
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json)
Hash identifier: ENdEuDP5PIlSUcGi5B1ZMzRxTLMacIzDZzF7QH8wSZc=
Subject key identifier: 07:D9:C7:86:38:EF:ED:AF:0B:58:16:3F:5D:78:2E:AF:12:E7:63:02
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 019F190CFB520E586927609E268494C80E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
Manifest number: 0E1E
Signing time: Tue 30 Jun 2026 15:01:48 +0000
Manifest this update: Tue 30 Jun 2026 15:01:48 +0000
Manifest next update: Wed 01 Jul 2026 15:01:48 +0000
Files and hashes: 1: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: BdZbx1fiNjglBCG+12C+EecOyG+pCR5wN72bHWzx4S4=)
2: JsagPiEmN55sTDmTwaHLjITkfUM.roa (hash: +9MwVsIBoGNhZQCo9dDolHdn3lT7H9+sHTD/yJTV0oA=)
3: RDdfzHQIvdsdqJHF4YV_Xp1DNTA.roa (hash: vd/NjoqieFOKWnlLtrWuKUlxYWTJnOiCm9Hx+hskdwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:fb:52:0e:58:69:27:60:9e:26:84:94:c8:0e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Jun 30 15:01:48 2026 GMT
Not After : Jul 1 15:01:48 2026 GMT
Subject: CN=07d9c78638efedaf0b58163f5d782eaf12e76302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:f2:23:0c:ef:20:99:3c:67:8e:3a:db:b5:
a6:42:50:76:a9:a7:d7:65:58:82:14:66:e5:fa:9e:
82:d4:fa:78:07:5f:d0:7e:09:33:70:1f:e9:d9:8a:
2d:17:da:ff:a9:b2:02:92:db:cd:a1:1a:c5:cb:73:
e7:a5:33:51:07:f2:29:e4:20:7a:cd:1b:32:db:d3:
ba:f2:da:c9:87:be:21:10:10:b0:46:65:88:93:c5:
56:af:00:5e:db:e6:b5:4a:13:c0:56:c0:93:b1:4d:
9d:92:e3:75:5a:30:d1:31:2b:19:49:ce:18:76:1e:
c9:8d:ac:6e:80:da:e4:de:45:dd:5b:05:d3:b7:55:
f5:f3:a6:3f:7e:41:d7:13:8c:df:6f:0d:b8:ad:1e:
2f:d0:ee:9d:7a:24:9d:90:64:12:41:cf:4e:66:3d:
4e:1d:47:b2:1d:91:fd:02:bb:93:42:35:d0:17:00:
9a:4b:71:d6:6c:27:e9:e7:ac:95:64:0d:3e:b7:b5:
0e:60:35:a5:d6:66:76:0f:61:2c:27:0b:6d:c0:0c:
ad:fe:2b:1d:55:a4:a7:00:a4:0a:e9:05:16:5d:7e:
64:39:06:c8:c2:94:1f:95:e1:8a:0b:31:07:f1:17:
ad:09:b3:76:58:1b:15:ef:08:0c:b6:24:be:9f:4e:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D9:C7:86:38:EF:ED:AF:0B:58:16:3F:5D:78:2E:AF:12:E7:63:02
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a4:e3:38:34:f1:c4:0f:8e:58:a6:04:ba:db:7b:76:cc:6b:
41:b5:da:15:97:fa:3b:bd:9c:e9:ac:3e:dc:19:fd:a3:2d:6b:
55:5d:df:de:5d:79:a0:d7:a1:1f:2e:8d:a6:42:ab:26:4d:46:
53:3b:e5:e4:db:d4:06:4b:f9:71:cb:89:d6:8d:cc:3a:d0:84:
fa:57:82:fe:22:a7:a2:5c:38:19:12:d7:92:ef:13:3c:02:cf:
49:82:8a:d7:a7:cf:7f:de:b8:c0:95:4e:3e:61:2e:50:95:8a:
b3:00:65:32:8e:4a:98:03:25:70:f0:6f:5f:5d:10:66:73:84:
eb:80:fd:89:39:e4:bd:78:eb:8a:7a:e6:2b:41:aa:70:65:1b:
d7:ea:93:bd:dc:e7:2d:d3:3f:06:ec:b4:fc:94:63:79:f7:8d:
5e:dc:6d:70:de:82:7c:14:e7:ac:f4:2f:db:b2:ec:f1:6e:d4:
e1:51:ba:fb:bc:5c:3a:7d:a2:22:ae:bb:55:91:b8:10:56:1c:
71:54:79:7e:bd:74:67:97:22:54:4c:d9:ef:85:27:b7:31:9a:
bd:b9:c1:8d:39:1a:3f:2f:5d:a9:a7:34:15:02:99:c8:43:38:
6e:39:99:b8:17:f8:7c:56:5d:c3:c8:b6:91:f7:4f:56:59:35:
8d:a1:bc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:21 2026 by rpki-client