Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json)
Hash identifier: IsZbIr7yWEPeA1EaK6Wl5i2rHCWylVtS4a30ZN/WKsE=
Subject key identifier: 61:3D:37:02:88:3E:36:BF:73:81:0D:38:1F:16:AB:8B:88:D1:F1:6B
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 019D3A1CFE1CB60DADA8CEC7A70C3392203C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
Manifest number: 0D26
Signing time: Sun 29 Mar 2026 15:01:11 +0000
Manifest this update: Sun 29 Mar 2026 15:01:11 +0000
Manifest next update: Mon 30 Mar 2026 15:01:11 +0000
Files and hashes: 1: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: 4fScUjJ0gyp5jlq7gQex9r2CMGLnghioFSYR42pn8hQ=)
2: JsagPiEmN55sTDmTwaHLjITkfUM.roa (hash: +9MwVsIBoGNhZQCo9dDolHdn3lT7H9+sHTD/yJTV0oA=)
3: RDdfzHQIvdsdqJHF4YV_Xp1DNTA.roa (hash: vd/NjoqieFOKWnlLtrWuKUlxYWTJnOiCm9Hx+hskdwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:fe:1c:b6:0d:ad:a8:ce:c7:a7:0c:33:92:20:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Mar 29 15:01:11 2026 GMT
Not After : Mar 30 15:01:11 2026 GMT
Subject: CN=613d3702883e36bf73810d381f16ab8b88d1f16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:b8:fd:0d:fb:12:89:8c:67:12:1d:e1:41:
73:e2:3f:5b:00:fc:49:e9:f4:7f:2a:7c:6b:74:12:
cc:61:c8:12:9a:00:7d:9c:ca:f7:0a:f0:eb:9f:30:
01:80:76:7a:c6:9d:74:a7:80:b7:53:48:b8:50:4a:
18:4b:19:5f:6d:99:88:b4:e2:81:dd:1a:0c:89:36:
9c:7c:ba:ec:63:c4:60:eb:83:59:2e:70:36:bb:3d:
e5:ae:c4:7c:bc:fe:b2:88:d9:cb:fb:8a:28:12:bc:
48:35:fe:b2:81:39:0b:db:da:70:c5:e3:77:3c:b4:
2d:6f:53:db:60:7a:13:1c:aa:64:0d:d2:ee:de:57:
25:7f:31:fc:4b:5f:c4:f1:b2:6f:6f:8e:43:d6:ec:
4c:6f:6e:ea:82:60:a6:2b:4c:e7:d5:3d:e6:c5:09:
94:35:be:c6:91:c7:13:d1:bc:31:83:4c:88:5d:aa:
f1:de:e6:4f:0f:58:d2:72:e0:91:d1:ce:c3:19:1b:
48:2e:07:f8:6f:6b:7a:dc:28:7e:e1:94:a3:21:40:
4e:61:0a:4c:31:8d:cd:cb:bd:9a:cf:b6:64:07:3d:
c0:65:db:22:34:1e:1c:60:94:d8:51:7b:c3:f2:16:
13:73:aa:5d:22:60:f0:17:85:94:83:e1:6b:42:43:
29:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3D:37:02:88:3E:36:BF:73:81:0D:38:1F:16:AB:8B:88:D1:F1:6B
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a8:ab:bc:ae:73:34:91:d6:53:37:85:94:5a:12:ef:9a:9d:
ff:7e:0e:c1:be:cc:cd:5c:ef:ed:84:61:e9:f0:6b:73:63:08:
9f:bc:07:b0:e4:48:7b:c2:a6:3b:72:c1:e3:d0:32:97:e6:94:
aa:fd:15:a5:dd:9b:f6:e0:ef:b2:06:aa:d7:9b:b6:a0:11:0f:
4a:6a:bc:94:14:8b:31:30:e3:34:82:89:2f:6a:6e:0e:b3:dd:
d8:b9:b6:7f:ee:0e:a4:0f:eb:d6:83:ca:2d:c5:ff:7e:5a:7c:
3e:60:9e:7a:89:3f:2c:9f:99:64:a3:db:1e:51:ab:16:5d:1f:
ff:5c:1e:7c:bd:d6:3b:fa:87:46:67:61:63:84:b5:e2:72:88:
88:2c:86:56:80:da:c9:cd:c3:23:a6:75:62:04:1b:20:25:e2:
04:44:7d:dd:fb:5e:c9:85:eb:eb:a1:6b:76:09:3a:b9:25:94:
ce:18:19:0a:bd:b9:16:54:87:7f:9f:fb:8f:60:0f:f6:f7:7e:
00:64:75:55:a0:b6:f3:b7:f3:4d:b2:80:b3:94:37:2a:aa:68:
b4:94:40:de:e9:30:72:b6:f9:23:bc:eb:bd:fc:2a:bd:47:2a:
fd:45:a9:e2:18:79:ee:02:19:60:a6:fb:25:6f:a2:7e:f2:e4:
63:05:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:27:53 2026 by rpki-client