Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json)
Hash identifier: 2C6J5ZpgkekAyPC1rb0ULwzDxju7wb4O8KLM7lsdrog=
Subject key identifier: 44:1A:A7:89:5A:A8:5F:F2:7D:89:55:5F:44:A4:1D:99:3A:BD:8D:EE
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 01A000CA9B74B12B93F1115665AF386F47A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
Manifest number: 0E96
Signing time: Fri 14 Aug 2026 15:01:12 +0000
Manifest this update: Fri 14 Aug 2026 15:01:12 +0000
Manifest next update: Sat 15 Aug 2026 15:01:12 +0000
Files and hashes: 1: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: ZDUGMhlzwMOfVT3YRW1PqM3pKbOVo5rhGgWRdXsK9E8=)
2: JsagPiEmN55sTDmTwaHLjITkfUM.roa (hash: +9MwVsIBoGNhZQCo9dDolHdn3lT7H9+sHTD/yJTV0oA=)
3: RDdfzHQIvdsdqJHF4YV_Xp1DNTA.roa (hash: vd/NjoqieFOKWnlLtrWuKUlxYWTJnOiCm9Hx+hskdwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:9b:74:b1:2b:93:f1:11:56:65:af:38:6f:47:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Aug 14 15:01:12 2026 GMT
Not After : Aug 15 15:01:12 2026 GMT
Subject: CN=441aa7895aa85ff27d89555f44a41d993abd8dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ab:d3:45:ec:1d:50:cc:f4:4e:bb:f9:fd:ac:
bd:1c:53:a1:09:1d:00:05:f7:f0:31:e6:8e:26:5d:
9d:92:f1:ee:cb:12:2d:46:34:2e:81:03:ea:43:0a:
2f:d1:a6:97:d2:c8:d5:4e:8d:1d:f8:80:90:0e:7e:
db:a7:e6:91:47:30:95:55:36:d1:6e:6d:ae:e2:ad:
da:19:86:fe:c0:a1:59:e7:85:6b:a4:1d:d9:00:ae:
7d:7a:d4:46:a6:8f:6c:25:6e:1f:c0:bb:3f:0e:d8:
09:64:26:f6:96:5d:00:00:d6:48:c3:8c:c2:bb:e6:
28:e5:56:9a:46:a8:18:25:6c:e0:c3:43:c2:91:fb:
b6:bd:08:a4:ec:34:0a:c5:c8:77:6f:39:b0:b9:c3:
e1:39:42:db:04:75:12:d8:f0:0d:67:82:a7:7c:3b:
f3:70:b2:94:43:fe:3b:05:b9:a5:70:6f:52:8c:c1:
e1:57:c8:21:a8:c9:a1:90:96:8f:c6:26:9e:bf:d8:
a2:48:05:e3:c3:a1:e3:53:00:0c:62:8c:54:bd:23:
68:f8:e3:10:95:e6:fd:7d:67:2e:ef:79:73:61:10:
b2:48:26:94:81:f9:7b:f9:ea:3f:3d:01:c4:e4:91:
e8:f5:3b:14:63:1f:bb:cd:06:ff:c8:28:35:f4:13:
d8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1A:A7:89:5A:A8:5F:F2:7D:89:55:5F:44:A4:1D:99:3A:BD:8D:EE
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a5:3c:05:73:0f:e0:74:9e:b6:c1:e4:cc:7c:24:50:0d:27:
50:80:ab:a4:71:8b:a0:1c:62:eb:1b:5f:ca:e6:0b:8f:ec:8a:
ce:ac:fd:43:18:00:50:d7:bf:3e:f4:a6:c5:f6:f2:5f:c7:2f:
e5:bb:05:75:09:b5:cd:6a:67:6f:3d:99:02:ab:8b:4d:6a:5a:
7b:e4:c7:6e:d7:e2:9b:82:86:03:2c:84:ba:eb:b7:81:eb:f6:
58:82:20:2f:51:b6:b0:3e:99:e5:1e:75:f0:a2:ef:48:28:8e:
e4:db:3d:4a:05:a3:54:10:14:ea:cd:91:68:66:79:fd:02:4e:
8b:e5:ef:17:25:41:cc:c8:f9:c7:4a:cc:c8:3e:52:2a:bd:d9:
9e:3d:2d:29:20:72:37:e4:1b:de:a5:18:94:88:0b:82:f8:13:
ec:a8:6c:c4:ce:a5:68:a1:89:e4:8f:5a:a5:b4:87:e2:f7:f2:
09:cf:e5:6a:fd:0f:47:13:fa:69:cd:a9:22:1e:15:10:a0:37:
83:fb:dd:dd:3d:8f:f5:86:b3:53:8a:78:56:dd:7a:67:31:dc:
13:6e:53:63:17:3f:44:e8:8b:cc:31:1a:32:0f:2b:0a:cc:db:
7a:e1:20:36:e2:ea:c5:c7:e0:44:6e:e5:e9:43:ee:2a:a8:cd:
a9:1f:28:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAypt0sSuT8RFWZa84b0elMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWQ2ZDgzYzgwODM3MjlkN2E5ZDg1NzFkNjVjZTk3ZTA1
OGI4MjEwHhcNMjYwODE0MTUwMTEyWhcNMjYwODE1MTUwMTEyWjAzMTEwLwYDVQQD
Eyg0NDFhYTc4OTVhYTg1ZmYyN2Q4OTU1NWY0NGE0MWQ5OTNhYmQ4ZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2avTRewdUMz0Trv5/ay9HFOhCR0A
BffwMeaOJl2dkvHuyxItRjQugQPqQwov0aaX0sjVTo0d+ICQDn7bp+aRRzCVVTbR
bm2u4q3aGYb+wKFZ54VrpB3ZAK59etRGpo9sJW4fwLs/DtgJZCb2ll0AANZIw4zC
u+Yo5VaaRqgYJWzgw0PCkfu2vQik7DQKxch3bzmwucPhOULbBHUS2PANZ4KnfDvz
cLKUQ/47BbmlcG9SjMHhV8ghqMmhkJaPxiaev9iiSAXjw6HjUwAMYoxUvSNo+OMQ
leb9fWcu73lzYRCySCaUgfl7+eo/PQHE5JHo9TsUYx+7zQb/yCg19BPYmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQap4laqF/yfYlVX0SkHZk6vY3uMB8GA1UdIwQY
MBaAFACtbYPICDcp16nYVx1lzpfgWLghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kYjI5MTItODlhOS00ZWU5LTgyMjkt
YTU1Zjc3YjgzZTZiLzEvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kYjI5MTItODlhOS00ZWU5LTgyMjktYTU1Zjc3YjgzZTZi
LzEvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKU8BXMP
4HSetsHkzHwkUA0nUICrpHGLoBxi6xtfyuYLj+yKzqz9QxgAUNe/PvSmxfbyX8cv
5bsFdQm1zWpnbz2ZAquLTWpae+THbtfim4KGAyyEuuu3gev2WIIgL1G2sD6Z5R51
8KLvSCiO5Ns9SgWjVBAU6s2RaGZ5/QJOi+XvFyVBzMj5x0rMyD5SKr3Znj0tKSBy
N+Qb3qUYlIgLgvgT7KhsxM6laKGJ5I9apbSH4vfyCc/lav0PRxP6ac2pIh4VEKA3
g/vd3T2P9YazU4p4Vt16ZzHcE25TYxc/ROiLzDEaMg8rCszbeuEgNuLqxcfgRG7l
6UPuKqjNqR8o5g==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:24 2026 by rpki-client