Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
File: AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json)
Hash identifier: VRoSaDiUGYJtLsVxopEHBWIr37gxhqApYgIARXTg0OU=
Subject key identifier: 00:F4:A6:72:B8:6E:98:76:58:7F:C6:0C:ED:7A:96:E6:68:31:0F:4F
Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Certificate issuer: /CN=0241063b2d57e4efaef6824f623d465a1c37b843
Certificate serial: 019D98F4EAD5B0B089982B8488674AAC5186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
Manifest number: 0FB2
Signing time: Fri 17 Apr 2026 01:01:20 +0000
Manifest this update: Fri 17 Apr 2026 01:01:20 +0000
Manifest next update: Sat 18 Apr 2026 01:01:20 +0000
Files and hashes: 1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: I+iUGZ3NImAGHxODuYWBqLrKDzXKTv388fkgIPybVmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ea:d5:b0:b0:89:98:2b:84:88:67:4a:ac:51:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843
Validity
Not Before: Apr 17 01:01:20 2026 GMT
Not After : Apr 18 01:01:20 2026 GMT
Subject: CN=00f4a672b86e9876587fc60ced7a96e668310f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:82:bd:96:55:3e:97:cb:bb:4d:5d:8b:4b:13:
ea:bb:65:3f:8c:81:d7:cf:cc:5a:40:6b:03:05:49:
42:bd:48:ee:f3:a7:fa:cd:90:c9:c7:0d:a0:b0:ad:
89:4d:24:10:a5:62:28:e2:77:0e:ed:98:b7:34:46:
e6:30:5a:ba:53:eb:03:10:c0:25:70:12:b3:4f:a9:
53:0b:35:6f:15:26:d1:61:77:6f:97:0e:ab:3d:7e:
67:df:7c:5b:dc:ee:f4:3a:e1:46:05:b1:44:cb:4a:
97:3e:7e:6a:72:74:55:bc:78:1e:6f:e6:26:17:5c:
3b:a7:8b:ee:e3:ee:8b:6d:13:6b:48:ee:ba:84:49:
5d:c6:45:cc:c8:48:02:f6:4b:a3:14:52:b1:cc:fa:
1a:10:7a:11:b5:af:16:47:79:aa:05:84:4b:4a:8b:
af:5c:5d:c8:b8:0b:5d:6a:83:c7:20:e0:19:54:d8:
af:86:fd:eb:7a:dc:83:bf:eb:a2:eb:90:bc:4d:b9:
3a:71:11:a4:c1:3a:d1:e4:67:08:c4:c5:26:64:53:
2c:35:88:8e:da:9b:52:45:a0:17:8c:9c:fa:86:1f:
56:0e:47:19:71:d8:7a:e2:39:d8:d5:ee:40:a8:bb:
f8:17:46:33:14:b5:c7:83:a3:a4:d9:20:56:56:3c:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F4:A6:72:B8:6E:98:76:58:7F:C6:0C:ED:7A:96:E6:68:31:0F:4F
X509v3 Authority Key Identifier:
keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e4:6c:81:82:18:bb:e8:f3:91:64:b1:2d:44:cc:97:26:e3:
45:b3:ca:fd:a8:c1:bb:8d:36:7b:2b:40:9d:16:ec:ea:4e:c2:
56:6d:ee:bf:74:a8:29:fe:c2:08:f4:12:e4:69:f6:9f:36:e4:
55:ce:e5:38:89:fd:41:0c:05:20:cb:60:87:94:da:b9:16:cc:
f5:bf:05:fd:66:77:e3:55:bf:e5:59:4e:09:1d:f9:74:63:32:
8a:d7:9d:92:ef:51:2c:e9:11:72:cd:0c:3b:c8:34:1c:c3:ea:
28:07:ce:f6:3e:6c:27:e6:f4:42:98:ae:95:8e:76:5b:c1:76:
1a:86:2a:00:3e:65:8d:57:76:87:09:84:5d:9a:90:de:c8:2b:
02:4c:6e:4a:9e:b5:39:93:33:4d:9f:d5:8b:fa:85:f8:1d:81:
2d:6b:02:95:ed:d1:80:98:68:4e:6e:1e:c0:95:7c:7f:19:55:
55:86:0b:ed:71:83:76:ab:bd:c7:f3:44:69:bd:24:4c:4f:8d:
78:5d:7e:52:2b:7d:36:ff:ef:c7:f7:8b:91:46:46:cc:5e:c1:
0d:7a:5f:31:54:1d:9b:e9:f2:58:a8:27:76:ea:1f:8d:79:17:
12:ce:97:44:38:da:a6:74:1f:fe:0d:bc:b4:85:84:f5:7e:24:
82:8e:d6:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9OrVsLCJmCuEiGdKrFGGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDEwNjNiMmQ1N2U0ZWZhZWY2ODI0ZjYyM2Q0NjVhMWMz
N2I4NDMwHhcNMjYwNDE3MDEwMTIwWhcNMjYwNDE4MDEwMTIwWjAzMTEwLwYDVQQD
EygwMGY0YTY3MmI4NmU5ODc2NTg3ZmM2MGNlZDdhOTZlNjY4MzEwZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoK9llU+l8u7TV2LSxPqu2U/jIHX
z8xaQGsDBUlCvUju86f6zZDJxw2gsK2JTSQQpWIo4ncO7Zi3NEbmMFq6U+sDEMAl
cBKzT6lTCzVvFSbRYXdvlw6rPX5n33xb3O70OuFGBbFEy0qXPn5qcnRVvHgeb+Ym
F1w7p4vu4+6LbRNrSO66hEldxkXMyEgC9kujFFKxzPoaEHoRta8WR3mqBYRLSouv
XF3IuAtdaoPHIOAZVNivhv3retyDv+ui65C8Tbk6cRGkwTrR5GcIxMUmZFMsNYiO
2ptSRaAXjJz6hh9WDkcZcdh64jnY1e5AqLv4F0YzFLXHg6Ok2SBWVjyKeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAD0pnK4bph2WH/GDO16luZoMQ9PMB8GA1UdIwQY
MBaAFAJBBjstV+TvrvaCT2I9RlocN7hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQt
Y2IwNzVlMjM5YTU2LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQtY2IwNzVlMjM5YTU2
LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuRsgYIY
u+jzkWSxLUTMlybjRbPK/ajBu402eytAnRbs6k7CVm3uv3SoKf7CCPQS5Gn2nzbk
Vc7lOIn9QQwFIMtgh5TauRbM9b8F/WZ341W/5VlOCR35dGMyitedku9RLOkRcs0M
O8g0HMPqKAfO9j5sJ+b0QpiulY52W8F2GoYqAD5ljVd2hwmEXZqQ3sgrAkxuSp61
OZMzTZ/Vi/qF+B2BLWsCle3RgJhoTm4ewJV8fxlVVYYL7XGDdqu9x/NEab0kTE+N
eF1+Uit9Nv/vx/eLkUZGzF7BDXpfMVQdm+nyWKgnduofjXkXEs6XRDjapnQf/g28
tIWE9X4kgo7WyA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:30 2026 by rpki-client