Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
File: AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json)
Hash identifier: +vO6Sz/JHCO/6vbvUlvpw7ps1NcXk1MNZRzURZfFX6M=
Subject key identifier: C6:42:EF:99:FA:55:D9:C9:2A:E8:25:FA:80:3D:8D:FD:C8:93:83:54
Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
Certificate issuer: /CN=00a856a4173895af44b8fd34455469a5c4d6173b
Certificate serial: 019CAD5977458F52C5A3AEA7CD9E01D11156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
Manifest number: 038C
Signing time: Mon 02 Mar 2026 07:00:47 +0000
Manifest this update: Mon 02 Mar 2026 07:00:47 +0000
Manifest next update: Tue 03 Mar 2026 07:00:47 +0000
Files and hashes: 1: 2vNgKOpEbzaja_VIW4Gy_vX__vw.roa (hash: 3da40VmqFrVIzGNQWd74Q1I2LkbqTG2fl0jqzMqaDcU=)
2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: 43TK5avmDrVgaTQQQjjo8/fR5a+TwZEEMPc6hagPZFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:77:45:8f:52:c5:a3:ae:a7:cd:9e:01:d1:11:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b
Validity
Not Before: Mar 2 07:00:47 2026 GMT
Not After : Mar 3 07:00:47 2026 GMT
Subject: CN=c642ef99fa55d9c92ae825fa803d8dfdc8938354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2e:19:b5:94:54:fe:99:c8:04:96:8f:f5:54:
69:69:44:b2:84:e0:56:f5:e2:57:b8:74:56:a0:a7:
7c:ee:3c:a8:5b:97:70:36:05:29:00:6f:15:11:4f:
42:c7:07:64:6b:31:d5:3a:ca:72:7a:2d:5f:d2:53:
db:a0:12:2c:86:72:0c:68:46:8b:c5:51:67:de:54:
bc:81:96:51:e6:e1:76:c4:e1:95:72:5c:3c:46:41:
2a:71:86:69:5c:2a:cf:2b:09:20:10:fb:b4:22:b1:
6f:68:c9:1a:1b:c5:fa:40:1a:13:18:c0:d6:38:cd:
5c:47:62:75:5a:61:c2:d2:a5:23:28:af:1e:68:3b:
ca:c1:bf:83:a0:fc:01:1b:2a:05:5f:e0:8a:c9:41:
5e:f8:cf:26:06:56:b7:ce:8f:01:f4:fe:c0:87:87:
89:85:a3:3f:55:3a:45:15:a9:5c:6a:c2:67:0c:76:
65:b1:04:1b:f3:b9:c6:8f:b8:14:5d:04:c9:3f:00:
1d:d4:e6:cd:9c:53:af:8e:29:c5:af:0b:06:ec:d5:
a5:07:23:fc:fd:5e:dc:53:e7:c5:99:30:a8:ce:ea:
85:86:74:62:a5:f0:da:78:15:6f:35:a4:ad:b1:65:
01:98:e1:b6:ab:0b:04:b5:be:fe:f2:e3:fa:c8:57:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:42:EF:99:FA:55:D9:C9:2A:E8:25:FA:80:3D:8D:FD:C8:93:83:54
X509v3 Authority Key Identifier:
keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4e:fb:dd:d0:4a:59:d1:01:9b:d3:2e:9a:94:5e:4a:7d:93:
74:9d:7d:ab:e5:e5:a2:92:2f:74:9a:dc:ee:74:0b:8c:fa:82:
14:e9:56:cb:d9:bf:37:8a:21:98:9e:c7:be:03:66:b0:76:84:
0d:59:a0:e9:93:1d:2b:37:45:66:fa:85:67:d6:cc:f4:b3:d8:
47:00:33:17:a6:37:61:b0:45:4a:4d:a3:6a:94:1b:3d:2a:cc:
d7:9a:a3:98:a6:c3:9e:84:de:f1:f8:35:28:6d:32:9a:47:0c:
ac:1f:0a:0d:0e:27:c5:d7:2e:c9:cb:e4:a0:3f:38:d4:01:00:
47:4e:bb:44:56:1c:52:08:af:2f:ad:11:60:2b:b4:0d:3e:6b:
0f:1b:f0:46:fd:65:43:a4:da:cc:4f:35:30:e4:53:7d:38:cb:
c0:df:db:3f:0c:21:da:e3:dc:b4:01:6e:2f:49:8f:12:18:d0:
a5:63:88:5b:b8:ae:d5:a7:d0:15:46:ed:84:d3:51:33:ab:3d:
d7:3b:f9:a2:e0:84:a9:74:76:1c:f9:a4:76:b2:7a:af:20:6c:
99:8e:ca:76:c0:2f:83:7e:54:e0:3c:42:20:8b:90:e1:58:69:
a3:c4:b4:19:a4:2d:d0:3d:79:08:14:8d:85:a9:fe:57:b4:49:
dd:a1:cb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:27:22 2026 by rpki-client