Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
File: AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json)
Hash identifier: nJ2XWgJzwkFFvDfP3W4ZsXw9dzcAhDc3qwsksWjqw2Y=
Subject key identifier: A3:CB:0B:70:3C:12:13:85:DC:34:EF:DC:4A:4F:D9:41:1F:38:DF:27
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 019F9022BB7BCC9EAF5C14FE5BAAACE88612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
Manifest number: 14E8
Signing time: Thu 23 Jul 2026 18:00:22 +0000
Manifest this update: Thu 23 Jul 2026 18:00:22 +0000
Manifest next update: Fri 24 Jul 2026 18:00:22 +0000
Files and hashes: 1: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: ju9dwe+IfgH/1TXiUGGxVqF1VfktAWURw8VHYOfwCy0=)
2: FhAIMUxM-Ll-oJX8w_r_I6M_rVk.roa (hash: nnvV5m84QJk1AHjPftM2Kij4fMdReO4PZF5m7Lms+G8=)
3: OcFwuq-p9HfjXsFdJJy-918eeGE.roa (hash: ZCJKUc/KJIf9lC3fGgSPAtb279PGc32c5MBKffe5v3I=)
4: Pqb4jrQCqGySE_13LWqkkjr2SqA.roa (hash: MNvdDeohOV6QSo5IkgaAgBlZhC2buJQJfrYeSQwjLnc=)
5: cowiEY4LpotW_FI6i6NIxMkzq_M.roa (hash: CVVDglQk6Sk1jW5b5HdU0v+jUDJ+LW3BSjI0Z8Zod7U=)
6: hdmcIiKIZX8G4d6aOngw7fPbjSM.roa (hash: vkx9iSLozc4+nysiRZ6DJE0dNHHPaSgNyoUkZVK01oM=)
7: hxPfoQ5zcHsvOrtnuhN1m95U5cU.roa (hash: lliptOGwNH/8NzlTS+UvxhO5pR/n6bNmW4zrOP9Ic50=)
8: ssht21R0cK-y2YFHOwMdCwB13ew.roa (hash: Dhxo4nIlxfip0AdJuT5wp8b/mqjigonQHFuIrFMgf7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:bb:7b:cc:9e:af:5c:14:fe:5b:aa:ac:e8:86:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jul 23 18:00:22 2026 GMT
Not After : Jul 24 18:00:22 2026 GMT
Subject: CN=a3cb0b703c121385dc34efdc4a4fd9411f38df27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f7:f2:ee:9f:7d:c9:b9:77:24:c2:7c:63:ef:
1f:15:b0:c8:64:cb:bc:b1:3b:cc:43:1e:16:c9:8e:
be:cb:79:61:7a:99:fb:77:aa:5d:a2:ce:b3:92:87:
b6:af:7e:9e:5b:f0:3d:b3:2a:1a:38:05:5b:41:b1:
e4:82:19:b7:33:44:e0:d9:9e:99:a7:bf:ba:36:ed:
48:1e:77:e9:e4:a5:a2:da:9e:05:18:3e:20:f5:79:
87:c8:8a:70:c2:2b:b4:4c:5b:34:d5:f7:93:92:79:
d1:75:68:dc:63:d2:da:be:49:81:f2:dc:8b:c5:ef:
e8:be:7b:46:36:06:20:bb:9e:11:56:57:11:12:40:
a4:6f:eb:10:c7:43:75:2a:53:ad:6e:ab:6a:49:9e:
d7:f1:14:4a:27:c3:41:e9:03:21:ed:eb:2c:28:58:
1d:b7:a5:d9:24:fd:25:22:d5:35:3e:41:ad:3c:24:
ea:33:5a:ad:54:c5:02:56:88:f7:a6:6f:57:8e:6e:
82:81:f3:5c:72:1e:3d:30:22:f1:22:52:0a:69:fd:
87:c3:c5:2b:2d:bf:21:fa:49:ed:1b:bd:1f:5d:10:
c0:d6:d9:9f:6c:85:99:97:02:52:6e:88:d0:cc:a7:
9f:b3:31:fe:65:95:ae:64:61:e7:95:75:11:f9:0e:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CB:0B:70:3C:12:13:85:DC:34:EF:DC:4A:4F:D9:41:1F:38:DF:27
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:49:ff:bf:9e:94:2f:f1:bb:00:71:b9:a4:7b:e5:4e:ec:cb:
2e:2e:ed:92:bf:df:4e:16:12:c4:79:f9:a2:33:b1:c7:d6:27:
56:73:9e:56:1b:d7:10:22:80:d6:3e:70:78:95:32:70:d4:2d:
13:ec:cd:97:76:3a:f2:5a:f3:c4:f6:ea:bc:f6:26:08:4d:4f:
d9:ea:fa:3f:58:df:24:08:3a:33:b3:27:42:f4:45:13:e2:0c:
a3:c4:06:14:03:e4:53:91:b8:d0:fe:be:4a:8d:83:8d:2f:28:
46:db:3d:dd:13:7b:d3:bc:96:11:b7:23:27:d0:ef:1c:6b:3a:
a2:e1:fc:b9:fc:80:1e:2c:e8:4e:6a:9d:94:91:71:f5:7e:f1:
a4:92:fe:5a:6a:d4:35:d2:25:26:bc:1b:f6:9a:f3:f6:40:26:
7d:36:cb:7a:25:80:c6:f8:a1:15:aa:13:53:ae:7d:6b:97:2e:
e1:bb:65:02:a0:0a:b6:c4:27:28:28:02:b8:9d:8b:57:be:6f:
50:7a:96:31:54:9b:2b:97:2c:da:97:96:62:30:ab:09:00:e0:
75:aa:f5:65:20:11:4c:56:b4:86:9a:85:4f:b5:ee:2c:4a:92:
42:0e:b2:a2:6a:3a:f7:5d:da:eb:23:2d:b3:e4:8f:b6:1c:47:
5b:d2:87:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:52:57 2026 by rpki-client