Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier: FGMVI5wfKwDBSY0md5JT0N3mPgc3vUNKAkw0ay+mU1s=
Subject key identifier: B9:BD:E7:D7:30:83:F2:00:F1:AB:B6:64:9A:C2:47:19:4E:7D:C4:60
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 019CE55A9CA82AD95621D53F03A149A5C397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number: 09CC
Signing time: Fri 13 Mar 2026 04:00:46 +0000
Manifest this update: Fri 13 Mar 2026 04:00:46 +0000
Manifest next update: Sat 14 Mar 2026 04:00:46 +0000
Files and hashes: 1: 8ujYHAx1H4lhOYDDoA3cTzuZ1o0.roa (hash: IzeovJpSEL6TwVj5FewH6ox1OkLfK9+IYF8XYtp5rMQ=)
2: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: yWEihgJrQP1e/diEielyf9tT0pPhmT86TgVC62cqE5c=)
3: MBROwpn7E_P7vCF37T3dw0M4yzM.roa (hash: G8TAGfvQzvXZYfrwzR9QmINSRsixI+9H36jSnh0IhZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:5a:9c:a8:2a:d9:56:21:d5:3f:03:a1:49:a5:c3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: Mar 13 04:00:46 2026 GMT
Not After : Mar 14 04:00:46 2026 GMT
Subject: CN=b9bde7d73083f200f1abb6649ac247194e7dc460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:68:80:2b:c3:57:81:d4:de:7d:14:c9:d0:af:
e5:d3:73:c7:b9:93:65:ae:30:1a:ae:47:d0:9e:cb:
d6:e3:f0:14:53:06:af:9b:78:d0:dd:58:88:e3:aa:
6d:3c:13:bf:c3:a0:d7:6e:c9:2a:62:1a:71:0d:cc:
ea:b5:38:20:c5:5e:ff:f4:f1:fd:4f:36:0d:59:09:
98:3a:59:a0:11:70:1e:bf:ed:30:ca:f6:e7:4a:9a:
a6:41:c8:b2:c3:f1:bc:b3:13:ea:2c:b0:31:4e:31:
02:92:6e:88:33:ab:42:e4:71:4b:c1:44:9d:8c:af:
f8:e5:36:ac:a0:a1:e5:f6:bc:1c:79:f6:c6:c2:a7:
ee:40:3c:3b:fd:2e:e3:71:7e:01:7c:ab:0c:44:fb:
65:97:67:01:f7:95:5f:e8:89:a5:5b:4c:04:ad:94:
5e:90:10:c1:bb:ee:92:f0:61:21:d5:f2:74:e0:53:
27:f7:09:d5:99:77:3e:11:31:19:3d:f5:e8:ff:d2:
2c:62:25:57:dd:5a:f5:58:f2:2c:42:21:d6:d4:41:
d9:d4:eb:16:49:48:94:4f:d5:de:d1:8d:42:78:63:
c7:3c:a4:82:68:25:0b:7e:05:f3:dc:34:dc:33:f3:
bf:76:2d:ad:6d:2d:63:79:89:45:5f:a0:9f:47:89:
86:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BD:E7:D7:30:83:F2:00:F1:AB:B6:64:9A:C2:47:19:4E:7D:C4:60
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ff:74:22:94:c6:db:38:33:20:24:01:1a:8a:22:3d:35:48:
7f:08:64:64:2e:ca:7e:fb:da:ea:c9:16:c8:2f:31:0a:14:1b:
51:eb:34:e3:97:b6:68:a2:e1:3b:14:05:25:99:86:c8:03:c0:
39:54:c3:e1:df:bd:b3:35:6f:d2:71:49:9d:4d:95:9e:31:44:
c1:f1:19:86:02:4e:7e:63:c8:f2:c2:02:48:76:a2:f4:1f:05:
e9:e7:9a:bf:77:65:df:9d:c4:ec:ed:72:96:eb:58:51:18:16:
f9:fe:4f:36:03:3b:f3:3b:c3:b0:bd:01:3b:af:18:95:07:75:
e5:12:ab:9d:24:e7:4c:82:2a:fe:39:fb:46:22:db:31:7d:56:
9a:6e:ec:8c:8b:88:c4:35:60:df:56:4a:26:ad:06:29:69:f3:
99:70:ab:ee:a3:ea:e7:b1:28:05:dc:a9:68:7b:ca:06:f6:82:
2a:53:be:9b:3e:4f:dc:c8:01:fa:22:6f:e0:d1:1d:0e:48:2c:
e3:42:e6:f1:29:1a:45:87:14:7a:db:14:c1:76:53:aa:50:44:
49:d1:26:c4:de:34:5d:a9:59:44:8f:dd:00:9c:29:d8:12:ac:
0f:d7:0e:2d:ac:f9:c5:b3:60:a5:bd:dd:68:84:a4:09:dd:bf:
57:6b:53:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlWpyoKtlWIdU/A6FJpcOXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDExNTQ0NjJlNWFkY2NhOWQyYmNiZDE0NDNmY2M2Mzc4
Nzk1MzcwHhcNMjYwMzEzMDQwMDQ2WhcNMjYwMzE0MDQwMDQ2WjAzMTEwLwYDVQQD
EyhiOWJkZTdkNzMwODNmMjAwZjFhYmI2NjQ5YWMyNDcxOTRlN2RjNDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2iAK8NXgdTefRTJ0K/l03PHuZNl
rjAarkfQnsvW4/AUUwavm3jQ3ViI46ptPBO/w6DXbskqYhpxDczqtTggxV7/9PH9
TzYNWQmYOlmgEXAev+0wyvbnSpqmQciyw/G8sxPqLLAxTjECkm6IM6tC5HFLwUSd
jK/45TasoKHl9rwcefbGwqfuQDw7/S7jcX4BfKsMRPtll2cB95Vf6ImlW0wErZRe
kBDBu+6S8GEh1fJ04FMn9wnVmXc+ETEZPfXo/9IsYiVX3Vr1WPIsQiHW1EHZ1OsW
SUiUT9Xe0Y1CeGPHPKSCaCULfgXz3DTcM/O/di2tbS1jeYlFX6CfR4mG7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLm959cwg/IA8au2ZJrCRxlOfcRgMB8GA1UdIwQY
MBaAFAJBFURi5a3MqdK8vRRD/MY3h5U3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wOTc2MWQtNmU1Yy00NTFiLThlOGEt
ZTkyZWU1ZWVkMjI2LzEvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wOTc2MWQtNmU1Yy00NTFiLThlOGEtZTkyZWU1ZWVkMjI2
LzEvQWtFVlJHTGxyY3lwMHJ5OUZFUDh4amVIbFRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATv90IpTG
2zgzICQBGooiPTVIfwhkZC7Kfvva6skWyC8xChQbUes045e2aKLhOxQFJZmGyAPA
OVTD4d+9szVv0nFJnU2VnjFEwfEZhgJOfmPI8sICSHai9B8F6eeav3dl353E7O1y
lutYURgW+f5PNgM78zvDsL0BO68YlQd15RKrnSTnTIIq/jn7RiLbMX1Wmm7sjIuI
xDVg31ZKJq0GKWnzmXCr7qPq57EoBdypaHvKBvaCKlO+mz5P3MgB+iJv4NEdDkgs
40Lm8SkaRYcUetsUwXZTqlBESdEmxN40XalZRI/dAJwp2BKsD9cOLaz5xbNgpb3d
aISkCd2/V2tTzQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:45:43 2026 by rpki-client