Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json)
Hash identifier: /DKHtr9KaoBYMo/gG4g9zmn6FCjMwOj1lBuFf5qIZ40=
Subject key identifier: 7E:88:41:43:D5:2C:D7:54:6A:6A:91:7D:42:70:5B:EC:E4:AE:82:E0
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 019D2AAA0CED47F4B95E215730CAEE919CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
Manifest number: 0D1E
Signing time: Thu 26 Mar 2026 15:01:20 +0000
Manifest this update: Thu 26 Mar 2026 15:01:20 +0000
Manifest next update: Fri 27 Mar 2026 15:01:20 +0000
Files and hashes: 1: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: wqIeoMVBAUTSpigLC69tMnoXK1FGfIwY7StLq/DR5KA=)
2: JsagPiEmN55sTDmTwaHLjITkfUM.roa (hash: +9MwVsIBoGNhZQCo9dDolHdn3lT7H9+sHTD/yJTV0oA=)
3: RDdfzHQIvdsdqJHF4YV_Xp1DNTA.roa (hash: vd/NjoqieFOKWnlLtrWuKUlxYWTJnOiCm9Hx+hskdwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:aa:0c:ed:47:f4:b9:5e:21:57:30:ca:ee:91:9c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Mar 26 15:01:20 2026 GMT
Not After : Mar 27 15:01:20 2026 GMT
Subject: CN=7e884143d52cd7546a6a917d42705bece4ae82e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c1:df:f5:19:38:89:fa:d2:47:3e:2a:b1:44:
f6:62:83:84:86:a0:f7:93:21:fd:9d:07:ec:db:eb:
e0:f7:cc:43:be:4f:a6:83:28:8b:fb:ac:c4:54:03:
94:e5:49:9a:b9:f6:c0:72:f4:09:da:dc:34:ec:31:
cc:b3:7d:b4:24:7b:83:f2:b9:1a:ac:55:3b:ff:3f:
46:01:ed:f1:90:77:5f:4e:6c:71:1a:40:ca:a3:0e:
87:1a:70:63:f6:ab:42:a1:d1:5c:ef:98:ec:5d:d3:
34:3b:5e:9f:9f:99:3a:07:4c:c1:c4:d1:d4:6c:cc:
06:61:74:b9:50:e1:76:91:ad:05:e0:d4:97:d9:0e:
43:0d:f1:92:fb:4c:82:72:cf:b6:66:72:6e:34:eb:
60:16:9f:8b:29:c0:87:07:05:b5:82:6d:7c:99:09:
23:1f:fe:ff:6e:a9:4f:b5:31:98:ce:88:ef:00:34:
df:d4:75:09:55:4e:1d:32:9e:e0:cf:09:c1:4e:01:
a1:7a:53:3c:bb:bb:78:98:15:9a:28:ec:4b:a1:9c:
3b:a0:23:98:ce:38:37:1c:e0:d3:bf:f0:5f:6b:97:
c6:db:77:00:61:c7:d2:ce:83:17:01:d0:de:55:22:
6b:9b:02:a7:6b:70:24:f2:f6:f2:b9:1c:37:44:2d:
61:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:88:41:43:D5:2C:D7:54:6A:6A:91:7D:42:70:5B:EC:E4:AE:82:E0
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f1:90:25:e9:c1:a3:b2:21:e8:6c:d0:87:90:b2:c3:fb:43:
5e:6e:29:2e:f7:16:a6:29:a0:d4:17:09:70:d1:48:5f:0d:8b:
cd:c3:45:c8:fc:3d:bb:37:33:75:e3:93:d0:ba:8c:32:ba:4b:
7e:70:69:dc:9a:12:9f:79:3a:2f:37:05:b8:a7:da:7c:86:9a:
d3:4b:5b:5b:f4:2d:e5:02:fc:d5:49:b9:68:78:ad:bc:9d:ed:
2c:84:5a:4d:f0:92:0c:3f:c8:ef:c0:b4:7f:c0:3e:b7:d3:f5:
94:ff:27:e3:6c:99:b8:27:42:87:10:79:19:1e:06:4e:23:cb:
1a:83:71:ce:ce:03:20:af:17:ce:2a:09:16:fa:7e:10:50:2e:
b8:c4:d5:d0:6b:17:d9:6a:36:4e:42:f0:1b:5c:71:46:00:be:
9c:8e:c8:e9:c1:91:c2:99:45:70:67:c8:c5:99:5a:b2:a0:71:
27:bf:54:f4:20:3c:dd:b8:69:81:fe:13:2d:c0:35:2e:ca:95:
ee:2a:b8:6b:c6:36:52:2c:ca:76:c5:fd:6b:bc:b8:bd:cd:86:
aa:47:66:e4:0e:06:94:2f:6b:58:82:2e:6a:a3:7d:f1:6b:90:
9e:b1:87:89:cf:48:8a:79:0e:0c:61:d7:6b:aa:5d:25:a0:88:
13:c8:8f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:27:56 2026 by rpki-client