Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
File: AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json)
Hash identifier: xzRWvvPA+iMqprg9QjpKxzncZOeKKQblO8CV4s2VmGI=
Subject key identifier: FB:E8:F6:AE:D2:B4:5F:B2:02:D6:9F:55:EB:58:C8:1A:BE:96:7F:A5
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 019D26289383CF232BFF9C7FAB8319A86053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
Manifest number: 13A8
Signing time: Wed 25 Mar 2026 18:01:26 +0000
Manifest this update: Wed 25 Mar 2026 18:01:26 +0000
Manifest next update: Thu 26 Mar 2026 18:01:26 +0000
Files and hashes: 1: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: 62KsxRzuFtk3P0JApEMJ54+AG8//uer9PwipV43K0eo=)
2: FhAIMUxM-Ll-oJX8w_r_I6M_rVk.roa (hash: nnvV5m84QJk1AHjPftM2Kij4fMdReO4PZF5m7Lms+G8=)
3: OcFwuq-p9HfjXsFdJJy-918eeGE.roa (hash: ZCJKUc/KJIf9lC3fGgSPAtb279PGc32c5MBKffe5v3I=)
4: Pqb4jrQCqGySE_13LWqkkjr2SqA.roa (hash: MNvdDeohOV6QSo5IkgaAgBlZhC2buJQJfrYeSQwjLnc=)
5: cowiEY4LpotW_FI6i6NIxMkzq_M.roa (hash: CVVDglQk6Sk1jW5b5HdU0v+jUDJ+LW3BSjI0Z8Zod7U=)
6: hdmcIiKIZX8G4d6aOngw7fPbjSM.roa (hash: vkx9iSLozc4+nysiRZ6DJE0dNHHPaSgNyoUkZVK01oM=)
7: hxPfoQ5zcHsvOrtnuhN1m95U5cU.roa (hash: lliptOGwNH/8NzlTS+UvxhO5pR/n6bNmW4zrOP9Ic50=)
8: ssht21R0cK-y2YFHOwMdCwB13ew.roa (hash: Dhxo4nIlxfip0AdJuT5wp8b/mqjigonQHFuIrFMgf7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:93:83:cf:23:2b:ff:9c:7f:ab:83:19:a8:60:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Mar 25 18:01:26 2026 GMT
Not After : Mar 26 18:01:26 2026 GMT
Subject: CN=fbe8f6aed2b45fb202d69f55eb58c81abe967fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:0f:6a:46:bd:b7:bc:54:79:e1:19:96:32:
c0:4f:37:e0:db:33:48:89:fc:89:b1:52:52:ff:d0:
21:02:37:e1:b5:ea:7e:ae:1a:42:85:81:39:06:6b:
0d:df:7f:18:d9:2f:d3:dd:e1:1c:37:d8:71:3a:d3:
71:f6:88:5f:13:10:fa:19:28:3a:ef:79:9b:56:4b:
86:1c:2c:e2:43:7c:27:d6:9c:7a:73:53:38:8d:66:
21:db:a8:e9:7c:c0:33:39:77:dc:d2:8d:cf:db:7e:
1c:80:ce:c7:b1:67:4f:97:1f:16:83:22:46:77:bc:
ed:4f:7b:14:1f:1e:46:e8:4b:01:86:2a:db:19:61:
65:88:cd:28:5d:31:de:84:d8:36:3b:1e:f6:c6:a5:
ba:25:01:dc:88:87:09:6e:48:b8:66:71:71:5d:84:
3f:32:0e:c6:97:e7:78:96:e0:59:09:68:76:eb:1f:
7c:0d:c0:09:d0:3f:b8:9a:9b:4d:9f:ae:a2:d0:97:
a0:71:16:3f:68:34:cf:c8:60:9e:37:19:b7:2f:a0:
