Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier: b01SV3m+Rl/yM6KBuFXISrqIQ6swx/kcXhqn34hEQFE=
Subject key identifier: F5:C6:48:D9:F2:2A:F6:6D:A2:66:59:19:63:A3:34:08:B9:9E:1C:F4
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 019DD0F5DD7C44B06F0DB31351400EE1B3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number: 0A46
Signing time: Mon 27 Apr 2026 22:01:07 +0000
Manifest this update: Mon 27 Apr 2026 22:01:07 +0000
Manifest next update: Tue 28 Apr 2026 22:01:07 +0000
Files and hashes: 1: 8ujYHAx1H4lhOYDDoA3cTzuZ1o0.roa (hash: IzeovJpSEL6TwVj5FewH6ox1OkLfK9+IYF8XYtp5rMQ=)
2: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: uqzu/OKMFH4lGZW0+6mRUW3WDaPjZDwaAPStjen5ppA=)
3: MBROwpn7E_P7vCF37T3dw0M4yzM.roa (hash: G8TAGfvQzvXZYfrwzR9QmINSRsixI+9H36jSnh0IhZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:f5:dd:7c:44:b0:6f:0d:b3:13:51:40:0e:e1:b3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: Apr 27 22:01:07 2026 GMT
Not After : Apr 28 22:01:07 2026 GMT
Subject: CN=f5c648d9f22af66da266591963a33408b99e1cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:83:05:33:b2:21:d8:22:ce:57:1f:cd:bf:47:
a8:75:e8:a0:f4:8f:81:dd:ac:e1:2e:b6:54:59:cd:
ea:ce:b1:a1:0a:43:b7:bd:d8:c7:ca:e6:5d:be:33:
bc:b0:e5:71:8a:55:b4:fa:fa:50:1d:69:7c:b9:51:
59:8f:98:68:25:f8:61:b1:5b:e7:16:0f:9b:2c:a6:
86:0e:e6:85:7d:9a:93:97:d0:9a:4b:cc:04:46:9f:
91:af:72:52:69:13:ed:76:df:d4:26:15:3f:ee:29:
36:fc:8b:9a:14:88:c1:cd:57:25:91:91:57:9e:b0:
04:00:7d:7c:8f:e8:1a:fb:54:c3:29:92:db:d6:bd:
3b:77:f2:79:d8:2d:94:89:f2:df:b3:71:8a:d1:bd:
97:fe:a8:63:4c:25:d6:81:8c:fc:a5:f8:4b:49:2d:
22:72:c9:df:31:78:24:14:51:80:90:ed:cb:84:94:
1a:e0:9b:47:62:03:e2:b0:63:29:b8:96:48:66:4b:
c7:6c:f9:aa:e7:eb:8c:24:84:20:94:8a:bf:61:38:
b0:e9:9d:d8:7a:20:08:a8:d6:55:a2:80:be:df:2d:
f0:6b:b3:ad:22:09:15:7c:4f:2a:7f:d0:6b:24:0c:
12:b6:02:59:67:2d:fd:13:51:2e:e7:7f:68:ee:d1:
0a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C6:48:D9:F2:2A:F6:6D:A2:66:59:19:63:A3:34:08:B9:9E:1C:F4
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6c:c5:32:03:4f:1c:6e:95:d0:6c:f8:32:87:82:c0:bb:39:
75:e0:43:a5:5e:3a:ae:78:0d:0c:4d:4f:d3:02:b9:2b:5a:00:
5d:f3:5b:97:08:fa:3d:54:2a:be:b3:1f:b5:a2:b9:8d:6f:08:
6a:fc:da:16:5a:bc:0d:46:bd:76:43:b6:44:8d:4e:c1:c4:b2:
aa:5f:1a:d4:52:00:31:72:0e:e6:b7:19:1b:4d:8f:0c:2b:de:
b1:43:81:25:79:96:3c:96:4c:4b:20:16:53:11:ac:86:76:f3:
81:6c:97:1f:d1:61:8c:7f:85:58:2d:d6:ff:d4:03:03:28:59:
c9:16:70:97:72:42:b5:61:54:78:5b:4a:91:7b:f5:77:f8:38:
26:f1:06:6d:de:7f:69:0a:5d:ad:3d:e8:63:56:53:28:aa:3f:
b4:87:cc:46:c5:ce:35:02:9b:92:7f:c2:1c:71:51:7a:f0:a3:
77:71:c8:81:d3:ff:74:8e:c5:df:33:b5:c0:24:44:14:3b:5e:
ea:d0:ed:07:c9:02:c8:a0:bf:db:5c:1f:43:89:b4:03:b0:31:
9e:cb:db:bb:31:86:e6:3d:37:b0:94:87:c6:ad:f0:84:48:b0:
cc:30:c0:c5:08:ec:45:2a:5d:13:20:55:b8:bc:ac:e5:64:9c:
59:a4:0c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:47:34 2026 by rpki-client