
4wAi6jTOQ5137AiCsr73f5Ik5Tnxx9vCtR37NEXsgrWps6jAQSGdIuD5NaI6ekSe
AB4waqZGGHTUlx1JtszF/49MQk/+MXTiaJByekq4puWKNM0D0BYVPuZ6T6G348x8
9th5GhL47c94aTTNb0Ai2NcEhBEi7POXE54JVn+gQW48tk1hcbwpqbVwhg5DXpXk
LVAv9hQNZd2Xblif0bLwo5LGeTRL5s5aNtQ6F5+tLmi4yTdf9jbYKxm+EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgpK9Nyuk+Odw7sVqZaCdOOI59XMB8GA1UdIwQY
MBaAFAJBBjstV+TvrvaCT2I9RlocN7hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQt
Y2IwNzVlMjM5YTU2LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQtY2IwNzVlMjM5YTU2
LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARo1pW84S
KHnchHsj5TTGIrpyu/DjHpM1vniR/tOWpUR2/wZAcIkAR8+nCvbZjCw9hscCN2oZ
GF9cvQGXSgh3IlWrPpQ++PrVheUHdlalMpaFyeEVxgym/GlJSYzfgP6a3hi5isum
f2E967Po4L4432nO5xVe49NBTChpSRLwfh6TEaVsMQG6EiZVK/DJOe8QZ9PR71aN
arky/aocYc2MaxDTN5MsDy3oYLe5ekyq5NzA+3GuSxmvt3G3zdfyyGxlxcjuENl9
wdxcuOS+lj7A2ykHxPFlZqKW+CkWjimxcyMrakDCbKNLZ8okCl/lMUqr0xLK70x+
Y91ND6MmMbZOoQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:18 2026 by rpki-client