Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json)
Hash identifier: BkJybOmGRS8Mv4Ey4F7hG6kDcnWsbUepbIDaLrt85ew=
Subject key identifier: DE:DB:F4:BB:4D:FA:98:5C:18:82:12:CF:32:06:1E:76:97:66:EB:71
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 01A13D813AA4D1F9F02ED501358910FA30A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
Manifest number: 0F3A
Signing time: Thu 15 Oct 2026 03:00:41 +0000
Manifest this update: Thu 15 Oct 2026 03:00:41 +0000
Manifest next update: Fri 16 Oct 2026 03:00:41 +0000
Files and hashes: 1: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: GIf5JBGfYMy4FnWZcqo9ZRxc6NnW84pRlUBRwyAL0f0=)
2: JsagPiEmN55sTDmTwaHLjITkfUM.roa (hash: +9MwVsIBoGNhZQCo9dDolHdn3lT7H9+sHTD/yJTV0oA=)
3: RDdfzHQIvdsdqJHF4YV_Xp1DNTA.roa (hash: vd/NjoqieFOKWnlLtrWuKUlxYWTJnOiCm9Hx+hskdwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:81:3a:a4:d1:f9:f0:2e:d5:01:35:89:10:fa:30:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Oct 15 03:00:41 2026 GMT
Not After : Oct 16 03:00:41 2026 GMT
Subject: CN=dedbf4bb4dfa985c188212cf32061e769766eb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:0a:23:bf:53:b0:ec:4f:48:64:40:e6:03:
37:2a:43:84:5e:71:21:56:cd:83:92:ab:53:a2:5c:
a0:91:8b:96:20:db:c8:47:06:eb:5f:c1:fb:61:5c:
b1:77:c1:39:85:d8:c5:8b:e5:11:7a:c8:ea:bf:b7:
b1:80:5b:11:94:bf:26:b0:40:9d:d6:e8:95:cf:6c:
a2:61:5f:90:f3:88:d5:15:a0:32:56:c9:84:74:fa:
60:e6:1b:5d:a6:c5:68:69:ea:b7:fa:a9:3d:15:98:
f0:e2:0e:5a:fb:ad:e8:b2:4c:30:7c:19:b0:bc:39:
1b:3e:a4:66:fe:49:70:5c:9d:b6:ae:bb:10:13:c2:
f3:e5:ef:4b:b6:d4:c3:62:9b:a1:14:a6:b4:45:c3:
e5:d6:01:39:de:6c:2f:a1:37:12:6a:c5:cf:7e:4d:
31:d3:06:83:32:a0:4c:34:a8:20:14:54:35:0f:be:
28:38:ba:57:c4:17:59:01:60:e3:6e:e8:a3:3e:57:
fb:5e:67:b9:04:33:8a:4e:a4:bd:b6:e7:e5:01:f7:
6d:94:60:fb:1a:a7:79:fc:54:ef:7b:85:9c:9c:4b:
8f:35:e4:d8:8d:c3:6d:98:0e:3d:7a:86:b5:ea:c9:
66:f3:b4:4f:72:6f:8c:fb:93:57:f7:ed:7a:ef:ab:
4c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DB:F4:BB:4D:FA:98:5C:18:82:12:CF:32:06:1E:76:97:66:EB:71
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d9:72:b5:a9:07:22:25:d4:39:e4:44:05:d5:c7:79:5c:8f:
2e:e1:8f:fd:70:2f:19:db:1c:f8:6d:71:9c:a9:34:a9:74:56:
f0:0f:a6:ca:3a:8e:d9:cf:16:62:c0:4f:b5:3d:69:0f:1b:f4:
32:c3:ba:fb:30:48:05:63:c7:e8:83:b3:e4:31:75:5d:1b:45:
ed:37:db:a2:1a:e5:3a:09:18:d8:93:c1:e4:b9:aa:48:52:ff:
1e:44:bf:2e:4b:72:8f:3f:ad:a5:b3:fd:73:87:88:bd:69:50:
f8:fe:cd:47:53:95:40:8a:be:7c:cb:85:5f:37:f5:e3:c7:fc:
87:d6:3b:67:d1:d3:5c:bb:4b:47:6b:e3:9b:11:92:c8:64:b8:
3e:47:80:0d:66:d4:22:69:6d:3f:db:28:d1:ac:49:0f:cc:7e:
47:c5:17:f2:c0:63:4d:80:3f:26:27:64:69:96:fc:58:5d:4c:
f6:94:fb:5f:03:0f:70:ab:5c:2f:37:e5:c6:2a:25:a4:44:54:
0a:d8:7e:45:0b:ce:7e:b7:ab:37:07:ef:5b:d9:68:4e:86:65:
3c:5a:a6:62:82:bc:0a:65:f8:5e:12:62:be:3f:a5:9e:94:c4:
9d:6e:c0:0f:4d:da:36:b4:b5:e6:33:c4:96:9c:72:cc:ab:11:
a4:45:ea:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:30 2026 by rpki-client