Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
File: AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json)
Hash identifier: TfahHcwwuWRuotEGoEnl8sIOA1EdmzPfgSrSlvK9pZU=
Subject key identifier: C7:00:1F:46:D1:5B:B0:8E:B7:AA:8F:83:D2:1F:C0:A0:58:FC:D5:E3
Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
Certificate issuer: /CN=00a856a4173895af44b8fd34455469a5c4d6173b
Certificate serial: 019D386635DD010B553580EDA41D12B5D8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
Manifest number: 03D4
Signing time: Sun 29 Mar 2026 07:01:55 +0000
Manifest this update: Sun 29 Mar 2026 07:01:55 +0000
Manifest next update: Mon 30 Mar 2026 07:01:55 +0000
Files and hashes: 1: 2vNgKOpEbzaja_VIW4Gy_vX__vw.roa (hash: 3da40VmqFrVIzGNQWd74Q1I2LkbqTG2fl0jqzMqaDcU=)
2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: 1PUybBYrcH81pcY7T9oXgDTNxqk0mdI+6RDlhpTUL4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:35:dd:01:0b:55:35:80:ed:a4:1d:12:b5:d8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b
Validity
Not Before: Mar 29 07:01:55 2026 GMT
Not After : Mar 30 07:01:55 2026 GMT
Subject: CN=c7001f46d15bb08eb7aa8f83d21fc0a058fcd5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:e3:5e:f6:16:3d:13:1f:88:b7:9f:c7:bf:
7c:f6:45:24:0d:0e:e4:2f:17:e0:96:09:50:80:e6:
5c:90:97:f6:60:a8:7f:1d:09:d2:2c:1b:6c:e0:da:
46:d6:17:b9:f6:90:88:47:0c:73:51:c2:58:8c:16:
40:b5:92:e6:9c:f5:92:34:42:1a:2c:21:07:1f:a5:
94:13:42:ef:79:53:e2:d6:82:30:8d:94:2a:23:06:
01:15:f0:46:17:6a:d9:1a:9f:e2:1c:22:8e:a4:66:
49:d9:ba:25:34:74:b5:7d:2b:c6:67:46:aa:c0:e0:
4b:c8:16:e2:a2:44:30:e1:51:c8:aa:f7:ba:c1:91:
68:35:b3:fc:ce:be:93:a1:86:a5:e3:be:ee:af:d7:
82:8c:bb:f1:35:5f:cf:de:e5:25:e3:4b:ba:54:40:
11:47:6b:2d:e3:ac:0c:88:90:e7:72:f0:8b:12:8e:
14:0e:76:60:ae:48:d9:e4:ee:b0:74:a8:4c:1e:0d:
e7:f3:63:c5:92:3a:fe:f4:24:8d:74:8f:c9:dc:63:
47:42:95:cf:6a:18:12:dd:a8:dd:66:d2:33:d9:5f:
5c:bb:da:5a:6c:27:71:19:55:e6:f2:e8:4f:5e:db:
fd:2a:38:5b:50:aa:5d:bc:1f:70:ff:f5:f2:4b:e1:
5d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:00:1F:46:D1:5B:B0:8E:B7:AA:8F:83:D2:1F:C0:A0:58:FC:D5:E3
X509v3 Authority Key Identifier:
keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:14:89:2f:ff:18:8d:99:c7:b8:77:eb:0b:1d:d1:e0:b5:2b:
ae:be:6f:1d:ea:01:65:b1:a5:6d:c0:f5:44:db:b9:46:89:76:
30:1f:d6:39:f5:cb:46:d7:42:bc:e9:64:f2:63:42:ed:8b:54:
d9:5a:e6:75:48:f0:12:4c:6d:43:3a:2c:41:39:08:dc:eb:53:
6e:96:88:20:73:90:d7:62:27:99:3a:83:00:3b:65:e1:1b:4a:
1f:a0:18:e6:86:f1:0d:33:5e:25:13:d6:2c:cb:d8:7b:91:d2:
97:8a:c2:59:74:d5:b1:97:5f:e3:e1:9c:80:00:e4:60:fe:cc:
ba:32:f1:5d:19:cd:ee:6b:03:48:2b:12:4b:c7:c7:9f:7c:f6:
b9:2f:e1:ee:23:98:3f:eb:7c:75:ed:94:0b:4c:7e:18:c3:04:
2a:45:f0:73:c2:91:b2:3d:13:c6:00:c3:21:3c:f9:52:29:78:
92:95:30:b6:a7:3d:23:68:c5:be:71:a0:b6:62:09:9a:8d:a5:
32:95:41:98:b0:e8:31:8f:40:0a:19:ed:fd:66:8b:60:cf:59:
9b:11:5d:a1:22:26:1c:aa:2c:5d:7e:38:80:ba:ba:89:de:cf:
d3:93:5b:4f:40:ec:86:ee:51:3b:b1:0e:6b:e7:99:2a:fa:91:
c3:4f:4e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:59 2026 by rpki-client