Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
File: AkhBfH_pzOxbnarMCPznmdZzCIw.mft (raw, json)
Hash identifier: IhOiT2Zxoitkap1Z3OLV6ZodY4w+im5VvxXi+5Ir20A=
Subject key identifier: 53:21:A2:FC:21:FF:1B:FD:3C:08:F9:75:35:01:1A:00:23:EE:AF:6E
Authority key identifier: 02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
Certificate issuer: /CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Certificate serial: 019F90FF1F36198FEFFEB0734505DD337F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
Manifest number: 11FC
Signing time: Thu 23 Jul 2026 22:01:06 +0000
Manifest this update: Thu 23 Jul 2026 22:01:06 +0000
Manifest next update: Fri 24 Jul 2026 22:01:06 +0000
Files and hashes: 1: AkhBfH_pzOxbnarMCPznmdZzCIw.crl (hash: EVrJf2Uy7zfQOJgYVlXgsAP57T4KeFhhm/xZMduFzHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:1f:36:19:8f:ef:fe:b0:73:45:05:dd:33:7f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Validity
Not Before: Jul 23 22:01:06 2026 GMT
Not After : Jul 24 22:01:06 2026 GMT
Subject: CN=5321a2fc21ff1bfd3c08f97535011a0023eeaf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:47:4f:d6:0b:5b:b8:81:f7:7f:f4:1a:d7:
29:14:eb:67:23:4e:0b:96:45:e4:d3:f0:27:1b:32:
bc:dd:05:b3:e4:9e:0c:bd:4e:88:cf:e1:0a:c7:cb:
d4:0a:f8:76:f5:7f:a8:cc:07:f3:cf:93:15:77:63:
89:72:94:03:29:95:36:f3:28:12:22:d2:71:bf:45:
f1:a5:c0:66:9a:b9:ab:44:30:67:5a:9d:ce:f7:90:
f7:7e:a5:a3:e1:cc:e3:8d:48:dd:f4:11:16:95:3a:
dd:34:c3:88:26:c0:a8:a9:6f:39:f9:d0:84:16:0d:
e6:5c:ee:74:93:a8:32:2a:cd:4a:91:fd:53:ad:2e:
31:0e:cf:dc:4d:1b:b5:18:ee:2d:6c:10:64:6f:60:
7e:3d:26:0f:ad:23:75:c9:e8:21:7d:e5:00:c7:25:
57:c1:bd:b2:a4:55:87:81:76:32:54:13:53:d0:a1:
ed:8f:9f:d3:b2:0c:27:76:f4:23:39:94:e0:34:8a:
c3:a9:27:5a:2a:a5:8a:34:c8:b3:9c:cf:8c:05:7d:
22:d2:7c:5f:5c:16:ad:23:53:a9:dd:e7:d1:b6:f6:
0f:e7:4c:24:d3:ac:97:f1:d3:c4:aa:0d:c3:d8:32:
32:15:8b:4d:d0:2d:e7:b2:2d:6f:62:50:35:1d:ed:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:21:A2:FC:21:FF:1B:FD:3C:08:F9:75:35:01:1A:00:23:EE:AF:6E
X509v3 Authority Key Identifier:
keyid:02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:69:fa:88:58:1c:b4:03:bf:54:74:ae:f6:58:70:48:44:58:
62:ef:69:fc:41:dd:39:6c:b1:56:e1:98:4c:30:75:42:b4:95:
19:70:13:7b:89:30:2a:5f:63:39:9c:6d:4c:4a:7a:e0:e1:e9:
dd:6f:f0:ba:12:c9:37:e5:9f:43:35:9c:0a:ed:00:de:6a:df:
84:94:77:0b:94:8d:3b:d0:70:e3:19:9c:22:04:5a:2a:6f:ba:
58:21:6f:90:eb:0b:71:fc:2b:46:1a:5a:fa:93:06:14:bc:b0:
04:c7:9e:ff:41:d9:a3:9e:80:84:79:df:9d:ff:5d:e6:7b:ee:
15:2a:eb:03:20:89:47:7b:b8:27:09:71:81:ff:34:0d:bb:8a:
8f:eb:30:59:58:d9:28:5a:b8:5d:e9:bc:4c:39:e6:3e:50:33:
ae:4f:3a:59:b6:66:67:40:7b:9d:f4:66:56:bc:4e:84:f4:2e:
9a:47:7b:29:f0:6b:01:f1:70:36:cb:43:f8:a8:7b:9e:2b:bf:
8e:a9:39:90:ce:9c:f9:a3:80:49:7a:15:a2:16:7a:5f:9e:cd:
4b:5e:be:48:e3:b5:54:f1:8c:00:40:a7:4a:f0:a4:b5:55:c2:
42:31:8f:15:85:5d:4f:2c:bf:96:81:61:85:bb:83:5e:f5:04:
08:1e:f9:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/x82GY/v/rBzRQXdM387MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDg0MTdjN2ZlOWNjZWM1YjlkYWFjYzA4ZmNlNzk5ZDY3
MzA4OGMwHhcNMjYwNzIzMjIwMTA2WhcNMjYwNzI0MjIwMTA2WjAzMTEwLwYDVQQD
Eyg1MzIxYTJmYzIxZmYxYmZkM2MwOGY5NzUzNTAxMWEwMDIzZWVhZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+FHT9YLW7iB93/0GtcpFOtnI04L
lkXk0/AnGzK83QWz5J4MvU6Iz+EKx8vUCvh29X+ozAfzz5MVd2OJcpQDKZU28ygS
ItJxv0XxpcBmmrmrRDBnWp3O95D3fqWj4czjjUjd9BEWlTrdNMOIJsCoqW85+dCE
Fg3mXO50k6gyKs1Kkf1TrS4xDs/cTRu1GO4tbBBkb2B+PSYPrSN1yeghfeUAxyVX
wb2ypFWHgXYyVBNT0KHtj5/TsgwndvQjOZTgNIrDqSdaKqWKNMiznM+MBX0i0nxf
XBatI1Op3efRtvYP50wk06yX8dPEqg3D2DIyFYtN0C3nsi1vYlA1He2WmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMhovwh/xv9PAj5dTUBGgAj7q9uMB8GA1UdIwQY
MBaAFAJIQXx/6czsW52qzAj855nWcwiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtoQmZIX3B6T3hibmFyTUNQem5tZFp6Q0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mMTY3OGMtZGRjYy00MjUzLTg1OTUt
NjNjNzA3NDQxYmE2LzEvQWtoQmZIX3B6T3hibmFyTUNQem5tZFp6Q0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9mMTY3OGMtZGRjYy00MjUzLTg1OTUtNjNjNzA3NDQxYmE2
LzEvQWtoQmZIX3B6T3hibmFyTUNQem5tZFp6Q0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGn6iFgc
tAO/VHSu9lhwSERYYu9p/EHdOWyxVuGYTDB1QrSVGXATe4kwKl9jOZxtTEp64OHp
3W/wuhLJN+WfQzWcCu0A3mrfhJR3C5SNO9Bw4xmcIgRaKm+6WCFvkOsLcfwrRhpa
+pMGFLywBMee/0HZo56AhHnfnf9d5nvuFSrrAyCJR3u4Jwlxgf80DbuKj+swWVjZ
KFq4Xem8TDnmPlAzrk86WbZmZ0B7nfRmVrxOhPQumkd7KfBrAfFwNstD+Kh7niu/
jqk5kM6c+aOASXoVohZ6X57NS16+SOO1VPGMAECnSvCktVXCQjGPFYVdTyy/loFh
hbuDXvUECB75ww==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:07 2026 by rpki-client