Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json)
Hash identifier: 178AbyZWoxoI/LJz76zbhHaUjcPWbIUpVEznB3mHI+0=
Subject key identifier: 35:24:B5:A6:06:52:53:2E:36:B4:11:00:63:B5:A6:37:DF:CE:DE:68
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 019E1C101D0591CE5DE398BC2ACEC47206DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
Manifest number: 0D9B
Signing time: Tue 12 May 2026 12:01:18 +0000
Manifest this update: Tue 12 May 2026 12:01:18 +0000
Manifest next update: Wed 13 May 2026 12:01:18 +0000
Files and hashes: 1: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: oMoYmU4PgYoXC/4WIqjNCzIpToucLB7eBiePceoEGN8=)
2: JsagPiEmN55sTDmTwaHLjITkfUM.roa (hash: +9MwVsIBoGNhZQCo9dDolHdn3lT7H9+sHTD/yJTV0oA=)
3: RDdfzHQIvdsdqJHF4YV_Xp1DNTA.roa (hash: vd/NjoqieFOKWnlLtrWuKUlxYWTJnOiCm9Hx+hskdwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:1d:05:91:ce:5d:e3:98:bc:2a:ce:c4:72:06:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: May 12 12:01:18 2026 GMT
Not After : May 13 12:01:18 2026 GMT
Subject: CN=3524b5a60652532e36b4110063b5a637dfcede68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:14:c6:a7:ef:e4:8d:50:21:ff:ce:fc:76:
78:16:3a:c0:cc:e3:3f:d7:b4:0d:5b:65:20:53:17:
9d:99:84:36:b5:9e:26:5a:18:28:e9:35:1b:90:1b:
36:3a:c7:03:69:6a:01:da:a9:05:16:d9:d6:d5:1f:
fc:c7:7b:d0:98:1d:39:59:9b:ce:ed:15:17:54:1b:
48:5a:77:2a:31:f3:41:78:1c:0a:30:86:c7:81:15:
c5:c2:b7:bf:84:d8:5a:35:09:b8:12:98:59:bd:5a:
84:a1:ae:7d:b6:01:3f:78:f1:7e:1e:86:59:d1:e1:
3e:67:b5:4b:84:bb:bf:c2:fa:35:c9:c5:b7:44:02:
7a:74:7a:25:9e:ed:37:15:b1:87:c8:a9:f6:72:ae:
8a:63:48:90:cc:59:d3:1c:0d:69:72:c3:bd:60:37:
05:3d:0f:dc:92:e3:13:60:c3:5c:62:76:46:da:9a:
d4:e9:dc:8c:0a:e0:22:ea:dd:4e:d5:ee:99:af:3d:
f2:89:89:d8:eb:8c:4f:f0:c6:ed:7e:d8:14:39:92:
27:9d:af:d9:ef:74:16:4a:a4:35:0c:dd:0a:94:f9:
84:85:b8:27:44:e3:a4:88:f0:fc:d6:d6:aa:1b:4d:
1f:59:11:de:81:bc:8f:9e:0b:35:ec:04:dc:06:71:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:24:B5:A6:06:52:53:2E:36:B4:11:00:63:B5:A6:37:DF:CE:DE:68
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f4:15:1d:13:0e:14:b7:7c:a4:82:d5:5f:bf:50:90:b3:bb:
0a:7e:fd:62:a3:cd:a7:30:b5:8f:9c:7d:a4:0e:12:7c:4e:59:
eb:66:e0:c8:b7:37:96:8d:44:d5:2d:9b:3a:e0:94:c5:32:63:
e6:8b:4d:81:aa:00:d8:6b:4e:68:e4:b2:60:da:4a:71:14:da:
ae:1d:5a:2a:87:5c:93:fb:35:03:a7:40:5b:cb:9d:b5:65:76:
6b:44:70:f8:be:7f:30:7b:a6:f7:66:a7:f6:d8:10:5d:87:9b:
ec:1e:51:3a:c9:dd:fc:07:fa:94:6c:38:33:ab:04:7f:60:2c:
9a:49:11:f0:f1:b0:20:35:4a:ca:66:6c:1e:a4:6c:dd:21:66:
5c:87:d5:3e:30:5c:31:a3:d6:c5:32:68:39:1a:c0:ad:cd:16:
45:11:8c:5f:33:b6:f3:f9:07:f6:17:da:74:b7:9a:e7:ca:fe:
60:39:35:05:5c:70:e0:98:27:ff:bb:d5:d3:80:ab:66:8f:80:
f7:cc:7d:9d:97:33:93:8d:02:ab:8f:bc:5a:7b:6e:03:c6:94:
f2:e9:f1:cf:a0:29:84:ab:d1:ea:72:ba:9f:d2:83:b3:49:52:
a9:d6:9e:04:0f:66:ed:84:92:0e:d7:c2:70:b5:3f:0e:9d:a7:
2c:78:5c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:24:04 2026 by rpki-client