2f:1d:ce:f3:0e:31:2b:d5:f7:bd:52:df:6f:d2:ef:
57:7d:7c:2f:66:08:23:72:11:16:b0:9c:66:ae:9b:
1b:37:ff:e7:5d:61:11:52:8e:1c:08:8a:a4:c8:2d:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E8:F6:AE:D2:B4:5F:B2:02:D6:9F:55:EB:58:C8:1A:BE:96:7F:A5
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e8:af:60:f1:12:5b:82:81:b3:9a:20:ec:75:0b:ad:27:0c:
a8:87:fc:6b:ef:f7:5a:76:23:06:10:54:27:84:89:f5:12:ab:
f6:e1:08:95:15:6f:4f:f3:e7:27:f7:0d:30:32:5e:9a:6f:f0:
58:fd:29:75:55:4b:22:93:fb:17:30:4c:0a:8c:64:a5:28:0c:
e7:ba:db:08:ba:96:28:5c:cc:0f:3e:de:7e:28:93:dd:87:30:
c6:6e:93:47:03:de:6e:ff:79:b5:98:c2:5a:6b:bd:4f:17:33:
65:c7:87:dd:32:d3:a4:b3:86:ab:38:07:fb:e0:28:10:81:6e:
64:44:0e:e5:68:9d:4b:2d:12:64:6c:5f:c2:17:ef:4d:8e:39:
d2:67:ad:c3:97:ac:08:0c:a1:34:49:e0:c8:91:ed:d3:59:df:
77:9a:73:bd:79:7c:e4:ef:16:9f:c8:60:82:00:0a:bf:df:02:
2f:4c:d5:3a:cc:f2:25:aa:c1:8b:85:47:d3:e2:15:f5:15:41:
ff:6d:c4:ce:25:83:26:e5:1a:f8:f9:a6:9e:b4:c8:93:39:ac:
3f:17:24:05:26:d9:c4:6f:30:91:66:da:d6:be:c6:78:17:60:
45:fc:6a:c5:70:5b:db:5e:85:c4:4e:29:92:5d:e6:ba:a0:8e:
23:4f:28:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKJODzyMr/5x/q4MZqGBTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjYwMzI1MTgwMTI2WhcNMjYwMzI2MTgwMTI2WjAzMTEwLwYDVQQD
EyhmYmU4ZjZhZWQyYjQ1ZmIyMDJkNjlmNTVlYjU4YzgxYWJlOTY3ZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6MPaka9t7xUeeEZljLATzfg2zNI
ifyJsVJS/9AhAjfhtep+rhpChYE5BmsN338Y2S/T3eEcN9hxOtNx9ohfExD6GSg6
73mbVkuGHCziQ3wn1px6c1M4jWYh26jpfMAzOXfc0o3P234cgM7HsWdPlx8WgyJG
d7ztT3sUHx5G6EsBhirbGWFliM0oXTHehNg2Ox72xqW6JQHciIcJbki4ZnFxXYQ/
Mg7Gl+d4luBZCWh26x98DcAJ0D+4mptNn66i0JegcRY/aDTPyGCeNxm3L6AvHc7z
DjEr1fe9Ut9v0u9XfXwvZggjchEWsJxmrpsbN//nXWERUo4cCIqkyC1gBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvo9q7StF+yAtafVetYyBq+ln+lMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOivYPES
W4KBs5og7HULrScMqIf8a+/3WnYjBhBUJ4SJ9RKr9uEIlRVvT/PnJ/cNMDJemm/w
WP0pdVVLIpP7FzBMCoxkpSgM57rbCLqWKFzMDz7efiiT3Ycwxm6TRwPebv95tZjC
Wmu9TxczZceH3TLTpLOGqzgH++AoEIFuZEQO5WidSy0SZGxfwhfvTY450metw5es
CAyhNEngyJHt01nfd5pzvXl85O8Wn8hgggAKv98CL0zVOszyJarBi4VH0+IV9RVB
/23EziWDJuUa+PmmnrTIkzmsPxckBSbZxG8wkWba1r7GeBdgRfxqxXBb216FxE4p
kl3muqCOI08o6w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:12 2026 by rpki-client