Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json)
Hash identifier: zERzEXJjozEAMOsMdSKFtVQPbhc+LJuYgmM+Cq0R0js=
Subject key identifier: C1:18:BD:C2:3C:FF:77:31:65:80:BD:67:58:96:5F:AF:90:99:21:0E
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 019F92B5F92E627EE2C084F1CE16C738DDDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
Manifest number: 0E5D
Signing time: Fri 24 Jul 2026 06:00:26 +0000
Manifest this update: Fri 24 Jul 2026 06:00:26 +0000
Manifest next update: Sat 25 Jul 2026 06:00:26 +0000
Files and hashes: 1: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: akikl2DwjxaSjB3HuHHL1jYMH5ZE6wp01rogrCQih2I=)
2: JsagPiEmN55sTDmTwaHLjITkfUM.roa (hash: +9MwVsIBoGNhZQCo9dDolHdn3lT7H9+sHTD/yJTV0oA=)
3: RDdfzHQIvdsdqJHF4YV_Xp1DNTA.roa (hash: vd/NjoqieFOKWnlLtrWuKUlxYWTJnOiCm9Hx+hskdwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b5:f9:2e:62:7e:e2:c0:84:f1:ce:16:c7:38:dd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Jul 24 06:00:26 2026 GMT
Not After : Jul 25 06:00:26 2026 GMT
Subject: CN=c118bdc23cff77316580bd6758965faf9099210e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:aa:55:f8:0d:50:01:06:5f:cf:6a:89:71:
8a:28:63:4e:5a:55:18:63:05:7b:39:42:d9:66:69:
f6:f3:4d:29:c6:41:11:38:c9:9f:89:87:aa:c0:da:
97:72:61:be:78:9c:75:75:db:a3:b3:da:73:2c:99:
36:fc:a8:b0:55:9d:02:aa:0b:41:5c:3d:17:9c:71:
17:ce:bb:70:dc:d9:da:65:9e:89:4f:df:3b:67:bb:
b3:2d:65:5d:14:fb:76:27:a8:91:77:29:05:ff:46:
d9:13:11:11:f9:39:c4:c1:9b:65:61:df:d2:c9:ad:
1f:24:56:a2:30:e6:c1:07:5d:44:32:b8:66:4e:79:
d2:9e:fa:7b:9e:21:28:12:39:ed:44:5c:fa:71:ac:
6e:62:a9:38:55:62:a5:57:b4:3f:ba:0f:37:f2:26:
d6:37:52:a6:1a:d8:dd:56:50:4f:63:6a:a3:46:99:
93:26:57:fc:9a:5b:9a:fa:6f:c8:91:d9:ff:3b:be:
4d:a2:9c:a7:31:15:37:e3:4b:42:1e:f6:79:f3:09:
6a:67:68:3a:cc:83:cf:28:ca:dc:26:7c:37:7d:1c:
b5:52:29:9a:fd:3d:7a:ab:77:d2:17:87:70:f1:66:
f2:34:fa:21:68:7c:36:12:a1:49:43:c4:d0:6e:6b:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:18:BD:C2:3C:FF:77:31:65:80:BD:67:58:96:5F:AF:90:99:21:0E
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:28:68:d4:f6:fe:3f:1f:05:f3:2e:c2:77:94:91:fe:7d:6c:
0f:25:f1:a6:15:64:86:2c:3f:5f:53:a0:d1:dc:98:5d:cd:b9:
2c:5f:49:96:5d:20:b8:0c:30:11:c6:51:01:6d:8c:e9:5e:35:
e3:4d:90:8d:52:cc:8f:33:8f:a9:a9:f9:a6:71:42:71:2d:d3:
c0:bd:a3:06:42:a6:95:8e:cc:b4:5a:90:90:e8:a3:b0:9b:aa:
2a:4e:ea:95:bd:20:47:0c:e6:89:07:16:50:82:db:d8:19:78:
85:5f:a4:36:2d:86:20:16:70:28:d3:21:74:2c:6e:05:da:66:
33:79:61:95:ec:98:9c:a5:ae:71:b5:e1:c5:da:ca:da:d1:ce:
21:d7:2b:eb:46:ba:6d:e4:92:23:2a:6b:27:f5:a6:3b:b1:2c:
49:10:f2:11:d6:9e:b8:51:c5:4c:34:80:32:d1:0f:6f:13:f9:
b0:30:97:6e:df:51:bd:11:ed:6b:d2:e1:11:b3:f4:39:65:a9:
87:a8:a9:2e:2d:67:9c:0c:ca:9f:91:87:1e:68:7d:f8:72:53:
2d:37:22:6e:6c:71:02:91:38:8d:a5:06:ca:63:14:b6:3a:1d:
c6:34:c9:68:a0:63:82:06:70:c1:cf:a2:90:cb:46:2c:67:0c:
b4:09:f9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:54:41 2026 by rpki-client