
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
File: AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json)
Hash identifier: ZuUWwLUIs6ddEpHFqkGlNqRzfc2xL45S4GFnPgDnc1Q=
Subject key identifier: 18:D7:87:61:DC:50:3D:58:18:90:33:29:70:3C:01:0A:4F:3A:6B:36
Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Certificate issuer: /CN=0241063b2d57e4efaef6824f623d465a1c37b843
Certificate serial: 01A0CFA4A7419EA290C920023A8AEA280CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
Manifest number: 115C
Signing time: Wed 23 Sep 2026 19:01:09 +0000
Manifest this update: Wed 23 Sep 2026 19:01:09 +0000
Manifest next update: Thu 24 Sep 2026 19:01:09 +0000
Files and hashes: 1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: GCBXRD3+4BhEHEaOV5BjsZM3U8002AaFpDvjlg/+P5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:a7:41:9e:a2:90:c9:20:02:3a:8a:ea:28:0c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843
Validity
Not Before: Sep 23 19:01:09 2026 GMT
Not After : Sep 24 19:01:09 2026 GMT
Subject: CN=18d78761dc503d5818903329703c010a4f3a6b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e2:a3:18:d0:f7:2b:e2:14:05:45:4a:ed:d9:
28:61:6a:e1:7e:bb:fb:23:35:d1:c4:07:a9:a2:eb:
fe:f9:f6:0b:34:f4:1a:5e:36:c8:d9:62:17:c7:fa:
11:e3:00:1d:b5:8b:c2:21:f6:0f:45:f2:2a:29:c1:
94:94:cf:12:c5:df:63:c8:6c:3f:34:fc:18:8b:ce:
0c:f3:f9:9c:cb:5c:39:c0:aa:0d:a9:7d:94:b8:09:
52:ba:ff:a3:a3:cb:e2:c9:5b:1d:6c:7c:6b:c0:b0:
e7:3e:f9:56:eb:6a:f7:94:13:8a:56:39:49:34:53:
2d:17:09:74:fc:c7:89:77:c9:ab:38:90:6d:a0:61:
b2:1e:01:10:65:db:27:ac:b6:26:5a:7f:5c:51:c4:
f7:9d:da:f5:d8:fe:45:b3:f7:7a:f6:e9:8c:ba:39:
b9:67:1d:d0:ca:a5:c7:c6:26:ed:79:92:d0:22:7e:
59:79:a3:29:c6:ca:4f:51:35:e0:dd:b8:22:9d:03:
25:c2:5e:cd:6c:e7:7b:74:c4:e7:bd:fa:70:52:16:
c0:7c:4e:64:0c:f0:66:1a:a2:59:44:2d:d2:6f:96:
e0:1b:cd:26:7c:78:b6:fa:7a:2a:ec:55:67:99:0d:
15:0c:23:97:6b:ed:68:d7:65:0c:df:88:99:20:13:
9d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D7:87:61:DC:50:3D:58:18:90:33:29:70:3C:01:0A:4F:3A:6B:36
X509v3 Authority Key Identifier:
keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:22:e0:15:e4:79:f0:3d:39:f4:17:eb:39:ae:b1:5e:93:ea:
42:34:e7:6c:0f:fb:7b:63:03:6a:66:cf:f6:95:40:4d:85:c2:
80:6f:43:a4:ac:91:b1:ad:b0:5f:90:61:a5:d4:6e:3e:7f:60:
6c:73:8b:2c:37:67:81:b8:b0:8d:b2:9b:b9:a9:2c:77:7f:23:
e7:b0:b5:56:cf:1d:a8:e6:41:eb:cb:b0:b2:0d:82:0e:2d:b4:
a5:a9:1d:fe:8e:7b:73:dc:ca:92:cd:91:24:25:41:b8:c3:7c:
26:0a:b0:40:bc:d0:06:f4:f7:1e:0b:3d:da:01:4b:2a:c4:ca:
77:6d:06:9e:70:55:ca:6f:d4:33:fb:02:8c:28:ae:da:32:dd:
ce:cf:76:5f:22:26:ca:2e:c3:97:03:08:5f:98:80:57:6b:f0:
8c:fb:34:66:59:03:bc:f2:7e:ea:5d:35:36:e0:07:b4:58:5e:
57:aa:34:97:2b:d0:fb:6c:88:4d:1f:4d:1e:ac:79:97:2e:9b:
1c:da:d1:75:fa:65:32:4a:ce:6f:55:97:dc:17:78:42:8d:38:
6f:13:f9:2a:7b:76:32:ec:c4:aa:d0:0b:1a:6b:b3:17:ca:ce:
84:f7:d7:fd:05:4d:89:2d:8c:3d:fb:2e:83:02:7d:99:a1:fa:
07:bd:7e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:01:16 2026 by rpki-client