Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
File: AkhBfH_pzOxbnarMCPznmdZzCIw.mft (raw, json)
Hash identifier: rvrXh8ET4NlHA8n3kEhYtlk/FfKuLkwZf6wwEjZzxtA=
Subject key identifier: F1:48:52:AF:9C:24:9A:07:DB:A0:C9:11:1D:DD:EB:72:C1:6A:B3:3C
Authority key identifier: 02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
Certificate issuer: /CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Certificate serial: 019D3866B6468CA4167AA53741972CE56CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
Manifest number: 10C5
Signing time: Sun 29 Mar 2026 07:02:28 +0000
Manifest this update: Sun 29 Mar 2026 07:02:28 +0000
Manifest next update: Mon 30 Mar 2026 07:02:28 +0000
Files and hashes: 1: AkhBfH_pzOxbnarMCPznmdZzCIw.crl (hash: 9/gtnu1T9APhdagSqTFxtSXAScAiyHolQS2hVEm/iu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:b6:46:8c:a4:16:7a:a5:37:41:97:2c:e5:6c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Validity
Not Before: Mar 29 07:02:28 2026 GMT
Not After : Mar 30 07:02:28 2026 GMT
Subject: CN=f14852af9c249a07dba0c9111dddeb72c16ab33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:32:25:b2:de:19:09:93:e3:b7:7a:c5:39:
29:ae:49:dd:44:f6:23:2b:58:2a:8a:dc:63:46:09:
cf:b5:3d:03:e7:0e:ac:bc:d7:d9:58:d3:2f:b3:22:
52:42:55:69:5e:d0:32:a3:a4:2e:52:29:53:65:91:
46:f8:ff:39:9d:e9:f3:8a:e2:a6:d3:fb:1c:71:99:
d5:ae:b6:c6:db:82:2e:bd:57:d9:86:18:6a:b9:98:
31:cb:4c:0b:84:74:01:c1:06:d2:32:7a:8d:56:ac:
46:54:76:2d:0c:d7:75:02:8e:b1:42:e2:0f:07:ce:
27:41:96:02:2a:47:95:40:7f:27:02:a6:c1:ef:35:
fe:96:36:1a:81:3d:16:6e:2d:6c:23:14:cf:96:5a:
cb:10:d5:cf:c7:06:05:2f:47:5b:31:60:af:3c:20:
f2:ca:06:5c:2d:15:72:8f:8e:f3:44:bd:7f:e8:61:
33:fb:4d:9e:bd:1c:87:cd:6e:9b:55:44:00:e0:b5:
ac:08:e4:f0:8a:d3:7c:91:db:1d:76:5d:c5:7d:03:
41:53:e1:74:ae:20:58:b0:60:fd:92:70:50:ff:cb:
21:78:33:71:d5:f7:77:df:45:23:37:9b:63:77:3d:
c6:8e:79:17:6d:39:a0:60:f3:2a:2a:bc:47:25:a2:
b9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:48:52:AF:9C:24:9A:07:DB:A0:C9:11:1D:DD:EB:72:C1:6A:B3:3C
X509v3 Authority Key Identifier:
keyid:02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3a:95:32:fd:cd:2a:3d:c0:6c:00:12:02:e6:81:51:6e:66:
fc:39:2a:e0:49:81:f3:39:2d:95:10:33:6e:de:a7:ae:8a:6e:
b8:ff:cd:69:e0:d2:6a:19:d5:6c:0e:94:67:52:79:a1:d6:54:
74:62:50:a2:2b:f6:c5:32:8e:b3:4f:22:a2:dd:ff:87:0f:9a:
9a:35:5f:4d:74:da:4a:bc:85:e1:61:a1:4a:b7:96:93:7b:ae:
97:16:2b:f3:38:cc:a4:93:7f:24:90:f1:a0:9a:6d:0b:26:ec:
b8:25:2a:d9:c5:25:8e:8a:7e:a3:f6:78:b1:7c:f0:95:f3:d3:
e8:0a:2a:cf:fd:ac:80:09:b1:17:6a:e0:66:c6:37:6f:9b:d5:
d6:ed:e1:04:a2:02:a8:d8:63:e6:ae:78:58:61:3d:39:35:fb:
14:ef:c7:94:25:09:dc:97:e8:5a:55:d2:e9:6d:d8:52:e4:e8:
2e:0a:51:6b:ff:83:b2:2f:77:44:ae:ae:c6:c7:20:0d:56:ab:
d3:d1:8e:a7:61:99:2a:86:28:11:f8:d4:e7:65:64:45:76:43:
53:81:17:56:72:9f:cf:5a:18:c6:77:8a:ee:9c:d1:33:94:bf:
0a:1d:a5:b2:73:e4:38:d0:ff:50:3d:fa:19:4f:0b:7f:b1:c5:
63:b9:7a:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZrZGjKQWeqU3QZcs5WyoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDg0MTdjN2ZlOWNjZWM1YjlkYWFjYzA4ZmNlNzk5ZDY3
MzA4OGMwHhcNMjYwMzI5MDcwMjI4WhcNMjYwMzMwMDcwMjI4WjAzMTEwLwYDVQQD
EyhmMTQ4NTJhZjljMjQ5YTA3ZGJhMGM5MTExZGRkZWI3MmMxNmFiMzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MkyJbLeGQmT47d6xTkprkndRPYj
K1gqitxjRgnPtT0D5w6svNfZWNMvsyJSQlVpXtAyo6QuUilTZZFG+P85nenziuKm
0/sccZnVrrbG24IuvVfZhhhquZgxy0wLhHQBwQbSMnqNVqxGVHYtDNd1Ao6xQuIP
B84nQZYCKkeVQH8nAqbB7zX+ljYagT0Wbi1sIxTPllrLENXPxwYFL0dbMWCvPCDy
ygZcLRVyj47zRL1/6GEz+02evRyHzW6bVUQA4LWsCOTwitN8kdsddl3FfQNBU+F0
riBYsGD9knBQ/8sheDNx1fd330UjN5tjdz3GjnkXbTmgYPMqKrxHJaK5JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFIUq+cJJoH26DJER3d63LBarM8MB8GA1UdIwQY
MBaAFAJIQXx/6czsW52qzAj855nWcwiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtoQmZIX3B6T3hibmFyTUNQem5tZFp6Q0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mMTY3OGMtZGRjYy00MjUzLTg1OTUt
NjNjNzA3NDQxYmE2LzEvQWtoQmZIX3B6T3hibmFyTUNQem5tZFp6Q0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9mMTY3OGMtZGRjYy00MjUzLTg1OTUtNjNjNzA3NDQxYmE2
LzEvQWtoQmZIX3B6T3hibmFyTUNQem5tZFp6Q0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTqVMv3N
Kj3AbAASAuaBUW5m/Dkq4EmB8zktlRAzbt6nropuuP/NaeDSahnVbA6UZ1J5odZU
dGJQoiv2xTKOs08iot3/hw+amjVfTXTaSryF4WGhSreWk3uulxYr8zjMpJN/JJDx
oJptCybsuCUq2cUljop+o/Z4sXzwlfPT6Aoqz/2sgAmxF2rgZsY3b5vV1u3hBKIC
qNhj5q54WGE9OTX7FO/HlCUJ3JfoWlXS6W3YUuToLgpRa/+Dsi93RK6uxscgDVar
09GOp2GZKoYoEfjU52VkRXZDU4EXVnKfz1oYxneK7pzRM5S/Ch2lsnPkOND/UD36
GU8Lf7HFY7l6Qw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:41 2026 by rpki-client