Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier: gb9Ad2iAUiyqn43sfXE5cqCjjjkz0mmFQbshc4DJygs=
Subject key identifier: D1:89:2B:85:92:EC:B4:91:37:E2:98:2D:29:9A:F6:A2:6C:5F:84:0F
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 019D27043452B735B89385069A638C186367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number: 09EE
Signing time: Wed 25 Mar 2026 22:01:20 +0000
Manifest this update: Wed 25 Mar 2026 22:01:20 +0000
Manifest next update: Thu 26 Mar 2026 22:01:20 +0000
Files and hashes: 1: 8ujYHAx1H4lhOYDDoA3cTzuZ1o0.roa (hash: IzeovJpSEL6TwVj5FewH6ox1OkLfK9+IYF8XYtp5rMQ=)
2: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: ygGLafUdR1KshJu8CBSxccjUALHq3NtlqMisjAXRegg=)
3: MBROwpn7E_P7vCF37T3dw0M4yzM.roa (hash: G8TAGfvQzvXZYfrwzR9QmINSRsixI+9H36jSnh0IhZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:34:52:b7:35:b8:93:85:06:9a:63:8c:18:63:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: Mar 25 22:01:20 2026 GMT
Not After : Mar 26 22:01:20 2026 GMT
Subject: CN=d1892b8592ecb49137e2982d299af6a26c5f840f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:c3:69:43:19:4e:2f:f7:78:fa:8b:c1:4d:
9f:a7:3e:fd:28:b3:6a:63:58:11:25:c0:06:50:7d:
10:c9:62:6f:74:84:0e:49:f4:38:96:b2:47:30:0d:
9c:6e:ae:39:e0:d6:cd:3b:c4:0e:55:ba:b2:e1:3d:
dd:a8:c9:ec:b8:04:f3:e8:dd:bc:2c:af:41:50:b9:
6c:7c:37:57:7f:2a:61:95:e5:7b:8e:f2:aa:da:00:
dd:cd:3d:2a:f0:15:4b:a4:83:d4:c8:aa:8c:7d:81:
d7:6f:6a:67:e9:f2:86:52:88:e4:7b:e0:1d:cd:25:
4a:bf:be:d9:76:e3:2e:c7:4e:4d:96:6e:51:66:b8:
f1:dd:10:4e:c4:79:d3:55:3c:04:11:a0:30:2d:f3:
0d:59:bc:73:3e:4d:07:66:96:ff:e0:df:f6:cf:37:
1e:26:a4:1f:90:be:bb:31:fc:1f:bb:67:09:de:c3:
ac:0c:06:01:48:8f:6a:e9:36:2e:9b:ee:f0:98:ae:
11:82:f3:37:08:ed:06:75:e2:41:47:54:a1:97:75:
07:8a:0e:20:57:62:3e:87:26:a9:fa:e8:61:6a:31:
7c:40:ff:5c:ef:57:06:87:75:54:80:47:18:b5:25:
96:17:fc:53:59:a2:b8:19:c7:7a:1f:39:81:a5:57:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:89:2B:85:92:EC:B4:91:37:E2:98:2D:29:9A:F6:A2:6C:5F:84:0F
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0c:94:10:bb:88:71:50:72:37:b5:d4:1d:77:36:0d:6e:d0:
d3:f4:49:b0:ba:3b:09:24:1d:e9:3a:0a:9b:f9:12:c1:70:c9:
e4:46:4f:e6:5e:30:0d:24:5c:94:a2:8a:d2:05:88:f9:ef:b7:
fa:f6:a4:aa:b9:92:e7:df:42:fd:af:83:f7:30:48:6a:0d:0a:
52:3b:f2:7d:cd:2a:b6:cf:c3:18:2c:87:00:e3:ac:4e:b2:8a:
94:4f:b8:d4:a3:f4:00:e7:cf:fb:00:c1:e3:f6:5f:87:71:f1:
6b:e1:5b:5f:bb:62:94:9f:c1:33:3b:b8:ee:ec:13:b9:41:f7:
5d:0a:f0:4b:85:dc:62:28:54:e7:8c:a2:2d:48:4a:8d:4c:de:
22:4f:cc:e6:86:b9:31:4c:a0:5f:22:63:19:77:cc:d0:1c:b1:
8c:b8:50:19:30:34:a9:4c:08:9a:67:0d:02:82:08:f2:25:d4:
d5:fc:6f:40:9a:5f:76:c3:aa:a5:53:5d:21:dc:21:99:5e:dc:
69:72:bb:78:22:61:32:34:41:d3:32:0f:61:a3:98:69:9a:ad:
08:6c:44:d1:95:aa:9e:dd:9b:8f:ef:67:5d:01:f0:ee:2e:80:
db:bf:f5:f6:fd:b3:14:21:f1:d5:58:bc:e5:f3:e8:8b:6a:45:
ae:9f:b1:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBDRStzW4k4UGmmOMGGNnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDExNTQ0NjJlNWFkY2NhOWQyYmNiZDE0NDNmY2M2Mzc4
Nzk1MzcwHhcNMjYwMzI1MjIwMTIwWhcNMjYwMzI2MjIwMTIwWjAzMTEwLwYDVQQD
EyhkMTg5MmI4NTkyZWNiNDkxMzdlMjk4MmQyOTlhZjZhMjZjNWY4NDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MTDaUMZTi/3ePqLwU2fpz79KLNq
Y1gRJcAGUH0QyWJvdIQOSfQ4lrJHMA2cbq454NbNO8QOVbqy4T3dqMnsuATz6N28
LK9BULlsfDdXfyphleV7jvKq2gDdzT0q8BVLpIPUyKqMfYHXb2pn6fKGUojke+Ad
zSVKv77ZduMux05Nlm5RZrjx3RBOxHnTVTwEEaAwLfMNWbxzPk0HZpb/4N/2zzce
JqQfkL67Mfwfu2cJ3sOsDAYBSI9q6TYum+7wmK4RgvM3CO0GdeJBR1Shl3UHig4g
V2I+hyap+uhhajF8QP9c71cGh3VUgEcYtSWWF/xTWaK4Gcd6HzmBpVdPBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGJK4WS7LSRN+KYLSma9qJsX4QPMB8GA1UdIwQY
MBaAFAJBFURi5a3MqdK8vRRD/MY3h5U3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wOTc2MWQtNmU1Yy00NTFiLThlOGEt
ZTkyZWU1ZWVkMjI2LzEvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wOTc2MWQtNmU1Yy00NTFiLThlOGEtZTkyZWU1ZWVkMjI2
LzEvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQyUELuI
cVByN7XUHXc2DW7Q0/RJsLo7CSQd6ToKm/kSwXDJ5EZP5l4wDSRclKKK0gWI+e+3
+vakqrmS599C/a+D9zBIag0KUjvyfc0qts/DGCyHAOOsTrKKlE+41KP0AOfP+wDB
4/Zfh3Hxa+FbX7tilJ/BMzu47uwTuUH3XQrwS4XcYihU54yiLUhKjUzeIk/M5oa5
MUygXyJjGXfM0ByxjLhQGTA0qUwImmcNAoII8iXU1fxvQJpfdsOqpVNdIdwhmV7c
aXK7eCJhMjRB0zIPYaOYaZqtCGxE0ZWqnt2bj+9nXQHw7i6A27/19v2zFCHx1Vi8
5fPoi2pFrp+xkQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:20 2026 by rpki-client