Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json)
Hash identifier: 8dj6/6RKIvRWgunxC/TDdnUYNyVjX0A8hTYHqQpX9ww=
Subject key identifier: D8:48:AF:A8:6D:2F:AB:C8:E7:83:E6:49:FE:65:EC:5C:44:57:74:D5
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 01A0DB048853771B62EBFE6D8FD4057079BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
Manifest number: 0F07
Signing time: Sat 26 Sep 2026 00:01:42 +0000
Manifest this update: Sat 26 Sep 2026 00:01:42 +0000
Manifest next update: Sun 27 Sep 2026 00:01:42 +0000
Files and hashes: 1: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: GoQgrpJSkfirEWhobap1h1xnP4bgFPw3swAq1tFDkQI=)
2: JsagPiEmN55sTDmTwaHLjITkfUM.roa (hash: +9MwVsIBoGNhZQCo9dDolHdn3lT7H9+sHTD/yJTV0oA=)
3: RDdfzHQIvdsdqJHF4YV_Xp1DNTA.roa (hash: vd/NjoqieFOKWnlLtrWuKUlxYWTJnOiCm9Hx+hskdwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:88:53:77:1b:62:eb:fe:6d:8f:d4:05:70:79:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Sep 26 00:01:42 2026 GMT
Not After : Sep 27 00:01:42 2026 GMT
Subject: CN=d848afa86d2fabc8e783e649fe65ec5c445774d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:2d:a6:9e:d2:e3:7e:38:f7:a7:57:a2:3c:54:
99:fe:46:a4:c9:2c:08:86:a4:12:5e:54:e3:b0:20:
0d:fe:09:4f:d8:16:3d:8e:5b:99:36:86:69:07:01:
da:fb:62:a4:36:aa:be:39:b3:1d:af:99:87:8b:5d:
25:17:01:1e:4d:ed:01:60:a6:b6:2e:b8:1c:ec:cb:
79:93:77:bf:94:2f:e7:58:ff:47:b5:6b:5b:99:a5:
2f:d8:c1:a1:d0:ce:54:f1:55:1b:7f:f9:03:5a:8a:
59:fc:0a:cb:7e:49:69:e8:e4:9e:75:af:35:5f:ba:
64:7e:8f:04:a7:cd:64:fa:cf:24:4a:02:49:74:00:
40:9b:b8:69:a6:3c:8e:58:4e:c2:0b:50:e0:3a:0b:
2c:60:94:87:58:09:c7:0d:11:f4:13:5a:7b:2a:e7:
aa:50:03:02:cf:02:ae:c3:5a:86:ed:63:da:15:43:
c4:0a:fa:3a:59:66:cf:4c:8b:b0:58:2c:85:4f:51:
fe:d1:77:37:1f:59:90:33:ad:44:04:14:0c:25:ee:
f8:fe:a1:f2:8b:66:37:31:7a:bc:40:75:5c:cb:4e:
a4:95:d1:5f:8d:07:b2:d4:ea:cf:d5:d1:3e:5a:98:
b1:9a:0c:ba:ab:75:a0:6c:ad:5f:68:ef:62:d3:61:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:48:AF:A8:6D:2F:AB:C8:E7:83:E6:49:FE:65:EC:5C:44:57:74:D5
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:44:8c:ac:43:cc:e3:82:aa:2f:c0:2f:c7:6e:0b:6c:d0:7f:
df:fe:f8:35:19:09:f4:97:e9:1b:e9:3c:3f:64:11:12:f1:97:
71:a7:f7:7d:49:82:c9:b8:d9:47:cc:ec:8c:83:e1:f0:01:d7:
c7:9c:61:db:c8:64:aa:a4:ca:fb:5c:4f:24:15:23:a9:97:78:
b0:d3:82:77:0d:dc:b2:fb:49:ac:80:15:6b:d2:90:d3:b5:1a:
84:36:54:0b:43:6b:0a:91:6e:5b:96:38:e5:19:ef:10:1c:c7:
3c:ee:4f:40:c5:8c:4f:26:0f:9d:dd:c5:c3:e8:b6:3a:23:d0:
30:7b:a0:e0:17:f4:2c:af:e8:17:75:d9:00:c9:6b:b0:ff:60:
61:a3:8b:28:c2:4d:ce:47:e0:9a:1b:fe:53:95:d3:fb:f4:e1:
fb:1f:f2:54:ff:7b:68:41:91:66:e7:c9:8b:8b:3d:fc:00:72:
28:70:21:05:e1:2a:8e:b2:3b:53:5a:b0:c0:a2:25:ea:b7:02:
4b:02:01:df:ae:b6:60:62:9f:f0:93:52:f8:43:6e:10:a0:6c:
98:8f:44:8f:b1:e8:ce:ea:cd:21:7d:52:e8:42:b5:02:82:b3:
89:96:29:5c:7d:d8:b7:f5:97:8a:31:a1:b8:0b:9d:cc:14:36:
3b:c5:7d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:01:49 2026 by rpki-client