Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
File: AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json)
Hash identifier: NV8wj7kSyppD31Z3ox0Ub4boKWCYrphRNPYFVjJPYtY=
Subject key identifier: 05:C7:78:45:45:F9:E7:25:6D:E1:CD:C5:94:01:0A:E2:EA:5E:5D:90
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Certificate issuer: /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial: 019D389BEB5047545E66C37D4775E4D80578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
Manifest number: 1152
Signing time: Sun 29 Mar 2026 08:00:35 +0000
Manifest this update: Sun 29 Mar 2026 08:00:35 +0000
Manifest next update: Mon 30 Mar 2026 08:00:35 +0000
Files and hashes: 1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: C07DmwH0jFsSBCkvsFY7i5GzBaAZrAPMDhjzE/1YPbE=)
2: mIZXI4mZrRbzXPh4YmTsjubQ1Zc.roa (hash: bzN5/dHvXtXSM/Oh2+pMoFqPyzgsKGPGMLfbcUvulmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:eb:50:47:54:5e:66:c3:7d:47:75:e4:d8:05:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
Validity
Not Before: Mar 29 08:00:35 2026 GMT
Not After : Mar 30 08:00:35 2026 GMT
Subject: CN=05c7784545f9e7256de1cdc594010ae2ea5e5d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:be:a1:35:5d:f2:5b:dd:b6:cd:c8:ca:9f:
9a:2a:63:ee:a3:56:69:40:8b:a5:8c:6f:3c:94:63:
0b:cd:0a:82:b3:a7:b7:94:25:0f:8a:4f:19:ca:43:
26:ea:7c:17:0b:a2:e7:e9:8f:ba:6a:e9:8e:0c:87:
bd:ed:6e:73:f7:03:a5:44:e9:15:a3:8a:cd:9d:d2:
97:d4:06:ad:c4:99:1b:ee:3c:33:75:37:87:d2:cf:
82:df:77:60:dd:5f:16:38:c8:c0:02:d6:9e:27:9c:
d6:14:15:f0:de:96:ba:19:cd:79:71:95:c9:a2:fd:
5c:f6:62:15:a2:dc:ae:b6:1c:5f:2c:be:7a:24:d9:
3e:58:19:68:80:58:b1:42:12:ab:3c:28:00:c6:09:
95:e0:9c:3d:b7:ea:f4:df:13:f1:65:67:66:eb:10:
3c:06:e1:60:a6:57:d8:5a:6d:bb:82:78:4d:40:92:
ca:2e:da:ab:84:f7:2e:0d:04:09:30:6f:f6:e4:f0:
05:e8:7a:9f:b1:0f:8d:e4:58:d7:d8:86:e9:68:10:
95:6e:45:70:08:c7:0f:a5:53:8b:fb:f5:87:d6:6e:
1f:a7:78:d6:f9:43:f9:97:d1:d5:4d:c6:82:7a:d6:
f4:ff:0e:99:8d:1f:ec:da:0a:47:6e:4a:8e:72:c6:
03:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C7:78:45:45:F9:E7:25:6D:E1:CD:C5:94:01:0A:E2:EA:5E:5D:90
X509v3 Authority Key Identifier:
keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e1:a2:f6:4d:e1:73:5b:dd:a0:17:2f:5c:a8:04:36:3e:a4:
2c:e5:93:ba:51:f9:44:1f:f3:eb:16:d6:10:a7:e6:2b:da:8b:
9d:59:47:c1:3a:82:0d:b6:d3:72:07:23:90:d2:15:8b:5b:cf:
2f:c9:49:7b:bd:f0:63:d9:13:cf:2b:f8:24:26:43:23:6e:23:
5a:c7:8a:f3:1f:0b:79:dd:8f:a1:64:ca:14:d8:5e:4f:ea:bd:
93:64:e4:1d:1e:92:5a:30:4e:86:5e:f5:23:f8:10:e0:46:bb:
14:c8:a2:9d:f5:70:60:80:80:bc:dd:6b:ec:79:e6:00:2f:2a:
fa:26:9d:2a:db:6d:4b:ba:39:fa:ef:35:63:4b:98:f0:80:e2:
8b:d1:56:57:15:2d:39:98:b9:eb:18:ee:c3:c0:73:31:15:c0:
ac:4b:9d:18:15:2a:97:f0:26:ca:bf:1f:1f:41:ec:e5:7f:7d:
db:4c:e6:d7:b0:d5:57:f0:80:27:09:3c:52:88:c6:fe:04:af:
bd:24:5c:27:4b:63:ed:3d:e2:43:5a:20:2b:0d:29:98:df:76:
07:bc:60:bb:14:b9:27:65:0e:8d:7d:d2:e3:a3:73:3d:fa:8c:
70:65:cb:2b:61:24:88:08:8c:a9:d1:6d:26:c6:d2:01:28:88:
5b:b0:5a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:09 2026 by rpki-client