Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
File: AkhBfH_pzOxbnarMCPznmdZzCIw.mft (raw, json)
Hash identifier: NfMMNjr3W1ILIgvjUYb8wRmQCiFjnPgtRsXt2Zif9ZQ=
Subject key identifier: 9E:99:B6:CD:4D:50:7F:DE:F7:36:12:46:43:2F:D8:4F:C6:FE:BB:4C
Authority key identifier: 02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
Certificate issuer: /CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Certificate serial: 019FAA1A6F8ECCBF82EBED09035987061EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
Manifest number: 1209
Signing time: Tue 28 Jul 2026 19:01:26 +0000
Manifest this update: Tue 28 Jul 2026 19:01:26 +0000
Manifest next update: Wed 29 Jul 2026 19:01:26 +0000
Files and hashes: 1: AkhBfH_pzOxbnarMCPznmdZzCIw.crl (hash: biOkbOcWCJICXMMdcgQ+TWTzhJoFqq2XJuZMHimjrwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:6f:8e:cc:bf:82:eb:ed:09:03:59:87:06:1e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Validity
Not Before: Jul 28 19:01:26 2026 GMT
Not After : Jul 29 19:01:26 2026 GMT
Subject: CN=9e99b6cd4d507fdef7361246432fd84fc6febb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:85:23:74:5b:7b:f0:34:1a:96:5e:cc:eb:a7:
cd:c3:97:ea:d0:d2:c7:d2:3f:8b:b0:0a:8d:9b:33:
e4:9c:6e:fc:56:32:07:97:16:42:12:88:04:1e:a2:
66:90:5d:bf:33:6d:b5:b9:09:40:e5:70:30:64:5b:
47:e2:e3:f4:d3:41:50:2f:78:38:ec:81:ab:09:85:
af:eb:21:a3:d5:36:c6:1e:3c:47:d1:43:e4:bd:31:
90:38:5c:9c:c4:93:5d:6e:b9:31:03:2b:32:6a:c9:
d9:ca:ba:e4:3d:90:0c:38:da:14:e5:fd:8c:57:d4:
10:b5:04:21:04:f8:9a:35:12:b2:56:be:c2:b6:09:
8e:d6:f9:2c:d8:06:89:bc:f8:11:ca:7f:13:d6:5c:
44:55:0e:74:f5:ff:c1:4f:3b:ce:fd:f7:7f:af:f5:
3e:86:fd:b5:03:0f:d3:39:46:ee:4f:28:58:71:e6:
1b:bf:42:26:76:25:5d:cd:d2:e9:3d:34:8a:d5:4e:
2e:ba:2d:33:16:cc:30:11:29:c3:be:f5:ff:09:88:
ab:03:19:08:a8:ba:cf:c7:c0:7d:eb:40:0c:03:f9:
0b:c5:18:c7:92:df:6b:0c:c5:7f:bc:da:e6:be:ca:
a4:15:4e:d0:bf:76:07:0a:66:56:a9:7c:cc:87:83:
d8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:99:B6:CD:4D:50:7F:DE:F7:36:12:46:43:2F:D8:4F:C6:FE:BB:4C
X509v3 Authority Key Identifier:
keyid:02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:20:3c:97:cd:e0:05:cb:a8:b2:78:ed:f7:01:6e:a6:5b:c6:
63:6e:8d:b6:bf:cc:e4:a6:ef:4b:c7:21:8c:6d:28:fe:70:dc:
2d:7c:d3:d9:76:f6:89:c6:7b:46:1e:cd:9b:74:30:9c:bb:00:
6e:3e:24:28:71:2b:30:4c:ec:b4:72:5f:85:03:80:34:df:f9:
9e:47:9e:de:60:44:58:f2:53:a7:39:de:60:4b:b7:d9:90:fd:
7f:86:a5:b9:33:45:0d:72:f4:a5:f0:ea:01:ee:2a:76:af:32:
31:12:74:00:be:54:93:6d:8f:45:cf:5b:e6:ce:2d:79:46:a4:
1f:0a:02:c9:c4:70:11:50:40:68:2d:82:68:a8:8d:b8:21:34:
6b:d0:ec:e0:83:4c:17:22:8b:a1:84:23:c7:5d:c4:df:7c:52:
eb:5d:74:2b:56:6c:cc:0d:30:a4:2e:e6:c5:38:3a:ca:59:94:
5d:57:bb:90:3f:ee:bb:85:c9:c6:cf:f3:b8:02:b4:2d:a1:2d:
a3:91:6c:71:ce:59:c6:12:4f:86:18:e3:90:b3:3e:6b:bd:c6:
11:1e:21:95:14:95:d3:5c:4f:b5:20:be:60:09:89:f0:b9:ad:
9d:98:c9:38:79:ca:33:08:07:62:29:a6:00:80:11:9f:66:79:
c6:9b:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:35 2026 by rpki-client