Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
File: AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json)
Hash identifier: XRrf+DFNT08zejdxDxhSlRMmsOqJYLafzXb9uEDuqjs=
Subject key identifier: 61:A7:46:EC:E7:EE:DA:4B:EC:88:58:D8:AC:E9:44:62:2D:7A:23:AA
Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
Certificate issuer: /CN=00a856a4173895af44b8fd34455469a5c4d6173b
Certificate serial: 019D9CD143B123E237B24A4AA27E261CD5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
Manifest number: 0408
Signing time: Fri 17 Apr 2026 19:00:53 +0000
Manifest this update: Fri 17 Apr 2026 19:00:53 +0000
Manifest next update: Sat 18 Apr 2026 19:00:53 +0000
Files and hashes: 1: 2vNgKOpEbzaja_VIW4Gy_vX__vw.roa (hash: 3da40VmqFrVIzGNQWd74Q1I2LkbqTG2fl0jqzMqaDcU=)
2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: dquTs1tCF69MmnccqdgELG6FPZenyxvXWfHDfbqHq6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:43:b1:23:e2:37:b2:4a:4a:a2:7e:26:1c:d5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b
Validity
Not Before: Apr 17 19:00:53 2026 GMT
Not After : Apr 18 19:00:53 2026 GMT
Subject: CN=61a746ece7eeda4bec8858d8ace944622d7a23aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:19:13:2f:a2:8f:85:f6:13:64:fb:77:20:f3:
02:4a:fa:2f:c6:97:cd:12:8b:51:fd:8e:65:70:77:
c9:28:48:68:da:14:9e:d3:c1:cd:01:8d:dc:3d:5c:
7d:26:5c:1d:db:f3:8f:99:9b:c2:87:0c:5a:69:e3:
2e:78:b0:dd:15:8d:1c:e2:70:4e:29:a7:10:98:5e:
67:8f:b4:24:7c:31:1b:f9:79:58:54:18:a2:9d:dd:
ad:6e:d1:78:33:ce:b9:41:da:c1:34:57:35:9e:56:
3a:32:85:e4:62:bb:e6:d5:1d:8c:b1:83:f2:90:c0:
f2:18:43:a8:df:f9:70:bc:1f:db:a3:7b:cd:7c:1d:
6d:ee:b7:8b:58:fa:31:a9:9a:25:cd:3e:78:39:f3:
1e:24:68:f0:93:9e:a7:10:37:b9:ca:27:10:3b:3e:
ad:f3:a9:c3:07:46:6b:a8:f5:c3:7b:35:4d:f4:74:
14:c4:0e:73:cd:72:0c:82:e0:48:5c:10:e8:2e:b2:
50:08:e6:3f:af:13:d0:9c:1f:2f:b0:97:f2:53:cb:
fd:45:e3:e9:22:0a:08:da:88:10:cc:b9:69:d2:45:
a5:57:08:6e:a0:0d:8b:d1:e0:18:cd:51:70:70:38:
9e:32:2b:02:ce:f2:8a:e9:05:65:2a:db:20:b0:2b:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A7:46:EC:E7:EE:DA:4B:EC:88:58:D8:AC:E9:44:62:2D:7A:23:AA
X509v3 Authority Key Identifier:
keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:10:a7:cb:82:23:43:49:ef:85:cd:2e:a8:a1:e7:79:dc:ec:
2f:ad:03:b6:05:0f:8a:f4:d8:34:06:31:62:8c:e5:2e:3a:1e:
3c:ac:8a:9b:1c:a1:b8:3d:6c:f1:78:f9:2b:79:1b:21:12:0c:
ae:27:67:7e:a7:7e:f0:e1:1f:e2:2a:20:43:3e:c9:5b:4e:9f:
19:92:53:90:c0:f6:7b:c5:18:c4:67:e5:80:3e:14:7c:4a:3c:
ef:29:9a:9d:b7:c7:7c:8f:d5:08:ce:09:57:95:a4:15:5b:9e:
4d:7f:bc:88:c0:cc:e0:3c:55:4b:a3:03:1f:aa:21:c7:de:62:
a9:2c:d6:b7:7f:cb:9b:bd:9f:48:cb:8d:cc:ad:12:c7:c3:81:
a0:67:06:55:79:4e:dd:6c:86:d4:ef:d7:56:e4:2b:2f:00:05:
b7:fd:f2:5c:a2:f2:5e:ef:84:7a:80:0f:d3:e3:48:76:dd:d9:
ff:8e:2b:b2:84:18:fb:00:c5:35:9b:55:62:ba:93:6b:c6:f3:
30:a5:95:2b:03:f4:0a:39:f9:d2:ef:b6:64:36:f6:05:08:70:
7f:0f:38:fc:af:d9:8f:01:4c:ba:da:d3:9c:61:43:f4:0c:c1:
53:96:89:95:28:ba:77:1f:aa:b9:62:58:bf:87:55:51:84:9d:
84:a7:94:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:29:04 2026 by rpki-client