Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
File: AKGRL91T8vGf6bza51RJZoFZM8w.mft (raw, json)
Hash identifier: XMWSx5V/DDkkbFIcwLFFTGo1mSPDZmAAFTvCdZs0OKI=
Subject key identifier: 81:A8:63:4B:FA:ED:BD:60:D9:CC:7B:9F:89:50:FF:20:8D:B8:ED:74
Authority key identifier: 00:A1:91:2F:DD:53:F2:F1:9F:E9:BC:DA:E7:54:49:66:81:59:33:CC
Certificate issuer: /CN=00a1912fdd53f2f19fe9bcdae7544966815933cc
Certificate serial: 01A0E061D9E9182CB5985611EF20D29469E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKGRL91T8vGf6bza51RJZoFZM8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
Manifest number: 017B
Signing time: Sun 27 Sep 2026 01:01:44 +0000
Manifest this update: Sun 27 Sep 2026 01:01:44 +0000
Manifest next update: Mon 28 Sep 2026 01:01:44 +0000
Files and hashes: 1: AKGRL91T8vGf6bza51RJZoFZM8w.crl (hash: g3WS4m7M5C3OrqpeN7rgleh+LMtpfBSZdkWy8CQ1XNs=)
2: GzOvk8lHsu4BYLj1d10xgx8tglU.roa (hash: qwnpR7TfGpJqvG2MvNeXDUXWtBVeH7xIX0oA5goxnbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKGRL91T8vGf6bza51RJZoFZM8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:d9:e9:18:2c:b5:98:56:11:ef:20:d2:94:69:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a1912fdd53f2f19fe9bcdae7544966815933cc
Validity
Not Before: Sep 27 01:01:44 2026 GMT
Not After : Sep 28 01:01:44 2026 GMT
Subject: CN=81a8634bfaedbd60d9cc7b9f8950ff208db8ed74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:c0:81:53:03:c4:f6:dd:16:18:6f:eb:38:
51:69:18:51:c8:9a:3f:04:91:5b:93:a6:90:5e:e8:
94:4a:a3:f0:69:c0:c6:d8:bd:74:73:37:80:13:06:
5d:6e:43:c2:36:84:85:29:bb:bb:bb:d1:c6:0d:58:
65:63:e6:c5:4a:8f:9b:db:5e:b9:2d:b2:3c:d0:ec:
32:1a:74:de:09:97:f6:ae:d3:d8:24:3d:73:a1:5b:
23:fd:c0:3b:15:a1:b8:f3:9c:bb:10:b0:58:6e:85:
b2:48:db:56:cb:db:26:f4:a1:e7:91:2b:e2:09:70:
ad:60:41:64:f4:1e:24:63:f1:44:64:9c:0c:b0:7e:
7d:77:8e:6b:2a:9c:ba:a5:3e:92:cb:07:38:92:e6:
a5:79:f1:8d:52:44:2f:55:b0:85:be:13:2f:ba:ce:
7c:2f:8c:04:4f:40:89:1d:23:56:38:5a:38:6f:98:
5a:4b:e1:d7:ce:a8:59:0b:4a:e6:de:a3:11:91:dc:
75:40:6f:a6:65:a8:ab:cb:c7:22:0d:c3:49:55:98:
b0:69:db:8a:26:30:72:8d:d6:dc:73:b7:27:f9:e7:
3c:cb:3c:0d:6a:06:ce:aa:fd:69:91:55:4e:98:96:
55:36:b6:b8:64:a1:c2:8c:a6:22:38:57:0c:74:e1:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A8:63:4B:FA:ED:BD:60:D9:CC:7B:9F:89:50:FF:20:8D:B8:ED:74
X509v3 Authority Key Identifier:
keyid:00:A1:91:2F:DD:53:F2:F1:9F:E9:BC:DA:E7:54:49:66:81:59:33:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKGRL91T8vGf6bza51RJZoFZM8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:b4:d0:56:18:b7:fe:ca:9c:26:84:f4:e4:b6:46:9a:82:85:
5b:cb:ab:de:90:0a:a0:f2:9a:4c:2c:a2:9d:af:de:a3:31:42:
ef:e3:39:8d:bf:c9:9d:9a:51:6e:79:df:b2:95:60:c6:5b:fb:
d3:d9:73:89:a3:10:17:87:7b:25:af:63:cb:74:93:67:b1:27:
00:fc:ac:b8:a0:b4:d9:5d:0d:4f:11:42:21:02:8d:c4:a4:eb:
a7:c7:2d:0b:1b:9d:2a:ca:28:21:af:d1:0e:ef:5a:33:05:66:
36:db:88:b0:41:5c:6c:90:96:87:1d:c5:53:65:df:bb:f4:59:
21:6c:c9:b8:24:4a:c8:32:cd:1b:42:92:4c:11:31:fa:28:e2:
08:e2:73:7a:9c:1c:c6:d5:ff:d7:f2:d4:bc:df:b1:ef:f9:74:
ff:36:ab:69:6e:bd:09:67:e1:ac:a6:f2:81:a5:bf:50:56:45:
c5:6a:93:fc:59:f8:0a:39:18:f2:a9:d1:44:02:4c:b7:2a:5c:
77:11:c5:03:46:52:65:28:62:5e:04:07:d6:53:50:c5:63:86:
6f:3d:15:e4:ab:74:59:10:a5:33:62:76:a2:e6:e4:ef:51:4a:
e4:ad:14:36:c6:80:53:9a:c2:13:93:41:9e:9d:ab:c9:d8:60:
3f:f4:c5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:37:15 2026 by rpki-client