Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier: kgqAW4d1Rt0ww8SF1yY1Xm1I7p+pkf7nXoWHIn1W9KY=
Subject key identifier: 08:96:A0:BE:FF:CE:1A:C0:C0:76:AA:99:EB:88:79:A6:A7:3A:E4:62
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 019D98F497E58CFD68CF6FA556845AC4CCC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number: 0A29
Signing time: Fri 17 Apr 2026 01:00:59 +0000
Manifest this update: Fri 17 Apr 2026 01:00:59 +0000
Manifest next update: Sat 18 Apr 2026 01:00:59 +0000
Files and hashes: 1: 8ujYHAx1H4lhOYDDoA3cTzuZ1o0.roa (hash: IzeovJpSEL6TwVj5FewH6ox1OkLfK9+IYF8XYtp5rMQ=)
2: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: NmyKg8IcDzkzZ0xNnjd/aBWDyAZumntx0RHfnMuDUkI=)
3: MBROwpn7E_P7vCF37T3dw0M4yzM.roa (hash: G8TAGfvQzvXZYfrwzR9QmINSRsixI+9H36jSnh0IhZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:97:e5:8c:fd:68:cf:6f:a5:56:84:5a:c4:cc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: Apr 17 01:00:59 2026 GMT
Not After : Apr 18 01:00:59 2026 GMT
Subject: CN=0896a0beffce1ac0c076aa99eb8879a6a73ae462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:26:25:21:4c:b1:b5:21:c2:6a:43:0c:ae:
ae:4f:a9:8a:fc:5f:99:ae:91:1f:c8:31:6b:c8:03:
b3:b7:bd:8e:b3:c1:c9:94:f0:fa:85:a9:a0:ca:09:
de:c5:1d:e8:fe:99:cf:1f:2c:5f:de:63:d9:73:a9:
8b:d3:67:c8:cf:57:93:4a:66:87:cf:2f:49:1b:36:
2f:e2:23:b0:70:bd:0e:17:fc:d4:93:20:33:02:9d:
2d:cf:82:24:d9:60:d4:13:a2:f8:e0:a2:23:64:5f:
c1:44:43:6f:46:1c:ae:8e:62:d8:1e:36:c1:34:4b:
c2:62:bd:b2:37:fb:36:4f:36:2c:db:e2:7f:12:c0:
ee:19:ee:f6:c3:ba:09:c0:fa:ff:73:7d:7e:b1:6e:
3e:de:8e:c0:21:c6:fb:dc:c2:09:fd:a7:36:61:0d:
66:2d:5b:1b:eb:54:dc:e0:af:6e:dd:99:89:4a:bb:
8c:63:9d:da:e7:6d:da:fd:53:b0:91:ba:6f:dd:21:
31:70:8c:44:40:8f:c6:b8:f4:03:9c:11:ac:5e:39:
7e:0b:5c:02:2a:c2:05:0a:8a:f4:13:79:e7:66:a8:
ca:8d:3d:e1:0a:74:bb:9b:7e:7c:f1:f4:a9:69:e9:
25:49:1e:15:de:b9:83:5c:69:3e:82:f2:6f:0b:be:
fe:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:96:A0:BE:FF:CE:1A:C0:C0:76:AA:99:EB:88:79:A6:A7:3A:E4:62
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:cf:ce:54:a8:ef:32:ce:1c:72:c9:75:d6:d6:2e:f9:ed:44:
42:36:64:ab:83:37:a3:66:bf:e8:5b:13:41:c2:2c:ec:05:f8:
7c:46:0c:97:c2:8e:a3:75:70:ec:a5:d3:19:33:4e:ab:1c:88:
ae:ab:11:a6:e7:57:c1:72:2a:16:37:bc:56:64:61:93:72:35:
41:01:d4:66:0a:90:19:49:10:43:f0:6d:3f:3a:9e:41:f9:1a:
4a:14:e9:91:61:46:aa:49:7c:dd:04:9f:ae:e5:29:71:64:78:
65:40:d8:84:34:f2:83:16:c3:8b:ed:49:69:ba:cd:f9:f9:8f:
f0:05:4c:22:8b:94:64:96:2d:0e:c0:5f:ce:01:98:4a:df:9d:
22:32:39:00:95:eb:67:64:7c:43:2b:c4:bc:87:32:b3:41:e2:
83:fe:14:e0:fb:ec:f6:b9:49:30:cc:6d:26:65:b5:4b:06:b6:
b4:fa:60:0a:2e:92:61:2b:24:92:ae:04:7a:5e:ae:0b:93:c8:
dc:4d:57:12:2e:63:37:8e:f0:d3:21:4b:ac:8d:a4:34:07:b9:
55:59:bf:88:24:22:ce:c0:03:df:52:2b:fb:d8:ea:20:79:78:
0c:e8:88:42:78:b4:75:00:97:14:56:25:77:14:82:60:93:dd:
99:1d:aa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:48 2026 by rpki-client