Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier: gxSYip0n6jIAVwjI9bmiOka7P5U2Ud/Osn0A38LbrMs=
Subject key identifier: 17:B6:30:5F:F8:BC:8B:25:80:28:5B:46:46:41:DA:72:5F:65:D6:1E
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 019CAB6B4DCFC219242F79D074CF1FB8D7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number: 09AE
Signing time: Sun 01 Mar 2026 22:01:02 +0000
Manifest this update: Sun 01 Mar 2026 22:01:02 +0000
Manifest next update: Mon 02 Mar 2026 22:01:02 +0000
Files and hashes: 1: 8ujYHAx1H4lhOYDDoA3cTzuZ1o0.roa (hash: IzeovJpSEL6TwVj5FewH6ox1OkLfK9+IYF8XYtp5rMQ=)
2: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: AVoBy2PZBMvpOAG/6uOEm9LyGxh5EAj16izvub/UjkI=)
3: MBROwpn7E_P7vCF37T3dw0M4yzM.roa (hash: G8TAGfvQzvXZYfrwzR9QmINSRsixI+9H36jSnh0IhZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:4d:cf:c2:19:24:2f:79:d0:74:cf:1f:b8:d7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: Mar 1 22:01:02 2026 GMT
Not After : Mar 2 22:01:02 2026 GMT
Subject: CN=17b6305ff8bc8b2580285b464641da725f65d61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:00:fd:ea:ee:3e:7d:94:66:f7:be:1b:39:e1:
99:df:e8:0c:a6:7d:2b:f8:40:4a:6d:12:88:2a:f0:
c5:d4:10:a0:32:4b:98:92:ff:27:3a:67:fa:77:79:
88:7d:e0:a7:be:55:f7:b4:47:83:1e:fa:45:c4:49:
e7:85:03:57:4f:1e:58:42:b1:4c:a7:24:39:83:e0:
34:e6:7b:58:d4:fe:81:57:08:ce:23:28:21:24:2c:
42:0e:3e:46:ed:ac:5b:48:b5:02:0d:2c:b2:3f:39:
d9:6c:7e:a2:d3:45:a7:38:22:fc:d9:f9:29:2d:1c:
82:48:6d:9a:46:75:1d:52:7a:15:fb:57:ee:54:5f:
f4:52:e8:aa:c7:d0:a0:45:7e:64:5a:4d:b9:05:61:
8f:00:a2:87:47:82:8d:24:c2:3b:45:94:37:07:f0:
f7:05:7e:17:a9:3d:30:ee:46:61:92:f4:da:b1:66:
e0:56:f9:57:32:4c:5e:f6:82:95:01:44:55:f2:fe:
c9:16:2e:3e:22:b5:21:f9:e7:3c:04:37:38:26:3e:
62:61:bb:3f:8c:6a:d8:e2:09:c9:94:73:47:19:74:
95:7f:30:67:13:5a:55:80:f1:87:ae:b9:84:32:8c:
98:d9:69:80:a3:8f:1d:19:9d:a1:f9:75:da:ba:21:
8c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B6:30:5F:F8:BC:8B:25:80:28:5B:46:46:41:DA:72:5F:65:D6:1E
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7e:72:d8:62:73:d8:d9:da:aa:a4:5e:f4:12:19:ce:9b:37:
76:c3:42:22:38:96:9c:f9:3a:cc:4f:e9:1d:51:fe:bc:86:55:
c0:65:49:02:d2:44:95:7c:fa:1a:a4:f3:be:59:b4:4f:c2:81:
c4:2b:b0:a8:a0:2b:d5:24:16:d4:03:5b:24:76:93:c4:5c:10:
0d:ac:21:20:54:cf:2c:b6:68:53:f1:a5:51:2b:ef:c0:73:6b:
e2:92:fe:83:30:e7:34:f3:00:5f:16:03:6e:03:2d:5c:52:04:
2d:9c:3a:87:b4:ef:03:12:32:d5:6a:b3:bf:ff:82:aa:0b:41:
e2:d8:dd:23:6e:85:18:65:eb:e7:1a:2c:fd:72:96:f9:42:64:
8c:9f:f0:e0:01:e6:fd:c6:ec:4a:d5:04:87:5b:4e:de:fd:65:
7c:4f:1e:52:54:17:00:2b:df:0a:df:ad:d1:7e:b9:51:c9:e6:
77:52:7b:c1:d6:70:79:46:e3:6b:49:89:01:3d:c1:bf:c7:08:
c7:47:90:62:88:aa:84:16:99:5e:6c:4d:ca:38:a9:20:d2:7a:
ca:42:4d:e7:23:45:b3:a8:77:6a:45:f8:49:6c:54:69:67:3c:
76:97:f9:1b:af:12:bc:9e:fb:74:2b:94:1d:93:d9:74:d2:19:
e5:31:d9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:52 2026 by rpki-client