Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
File: AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json)
Hash identifier: eBNgIF3XyMyP25NYARomp+O25bbpcN9kPEC/UJGVdDQ=
Subject key identifier: CB:C9:03:9A:9E:9A:7C:82:81:37:A3:3F:F3:16:34:2C:57:A1:BE:99
Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
Certificate issuer: /CN=00a856a4173895af44b8fd34455469a5c4d6173b
Certificate serial: 019D27047E0C5BE5C23D61D148AE3FBC17DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
Manifest number: 03CB
Signing time: Wed 25 Mar 2026 22:01:38 +0000
Manifest this update: Wed 25 Mar 2026 22:01:38 +0000
Manifest next update: Thu 26 Mar 2026 22:01:38 +0000
Files and hashes: 1: 2vNgKOpEbzaja_VIW4Gy_vX__vw.roa (hash: 3da40VmqFrVIzGNQWd74Q1I2LkbqTG2fl0jqzMqaDcU=)
2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: l140KA6MXV5/+0MBBLNvPohubl9mJSWP6OjAp3mSOWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:7e:0c:5b:e5:c2:3d:61:d1:48:ae:3f:bc:17:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b
Validity
Not Before: Mar 25 22:01:38 2026 GMT
Not After : Mar 26 22:01:38 2026 GMT
Subject: CN=cbc9039a9e9a7c828137a33ff316342c57a1be99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:51:dd:f2:03:69:f3:a0:c2:43:7a:8b:15:1b:
eb:53:f9:24:cb:e2:54:23:80:4d:3e:36:e9:08:aa:
54:d1:c1:d3:a6:1c:66:20:54:31:3d:0b:b2:4c:81:
72:04:7a:54:d4:9f:7e:d7:a5:8f:42:93:44:c2:d6:
a3:ab:c7:b5:83:80:12:9a:b3:26:95:34:db:41:0c:
65:0b:ff:15:28:c5:12:af:20:12:74:ea:c9:00:29:
c0:22:29:d4:89:86:43:e1:31:74:05:a7:22:32:bd:
99:30:0b:b0:de:4e:a0:46:f2:32:c8:4a:ec:2c:7b:
30:9c:9a:b5:5f:a3:45:17:3a:42:29:2f:49:84:59:
49:61:8f:c5:71:fc:90:aa:a1:bb:71:21:87:79:86:
39:df:07:3d:06:8c:43:a8:9a:c6:4e:27:4f:fc:6f:
bb:1f:ab:54:5f:16:e4:1d:9a:bc:92:31:ef:32:f6:
e6:d5:5d:cd:3d:29:df:fc:ca:1b:a8:a1:d0:2b:5d:
bd:a5:a1:8e:01:ba:bf:c5:4d:7b:30:4a:05:02:46:
8a:70:4c:9c:15:60:48:09:ea:72:71:c2:5c:1a:66:
5a:4d:93:d0:14:84:57:78:60:09:94:0e:0a:5f:76:
70:b3:bb:10:be:fa:6b:34:13:e7:d4:34:bb:99:bd:
b4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C9:03:9A:9E:9A:7C:82:81:37:A3:3F:F3:16:34:2C:57:A1:BE:99
X509v3 Authority Key Identifier:
keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c0:34:54:d7:e9:e5:4f:cf:c7:58:cb:61:fb:a2:c0:e9:6e:
b5:eb:fa:e5:98:70:2c:b0:6e:06:37:a5:dd:53:d9:b6:93:a7:
f0:89:7a:94:ef:82:f1:d0:3b:73:46:30:3f:c0:ea:0e:83:be:
06:49:83:3b:89:d3:c1:4a:32:f2:75:57:9b:28:f1:bc:3a:99:
85:f5:21:89:3d:e6:11:4b:44:e9:89:33:35:03:3d:4d:1a:44:
43:63:29:96:c2:4d:10:45:79:b6:b5:36:e4:e1:25:1d:1f:37:
78:98:04:b5:e7:00:0a:28:1c:1a:0c:e3:b8:ea:29:15:16:f2:
59:e4:b8:c3:12:91:7c:3d:40:99:f8:0a:c6:7d:b3:53:b3:a3:
55:bb:9e:d1:85:8a:78:d3:b3:c3:f2:6b:4d:1b:fb:30:f7:43:
cd:87:59:c9:b0:66:3a:9c:76:42:7e:53:b4:74:f6:0d:4b:46:
09:e0:3e:4a:ef:ad:6b:5a:91:35:f9:7d:76:f0:48:17:03:90:
f1:89:4f:62:92:99:85:62:f9:80:be:38:bb:0b:02:e2:0b:b0:
43:61:0e:5a:bc:78:de:74:56:f5:18:e5:26:43:33:11:9c:ed:
0f:71:ad:8f:1a:87:d0:88:d6:26:ba:21:42:7d:0a:af:94:b6:
06:71:5a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:01 2026 by rpki-client