Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
File: AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json)
Hash identifier: 1jEWTp9FXeJoOts8kWQGTaPSs4riHFSOwv5TZhnkaus=
Subject key identifier: B2:59:F1:C7:34:FB:96:16:09:DE:78:EF:E9:D6:52:3D:C6:84:41:CF
Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Certificate issuer: /CN=0241063b2d57e4efaef6824f623d465a1c37b843
Certificate serial: 019CAB6BC16E3F0BD07363D4CA01AD0EE273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
Manifest number: 0F37
Signing time: Sun 01 Mar 2026 22:01:31 +0000
Manifest this update: Sun 01 Mar 2026 22:01:31 +0000
Manifest next update: Mon 02 Mar 2026 22:01:31 +0000
Files and hashes: 1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: fsBw4V38kpnUO53HnCcmT2AAdt507P9UgY9Bnexm3K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:c1:6e:3f:0b:d0:73:63:d4:ca:01:ad:0e:e2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843
Validity
Not Before: Mar 1 22:01:31 2026 GMT
Not After : Mar 2 22:01:31 2026 GMT
Subject: CN=b259f1c734fb961609de78efe9d6523dc68441cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:14:5d:47:a6:f4:58:36:cf:da:59:6b:f9:3f:
7c:7a:e4:d7:da:dd:2f:24:c2:0d:4a:8f:07:58:4e:
c3:07:55:de:0b:79:85:26:d6:d6:64:6b:cb:09:74:
cc:45:4e:a2:7c:91:10:45:78:8e:88:63:48:3d:90:
67:4b:93:cc:93:e0:40:13:7e:4a:bc:1b:94:86:1c:
db:a0:8f:cd:e4:d7:03:78:91:a1:9c:5c:59:fe:43:
43:ff:a2:ae:6c:95:c2:2c:bf:33:86:a7:bc:e2:1c:
9b:fe:94:04:3b:ed:ff:31:7a:af:a5:3d:94:77:6a:
05:c2:ab:28:f4:70:27:1b:a9:fc:44:d0:d8:bc:2e:
dc:e7:2c:59:aa:08:f4:cb:e9:55:b5:85:ea:bf:ae:
57:27:54:81:d0:6d:97:ee:0c:8f:1d:92:6d:ed:d6:
95:f2:60:ae:fb:8e:3c:7d:85:9f:99:fc:cc:08:b9:
ba:0c:8e:65:98:3e:5f:ca:de:42:1a:d7:ce:b5:ad:
6c:b5:a1:78:bf:90:74:b2:54:74:4f:33:c4:50:4b:
b2:3c:1a:a2:44:46:b2:47:58:b0:0c:2d:d2:58:78:
69:3a:a4:67:83:e4:e0:2c:cb:f8:e6:d7:41:30:b7:
a3:3a:6a:2c:ca:55:11:2e:d2:f8:5e:11:16:d1:da:
a6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:59:F1:C7:34:FB:96:16:09:DE:78:EF:E9:D6:52:3D:C6:84:41:CF
X509v3 Authority Key Identifier:
keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:31:d6:50:ee:8a:d9:1b:42:27:15:49:2d:ba:d4:f6:94:36:
c0:81:5a:91:69:21:7e:f4:c8:96:b4:3a:bc:da:81:14:db:ea:
ee:70:39:6f:0e:c0:a4:5f:8c:46:2c:4e:e7:ad:91:52:f8:ab:
61:b8:d4:e3:4b:95:c4:e7:4e:00:69:4a:3f:50:7b:b7:69:db:
95:02:65:a4:58:1f:4a:2a:41:c4:0c:71:f7:87:26:9c:7a:c3:
56:54:cf:14:ae:45:d8:31:09:fd:68:02:3c:91:76:bc:a4:f4:
d7:18:a9:a2:8c:bb:05:e4:5b:49:b6:38:e2:aa:60:11:ba:ca:
2d:04:14:84:ef:d0:d7:e7:92:7c:6e:d9:e1:cb:ab:39:12:3c:
78:88:f1:07:37:90:81:dc:01:7e:67:a1:27:69:0a:73:05:5e:
70:fa:0e:1e:d1:a6:91:77:03:43:7b:3e:14:50:65:5c:a4:5e:
bb:3d:77:3c:14:1d:cf:e4:82:c7:ad:31:ee:ee:35:b0:c9:64:
4b:2b:eb:2c:4a:31:95:ce:9d:c1:81:dd:0b:36:97:46:c9:48:
18:64:a8:63:eb:30:a8:35:d5:b4:07:88:12:40:46:2c:e8:67:
42:f9:fb:52:0e:9c:4e:fe:c9:0e:02:df:08:75:c8:5c:04:a1:
ea:e9:04:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra8FuPwvQc2PUygGtDuJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDEwNjNiMmQ1N2U0ZWZhZWY2ODI0ZjYyM2Q0NjVhMWMz
N2I4NDMwHhcNMjYwMzAxMjIwMTMxWhcNMjYwMzAyMjIwMTMxWjAzMTEwLwYDVQQD
EyhiMjU5ZjFjNzM0ZmI5NjE2MDlkZTc4ZWZlOWQ2NTIzZGM2ODQ0MWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxRdR6b0WDbP2llr+T98euTX2t0v
JMINSo8HWE7DB1XeC3mFJtbWZGvLCXTMRU6ifJEQRXiOiGNIPZBnS5PMk+BAE35K
vBuUhhzboI/N5NcDeJGhnFxZ/kND/6KubJXCLL8zhqe84hyb/pQEO+3/MXqvpT2U
d2oFwqso9HAnG6n8RNDYvC7c5yxZqgj0y+lVtYXqv65XJ1SB0G2X7gyPHZJt7daV
8mCu+448fYWfmfzMCLm6DI5lmD5fyt5CGtfOta1staF4v5B0slR0TzPEUEuyPBqi
REayR1iwDC3SWHhpOqRng+TgLMv45tdBMLejOmosylURLtL4XhEW0dqmFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJZ8cc0+5YWCd547+nWUj3GhEHPMB8GA1UdIwQY
MBaAFAJBBjstV+TvrvaCT2I9RlocN7hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQt
Y2IwNzVlMjM5YTU2LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQtY2IwNzVlMjM5YTU2
LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtTHWUO6K
2RtCJxVJLbrU9pQ2wIFakWkhfvTIlrQ6vNqBFNvq7nA5bw7ApF+MRixO562RUvir
YbjU40uVxOdOAGlKP1B7t2nblQJlpFgfSipBxAxx94cmnHrDVlTPFK5F2DEJ/WgC
PJF2vKT01xipooy7BeRbSbY44qpgEbrKLQQUhO/Q1+eSfG7Z4curORI8eIjxBzeQ
gdwBfmehJ2kKcwVecPoOHtGmkXcDQ3s+FFBlXKReuz13PBQdz+SCx60x7u41sMlk
SyvrLEoxlc6dwYHdCzaXRslIGGSoY+swqDXVtAeIEkBGLOhnQvn7Ug6cTv7JDgLf
CHXIXASh6ukE9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:28 2026 by rpki-client