Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
File: AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json)
Hash identifier: EwbKUhIsy6AY5sn9RqrP92gnEy3BeIrIDH9jPeoQk2M=
Subject key identifier: 1A:4A:C5:30:7C:50:93:9A:76:73:9C:F5:1F:3E:89:0A:01:D4:C8:52
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 019E1D5915A64896F67BB30C0C1DEB4AA3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
Manifest number: 1428
Signing time: Tue 12 May 2026 18:00:37 +0000
Manifest this update: Tue 12 May 2026 18:00:37 +0000
Manifest next update: Wed 13 May 2026 18:00:37 +0000
Files and hashes: 1: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: vvLhbdGWLgSALOp26xbgiWtYUiK04lEKxYZhrw3qkZI=)
2: FhAIMUxM-Ll-oJX8w_r_I6M_rVk.roa (hash: nnvV5m84QJk1AHjPftM2Kij4fMdReO4PZF5m7Lms+G8=)
3: OcFwuq-p9HfjXsFdJJy-918eeGE.roa (hash: ZCJKUc/KJIf9lC3fGgSPAtb279PGc32c5MBKffe5v3I=)
4: Pqb4jrQCqGySE_13LWqkkjr2SqA.roa (hash: MNvdDeohOV6QSo5IkgaAgBlZhC2buJQJfrYeSQwjLnc=)
5: cowiEY4LpotW_FI6i6NIxMkzq_M.roa (hash: CVVDglQk6Sk1jW5b5HdU0v+jUDJ+LW3BSjI0Z8Zod7U=)
6: hdmcIiKIZX8G4d6aOngw7fPbjSM.roa (hash: vkx9iSLozc4+nysiRZ6DJE0dNHHPaSgNyoUkZVK01oM=)
7: hxPfoQ5zcHsvOrtnuhN1m95U5cU.roa (hash: lliptOGwNH/8NzlTS+UvxhO5pR/n6bNmW4zrOP9Ic50=)
8: ssht21R0cK-y2YFHOwMdCwB13ew.roa (hash: Dhxo4nIlxfip0AdJuT5wp8b/mqjigonQHFuIrFMgf7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:15:a6:48:96:f6:7b:b3:0c:0c:1d:eb:4a:a3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: May 12 18:00:37 2026 GMT
Not After : May 13 18:00:37 2026 GMT
Subject: CN=1a4ac5307c50939a76739cf51f3e890a01d4c852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:36:b9:14:fb:f2:49:34:e5:e2:6a:da:9a:
a3:d8:9f:89:26:65:34:bd:a1:55:9a:d3:ac:38:d9:
39:07:ee:b3:df:62:53:1f:94:97:e7:5b:de:51:48:
ac:f2:2c:7c:79:f5:24:88:17:a1:2e:19:d2:e2:af:
2f:39:88:bd:10:c0:64:e6:20:02:0a:c6:59:2e:bf:
b3:e2:12:0a:c8:48:10:ea:cd:88:5c:62:27:e2:ba:
9e:25:7e:f8:8a:e4:00:fc:71:82:d4:a1:d3:13:e4:
a1:9e:45:c2:79:36:37:fd:9f:bb:ce:e8:6f:d3:93:
58:1b:9a:ba:10:df:ed:2d:fc:68:ca:ca:77:80:d8:
13:f3:05:8d:70:41:d6:f7:aa:8f:1d:6e:ed:c6:60:
e5:b1:00:bf:a8:6d:a6:9e:23:bc:0b:d3:92:f2:ff:
44:b5:a2:ba:90:4f:d4:12:82:44:88:68:e9:b7:90:
bf:91:86:b1:41:1d:1e:a5:2a:ca:aa:0e:4f:65:b9:
35:b4:dd:b8:cb:fc:8f:ce:2b:02:5f:81:47:d3:d3:
b8:37:1a:50:26:4a:30:89:02:9c:59:14:95:00:38:
9b:d4:ce:5e:2a:e8:ee:aa:50:20:a6:94:cb:dd:48:
ae:62:d4:81:a8:99:d4:46:48:b1:8b:60:4c:58:2c:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4A:C5:30:7C:50:93:9A:76:73:9C:F5:1F:3E:89:0A:01:D4:C8:52
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d1:0f:96:9c:f8:98:2b:ac:90:41:af:10:dc:70:f8:cd:d4:
9e:e0:48:fd:dd:d9:f1:4a:e0:2b:ab:fc:bf:d2:b6:63:b2:e2:
20:8c:a0:ad:e1:36:61:e6:8a:bd:12:9d:e2:07:5c:e2:0c:2b:
38:ae:5f:e7:d1:14:d2:fb:cb:38:45:fa:5d:22:a5:f6:d0:5f:
e8:da:11:c8:bd:99:85:72:85:83:44:7d:58:de:8e:20:8b:25:
86:42:2d:ff:75:fe:fb:dd:6a:79:72:86:77:8d:84:57:00:9a:
05:c6:90:d1:29:fa:76:12:06:34:13:f3:7f:49:41:94:b8:14:
7b:ae:3d:9c:4c:b5:ce:5c:e6:69:7a:06:78:c7:b6:9f:11:61:
78:32:d6:cb:9c:e2:6e:92:cb:ce:61:2e:54:de:92:84:2b:f1:
3e:d1:05:3b:1d:4e:df:06:f0:4f:05:f5:72:c9:e0:20:3b:9c:
a8:87:cd:a8:dd:1c:e0:50:bd:8f:41:62:7a:ee:fa:59:0a:24:
a4:fd:26:3b:38:d4:fc:d2:36:0c:dc:56:68:27:f8:63:b6:cf:
9a:e8:62:3b:13:5b:35:3e:0d:d1:83:89:fe:88:32:73:b1:0d:
55:c6:bc:8e:b2:95:87:c7:38:c9:f8:77:49:f8:80:14:8c:d2:
ae:06:04:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:52 2026 by rpki-client