Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
File: AKGRL91T8vGf6bza51RJZoFZM8w.mft (raw, json)
Hash identifier: CNU3+FjRcYzsL5ZVN0tpHuc528t251OwJ9XD6xglmOg=
Subject key identifier: F7:80:4C:E7:95:46:07:4F:14:17:28:6A:6B:C1:1E:D0:2C:BE:30:A1
Authority key identifier: 00:A1:91:2F:DD:53:F2:F1:9F:E9:BC:DA:E7:54:49:66:81:59:33:CC
Certificate issuer: /CN=00a1912fdd53f2f19fe9bcdae7544966815933cc
Certificate serial: 019FAB63054382D3C7117951D8B011C286F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKGRL91T8vGf6bza51RJZoFZM8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
Manifest number: DB
Signing time: Wed 29 Jul 2026 01:00:20 +0000
Manifest this update: Wed 29 Jul 2026 01:00:20 +0000
Manifest next update: Thu 30 Jul 2026 01:00:20 +0000
Files and hashes: 1: AKGRL91T8vGf6bza51RJZoFZM8w.crl (hash: PEJ+YTSHzoBZpoCKJJHUUHa31m2fk8l6KizH6e0+Vw8=)
2: GzOvk8lHsu4BYLj1d10xgx8tglU.roa (hash: qwnpR7TfGpJqvG2MvNeXDUXWtBVeH7xIX0oA5goxnbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKGRL91T8vGf6bza51RJZoFZM8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:05:43:82:d3:c7:11:79:51:d8:b0:11:c2:86:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a1912fdd53f2f19fe9bcdae7544966815933cc
Validity
Not Before: Jul 29 01:00:20 2026 GMT
Not After : Jul 30 01:00:20 2026 GMT
Subject: CN=f7804ce79546074f1417286a6bc11ed02cbe30a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:05:23:3c:1c:05:cb:05:dc:59:4b:ec:93:
4d:9c:8d:54:9d:5f:8a:30:bd:22:e5:f4:50:62:c5:
12:6a:12:c9:fb:69:be:44:28:3e:30:ab:c3:50:71:
ad:44:93:0d:63:90:67:01:75:d6:e2:b8:0f:de:87:
71:d7:01:3f:a6:67:94:2c:fb:d8:09:69:0f:64:3e:
e1:1e:c7:eb:7d:de:a5:b2:89:ce:ba:4a:a7:a8:d9:
31:9e:19:d6:ed:08:6d:cc:ed:62:41:07:4b:5d:cd:
4f:99:d1:c6:a6:57:dc:e8:19:0c:87:24:91:f4:fa:
77:f6:cf:9c:fd:40:9b:4f:55:aa:0f:d3:97:ef:c9:
6e:0e:60:a7:07:ce:81:90:f4:7a:d0:28:9b:71:d6:
c7:e5:9d:e0:eb:96:19:2a:68:23:40:d0:bd:27:bf:
56:a6:5a:ad:61:f9:69:dc:a3:2d:0a:d2:2a:b8:84:
fb:e9:cd:e2:95:17:7a:03:13:f6:ab:ee:20:75:7e:
74:71:12:c3:67:25:73:08:25:bc:f0:91:39:ca:77:
e0:67:71:c6:23:ad:bc:a9:6a:b1:b4:3f:7d:39:69:
d3:2d:32:2c:cf:6c:02:55:60:2c:9b:78:83:83:28:
d9:72:22:b6:03:be:79:bd:a3:bb:53:02:ad:07:ad:
7c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:80:4C:E7:95:46:07:4F:14:17:28:6A:6B:C1:1E:D0:2C:BE:30:A1
X509v3 Authority Key Identifier:
keyid:00:A1:91:2F:DD:53:F2:F1:9F:E9:BC:DA:E7:54:49:66:81:59:33:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKGRL91T8vGf6bza51RJZoFZM8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f4ca3b-a99a-4c72-96af-136dad97d0da/1/AKGRL91T8vGf6bza51RJZoFZM8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:a7:ef:af:5c:87:8b:8d:55:ae:68:07:c5:08:27:c1:e7:8c:
49:c1:35:e4:ef:12:b1:a3:d2:ad:7a:86:88:1d:4b:3e:74:e7:
d7:09:07:30:2f:61:c6:44:ec:6d:fc:19:2f:d3:ff:4f:47:ac:
9d:bf:22:ef:6e:66:49:01:c9:44:31:34:08:9d:53:22:f4:51:
54:8d:24:c9:4f:ee:bd:50:16:f8:1e:41:a0:2b:3a:f1:30:0a:
fb:27:19:a9:6f:c2:38:84:a7:25:db:6b:8a:56:d0:48:b5:9e:
58:4f:14:68:8a:36:6f:69:ac:ae:e8:ab:29:ea:0a:3b:d7:95:
e5:2d:ba:c4:44:c1:d4:e7:43:b0:0e:2f:cd:b2:fe:e8:74:86:
1f:ff:35:4c:ba:5d:44:ea:03:ea:d4:b8:a1:25:8f:2d:a7:69:
dc:b0:58:3c:e8:06:1d:09:d2:d3:e6:e7:cb:ea:bf:4b:69:c4:
ef:9d:c9:b4:7f:be:d9:c5:52:03:90:1d:56:dd:d9:a5:4b:6d:
ba:0d:8d:82:d3:e3:26:e7:27:01:fb:2f:4a:43:f5:cb:1a:ab:
1a:0c:2c:75:d4:04:05:3a:8f:d8:d0:53:ed:e2:12:d2:3b:3d:
a0:fb:3b:6c:ae:89:da:28:f9:f7:9e:c7:08:8a:10:7a:9d:22:
1a:e7:dc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:56:44 2026 by rpki-client