Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
File: AkhBfH_pzOxbnarMCPznmdZzCIw.mft (raw, json)
Hash identifier: jW4xROBcH0MEf5ch6Slz6qo6GI2wroxNr/gvDSoxFnQ=
Subject key identifier: 91:1A:0B:5B:23:09:5A:62:E1:C7:D0:4C:70:07:31:CA:52:65:11:06
Authority key identifier: 02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
Certificate issuer: /CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Certificate serial: 019F1942FFE6DF44E2D303B407339262FEE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
Manifest number: 11BE
Signing time: Tue 30 Jun 2026 16:00:48 +0000
Manifest this update: Tue 30 Jun 2026 16:00:48 +0000
Manifest next update: Wed 01 Jul 2026 16:00:48 +0000
Files and hashes: 1: AkhBfH_pzOxbnarMCPznmdZzCIw.crl (hash: TRzBFcMp5kcorJ3T3pN3ht7LpDMQJ/fniW5bbk4uU8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:42:ff:e6:df:44:e2:d3:03:b4:07:33:92:62:fe:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Validity
Not Before: Jun 30 16:00:48 2026 GMT
Not After : Jul 1 16:00:48 2026 GMT
Subject: CN=911a0b5b23095a62e1c7d04c700731ca52651106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:72:2f:a4:33:6a:46:38:c7:22:e2:3b:1f:
bf:7b:fc:e4:39:76:4f:69:03:1f:7c:94:bc:99:44:
c2:1f:fd:d1:17:72:a0:5b:f4:26:5b:24:4e:3a:eb:
62:3c:df:18:ee:55:3b:0a:2a:34:46:0c:30:60:81:
5f:3a:27:63:cf:74:32:ed:bc:29:37:ec:f5:be:58:
50:00:a6:2a:85:2d:97:bd:ba:85:79:59:dd:98:af:
0f:cb:f7:56:14:04:12:ae:b5:58:57:32:28:a1:62:
fc:52:41:3a:fa:76:f6:87:18:76:49:51:68:25:59:
7b:06:85:4f:05:88:0d:23:dd:b2:5a:56:90:52:f1:
a9:b9:96:19:93:f5:9f:61:dd:97:20:3a:34:04:3e:
60:f1:9d:5a:0d:24:3c:d2:36:0b:81:74:f3:94:61:
38:80:90:bc:cd:a2:46:03:84:7f:c3:41:db:36:c0:
4d:fe:0c:0f:61:8c:7f:76:88:fa:97:a3:fb:e5:c9:
85:0a:fb:81:64:16:4d:ab:f9:94:42:c7:f1:71:7e:
d3:fe:f3:31:01:32:05:e5:48:e6:54:21:e8:b0:a9:
ab:71:e1:56:ed:d1:f3:aa:aa:2d:62:2a:fe:1d:27:
af:5c:f4:28:39:0e:1f:24:ca:c6:e3:80:90:5e:bc:
73:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1A:0B:5B:23:09:5A:62:E1:C7:D0:4C:70:07:31:CA:52:65:11:06
X509v3 Authority Key Identifier:
keyid:02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4e:f7:37:1e:2f:76:05:c4:80:9e:8d:eb:a9:f4:76:88:03:
7e:99:c5:f6:92:d9:f0:c8:99:a5:5e:53:fa:3e:a4:dc:da:c3:
a0:4b:43:06:75:49:0c:07:a9:05:6a:4d:d1:8b:0b:21:d9:b9:
04:a4:fb:7c:4f:97:16:ef:cb:6c:08:75:93:e5:26:ce:81:cf:
ee:c3:68:cd:bc:18:62:00:77:d4:5e:2f:ce:67:c3:5a:0f:79:
a1:5a:b4:27:2e:d1:18:da:38:08:49:89:85:87:94:0c:bf:ba:
53:46:53:52:79:5a:74:e1:37:62:90:e0:ee:e2:a3:98:d5:7a:
17:0d:c4:a0:6a:a0:74:94:44:26:65:1e:37:42:7c:c9:6b:d5:
49:fd:4a:a0:c6:4a:40:56:65:68:c5:14:5d:5e:61:b2:ea:02:
cb:d5:ad:d4:3e:8d:a1:0b:38:e1:7f:5b:43:62:c8:41:a8:c7:
c7:a8:40:82:72:7c:1d:f1:49:8a:01:eb:d2:8c:8e:00:e0:cd:
df:58:4d:44:aa:a7:27:e6:96:a7:f4:90:ec:1a:ff:59:0c:cc:
f4:17:22:f6:41:84:8d:72:65:ff:10:fc:1b:da:9d:36:9c:02:
03:2a:7b:71:3e:9e:ca:89:0d:96:04:b7:a8:66:90:18:9c:fe:
cd:92:b2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:11:24 2026 by rpki-client