Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
File: AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json)
Hash identifier: AWHrp3rgSvoHN+inMSbL+JHVKRwBvBEKMGHuxe7NH1o=
Subject key identifier: 35:ED:ED:D9:EC:1B:EB:58:0C:65:28:FB:88:11:10:E3:1A:A8:33:AC
Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
Certificate issuer: /CN=00a856a4173895af44b8fd34455469a5c4d6173b
Certificate serial: 01A0DB3ABC99AF701C4A436AE72E36FBF66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
Manifest number: 05B6
Signing time: Sat 26 Sep 2026 01:00:54 +0000
Manifest this update: Sat 26 Sep 2026 01:00:54 +0000
Manifest next update: Sun 27 Sep 2026 01:00:54 +0000
Files and hashes: 1: 2vNgKOpEbzaja_VIW4Gy_vX__vw.roa (hash: 3da40VmqFrVIzGNQWd74Q1I2LkbqTG2fl0jqzMqaDcU=)
2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: xakCBCau8GGvBDkqzxMg38LBWEwtbhIjmn+1x40Qmqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3a:bc:99:af:70:1c:4a:43:6a:e7:2e:36:fb:f6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b
Validity
Not Before: Sep 26 01:00:54 2026 GMT
Not After : Sep 27 01:00:54 2026 GMT
Subject: CN=35ededd9ec1beb580c6528fb881110e31aa833ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:4c:6a:d4:d6:01:24:b5:05:3c:79:0d:86:
39:c7:bb:f7:fd:e3:74:f4:09:31:ea:e7:61:e5:f2:
44:5a:53:f0:8a:14:b5:d2:d5:6d:32:c2:ae:79:f4:
12:b8:58:47:f9:35:a0:42:40:69:2a:46:43:d0:d2:
df:f7:fb:2f:8d:0a:fb:42:17:52:d9:d3:e7:23:13:
9a:e4:78:05:5f:26:c8:52:b4:7b:4e:51:81:ad:41:
87:4c:0d:d3:81:1d:43:88:72:82:05:8b:cf:94:cc:
fd:10:35:fd:dc:8e:d9:f6:45:b9:f5:e8:b2:d8:ed:
19:b5:63:d0:61:bb:a5:f2:a3:28:ee:3e:ce:71:cf:
87:c6:04:ae:cf:27:84:5b:c0:72:54:7b:c7:37:7a:
e6:65:22:a9:7c:2f:94:02:88:48:dc:cc:f5:76:df:
8b:3a:1f:f1:d1:c9:2a:4e:55:d3:f7:87:5b:1a:a3:
bc:8d:4d:b5:10:e9:63:1b:bc:7f:88:6b:98:c4:09:
3e:b4:d2:3e:5c:01:56:aa:00:c8:94:65:ed:dd:a0:
65:e1:69:ec:74:b8:6d:5f:4c:bd:d4:8f:89:5a:36:
02:1e:5a:64:a6:1f:58:b9:77:17:d3:a1:01:bf:15:
d6:8c:93:b0:42:47:f5:ca:e8:d8:61:41:7e:52:76:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:ED:ED:D9:EC:1B:EB:58:0C:65:28:FB:88:11:10:E3:1A:A8:33:AC
X509v3 Authority Key Identifier:
keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:db:03:b2:f8:f3:0b:5f:cf:08:53:ae:a9:3d:5f:37:9e:51:
2e:d8:8c:4e:22:2d:5a:49:30:7d:b5:b8:29:d7:e1:28:48:25:
62:58:22:d7:50:aa:79:2d:26:60:ec:88:0d:66:20:ab:dd:c8:
6d:4b:72:11:be:26:2b:e2:81:8a:42:db:90:45:28:07:8c:7a:
08:72:47:e0:d7:30:3b:d0:ae:1b:3d:b1:8f:6c:b5:78:7a:0b:
42:7d:92:71:ae:1c:77:50:1f:d8:04:f0:c6:2c:10:09:99:dc:
36:81:9a:3f:0d:05:7c:59:74:fe:88:27:f1:db:94:12:7b:8c:
da:95:39:24:93:f9:67:b0:9f:62:78:01:e6:a4:f4:d2:10:4b:
0d:31:94:c6:6a:58:28:e7:87:eb:1b:02:77:e6:aa:83:2c:95:
34:cf:24:9e:8d:86:e0:39:de:c8:4b:2d:b0:09:9a:95:42:4c:
18:41:bb:c6:01:ac:c8:2f:82:5a:7c:3d:5a:ac:be:26:9c:1a:
10:ae:f3:a5:8e:37:5a:9b:ba:0c:c7:59:1b:fb:3f:f6:fe:85:
3f:9c:b0:98:c9:d1:7d:a9:73:2c:bb:ff:69:2b:bd:26:33:83:
23:03:7c:4e:5b:1e:90:66:ac:c1:76:69:11:1d:af:af:f4:41:
b8:72:99:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:15:13 2026 by rpki-client