Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier: lUzecPmkJ4txXaY3fZ/XMTR7iukn5nJAlYTnEgVwuK4=
Subject key identifier: 3A:BE:49:DB:85:6F:72:37:05:CE:18:3E:56:30:D7:D7:A1:19:ED:B4
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 019E1C466C7D7079B67BFEBC009E4F45E62F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number: 0A6D
Signing time: Tue 12 May 2026 13:00:37 +0000
Manifest this update: Tue 12 May 2026 13:00:37 +0000
Manifest next update: Wed 13 May 2026 13:00:37 +0000
Files and hashes: 1: 8ujYHAx1H4lhOYDDoA3cTzuZ1o0.roa (hash: IzeovJpSEL6TwVj5FewH6ox1OkLfK9+IYF8XYtp5rMQ=)
2: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: fRm8cKERjceYLe6727krqRJ5f7O38/TJ2rkK0U8WcOE=)
3: MBROwpn7E_P7vCF37T3dw0M4yzM.roa (hash: G8TAGfvQzvXZYfrwzR9QmINSRsixI+9H36jSnh0IhZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:6c:7d:70:79:b6:7b:fe:bc:00:9e:4f:45:e6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: May 12 13:00:37 2026 GMT
Not After : May 13 13:00:37 2026 GMT
Subject: CN=3abe49db856f723705ce183e5630d7d7a119edb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:02:22:e9:00:f5:65:91:30:99:c6:eb:74:27:
51:0b:87:18:04:2b:bc:8c:0a:ea:df:d8:f0:d7:48:
01:1f:20:e4:fa:08:5c:f7:bd:09:03:7c:b1:7a:77:
94:9a:03:8a:43:49:59:ad:1d:fc:3a:31:3d:33:78:
6d:67:ed:bc:62:35:10:15:c3:02:c5:9e:9b:00:11:
3f:93:cd:de:bc:af:50:37:74:a9:ae:8d:16:a5:9c:
2a:e5:b1:94:b2:ab:2d:0d:27:10:0f:22:08:06:6c:
7c:18:f0:34:89:a3:29:6e:0c:6d:5b:54:15:0d:4e:
85:fa:6a:ae:b7:d8:e0:93:2a:5d:e6:15:b1:26:eb:
aa:17:75:dd:de:e9:8e:54:ff:7b:7b:0f:08:31:7f:
f3:13:a2:54:79:f9:a5:41:6a:d6:22:e5:43:e7:b7:
df:bf:ab:1d:19:39:1d:b3:fc:23:dd:74:33:84:f9:
4a:af:f5:71:b7:ef:6c:5a:e3:a3:57:de:07:30:88:
73:63:95:fd:33:c8:f3:0c:50:8a:2b:d8:1b:c5:16:
7d:e0:d4:fb:e2:b8:db:89:ce:d9:30:06:1d:79:40:
2e:0b:7d:a3:0b:4d:ca:0c:17:42:a0:3c:17:03:2b:
f4:e7:6b:8c:20:c9:62:78:4b:c5:08:90:2e:f6:92:
23:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BE:49:DB:85:6F:72:37:05:CE:18:3E:56:30:D7:D7:A1:19:ED:B4
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f8:40:85:70:e0:29:ef:60:5d:23:d3:d3:3a:ce:35:b0:be:
b2:57:9a:c3:2d:51:0c:5a:1b:fd:c8:57:b4:6f:d1:cf:c2:1d:
c3:05:1e:c0:b3:18:8d:78:22:42:0d:43:62:28:ef:c8:55:16:
a9:d7:b6:19:d7:4b:df:74:51:4c:4f:de:a8:56:35:b6:e8:f6:
8d:6a:70:b2:c2:75:2b:a6:d5:47:3f:79:e9:4e:30:27:7e:fb:
f3:e6:ce:bd:2b:b7:cf:70:8c:16:5f:da:86:b2:21:cc:19:ab:
4b:3e:1a:27:6c:1d:11:c4:ad:8f:8d:e7:18:6e:d4:a5:74:48:
60:fd:4d:ca:d1:30:52:09:f6:2f:bd:40:4f:ac:3b:46:fd:a5:
61:83:e7:86:a1:07:eb:88:d2:0e:9b:83:31:0b:4b:39:2a:1e:
c9:3e:4c:af:f5:62:3a:78:2c:7a:63:71:0e:ea:98:79:c9:fd:
fa:ba:81:ab:c9:fc:ed:78:ed:b6:dd:a9:8d:ab:a5:fc:2f:3a:
4f:a3:e5:fa:5b:d3:b9:5e:96:1f:0f:5a:04:4f:bf:4b:d1:5f:
bb:cb:f2:53:52:40:41:0c:60:61:f8:45:0f:f2:60:3a:41:bb:
ac:5c:51:7c:0b:a4:be:b1:e7:e6:1f:35:d7:c3:83:bb:46:5c:
0d:1b:8a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:44 2026 by rpki-client