Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
File: AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json)
Hash identifier: yNYDnbyrebzfLKKgg2nAuNsOn/3ipx6sJwj4xyQAPUw=
Subject key identifier: DA:57:5A:42:1E:32:C5:35:0B:C4:01:78:27:F1:97:B3:86:CA:27:D5
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Certificate issuer: /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial: 01A16C484523314723CA53E2AE561AFA7FAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
Manifest number: 137F
Signing time: Sat 24 Oct 2026 05:00:37 +0000
Manifest this update: Sat 24 Oct 2026 05:00:37 +0000
Manifest next update: Sun 25 Oct 2026 05:00:37 +0000
Files and hashes: 1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: +02/BLwIFBbUu/BTBfsBLYJsGLa+auU4mEW2/Ml04Rs=)
2: mIZXI4mZrRbzXPh4YmTsjubQ1Zc.roa (hash: bzN5/dHvXtXSM/Oh2+pMoFqPyzgsKGPGMLfbcUvulmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:48:45:23:31:47:23:ca:53:e2:ae:56:1a:fa:7f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
Validity
Not Before: Oct 24 05:00:37 2026 GMT
Not After : Oct 25 05:00:37 2026 GMT
Subject: CN=da575a421e32c5350bc4017827f197b386ca27d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8b:63:ee:71:01:50:64:32:72:a3:b9:f3:a7:
35:e4:2c:3a:a3:c8:7e:69:ce:fa:d7:6b:bf:a7:78:
65:5a:0b:ee:c5:7d:04:08:7b:3c:8b:30:7d:78:cd:
14:e4:73:90:82:cf:38:61:ba:c3:fb:2d:64:23:3d:
4e:b6:41:f5:d7:56:d5:9e:13:7a:d1:d2:91:d3:5f:
50:7d:f5:21:d4:0d:0f:8a:69:9c:c2:9e:48:a5:c4:
e5:eb:96:10:06:87:39:06:8c:91:50:a0:55:7d:66:
cb:56:ea:29:46:b3:d0:63:10:54:f6:da:8a:a7:86:
fc:9d:25:d1:c0:ef:d9:b1:f8:d0:f6:b9:50:58:5f:
a0:29:02:e6:57:53:b2:51:1c:36:aa:de:21:4f:73:
c1:98:b5:d3:9c:b6:0b:1b:e1:f5:ce:dd:b7:78:34:
8a:04:9e:09:4a:06:bd:21:6d:8a:fa:d8:8c:6e:4f:
d1:3e:fe:7d:0c:cc:46:1e:c8:c5:41:93:f9:de:ce:
a1:db:51:17:b4:da:75:ee:cb:63:fd:27:e2:32:33:
7a:9c:28:33:b3:f4:59:94:78:9f:09:c0:5c:d8:5e:
e2:5a:80:fc:b2:b2:db:e1:ba:95:00:b8:15:e9:18:
69:da:18:5a:02:f5:ac:a9:40:23:2f:92:38:09:a7:
40:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:57:5A:42:1E:32:C5:35:0B:C4:01:78:27:F1:97:B3:86:CA:27:D5
X509v3 Authority Key Identifier:
keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:35:df:84:55:d8:a8:fa:cd:52:30:95:df:45:af:45:98:22:
5e:f1:2b:04:9a:86:16:37:c4:12:8e:5b:bf:07:11:88:19:50:
9c:f0:e6:63:70:c1:23:5f:bf:ce:e2:9f:a9:c7:31:26:9a:80:
1c:60:7f:42:5a:e8:cc:4b:40:3d:07:66:72:4e:db:08:df:10:
72:5e:06:35:3d:8c:f4:f0:9e:f5:17:df:7c:60:cb:05:92:d3:
87:86:82:0c:5a:62:83:ca:65:de:ad:01:44:ec:98:f3:59:3d:
60:a1:90:fe:23:f5:90:82:a7:d4:b9:82:0a:9a:68:6b:dd:60:
c4:93:7b:10:55:cf:34:64:fe:74:f5:c3:aa:75:6f:20:6d:01:
16:1b:85:cf:88:4d:07:06:73:e0:3c:34:df:70:2a:ff:84:d4:
21:81:b1:19:89:8f:55:cb:fb:4a:bb:22:b7:54:c7:af:71:eb:
64:b4:ac:e3:0f:4a:46:7c:99:a4:16:f9:be:2a:7b:09:90:87:
46:f5:e3:02:e1:e9:0a:89:b3:7c:4d:6d:57:bf:49:a5:91:42:
6e:60:45:16:2c:e3:df:65:f1:15:43:1a:e4:d2:3d:34:67:41:
44:45:0f:5b:70:53:04:66:f9:c8:e5:ed:12:79:7c:ed:04:4f:
83:ad:2f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:17:45 2026 by rpki-client