Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
File: AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json)
Hash identifier: CLJKyKxMNlUQgeQO31VXSD65tCPUVawet1BinUOaCP4=
Subject key identifier: FB:CD:7A:57:6A:74:98:D8:8D:97:2D:33:BC:FC:2D:E7:85:8F:CB:79
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01A0D494869D30D6B6C001906643DF6F762D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
Manifest number: 1590
Signing time: Thu 24 Sep 2026 18:01:38 +0000
Manifest this update: Thu 24 Sep 2026 18:01:38 +0000
Manifest next update: Fri 25 Sep 2026 18:01:38 +0000
Files and hashes: 1: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: RfGyyE1DhaSd/URIYeU4HiCKNUHQqjpuRvnkNxgS+Ko=)
2: FhAIMUxM-Ll-oJX8w_r_I6M_rVk.roa (hash: nnvV5m84QJk1AHjPftM2Kij4fMdReO4PZF5m7Lms+G8=)
3: OcFwuq-p9HfjXsFdJJy-918eeGE.roa (hash: ZCJKUc/KJIf9lC3fGgSPAtb279PGc32c5MBKffe5v3I=)
4: Pqb4jrQCqGySE_13LWqkkjr2SqA.roa (hash: MNvdDeohOV6QSo5IkgaAgBlZhC2buJQJfrYeSQwjLnc=)
5: cowiEY4LpotW_FI6i6NIxMkzq_M.roa (hash: CVVDglQk6Sk1jW5b5HdU0v+jUDJ+LW3BSjI0Z8Zod7U=)
6: hdmcIiKIZX8G4d6aOngw7fPbjSM.roa (hash: vkx9iSLozc4+nysiRZ6DJE0dNHHPaSgNyoUkZVK01oM=)
7: hxPfoQ5zcHsvOrtnuhN1m95U5cU.roa (hash: lliptOGwNH/8NzlTS+UvxhO5pR/n6bNmW4zrOP9Ic50=)
8: ssht21R0cK-y2YFHOwMdCwB13ew.roa (hash: Dhxo4nIlxfip0AdJuT5wp8b/mqjigonQHFuIrFMgf7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:86:9d:30:d6:b6:c0:01:90:66:43:df:6f:76:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Sep 24 18:01:38 2026 GMT
Not After : Sep 25 18:01:38 2026 GMT
Subject: CN=fbcd7a576a7498d88d972d33bcfc2de7858fcb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:90:f5:9f:09:c3:5d:8a:56:96:6f:4e:de:52:
3c:66:f1:8a:3c:8d:02:94:14:6d:7d:49:03:14:39:
86:c0:fe:85:a2:6c:93:8b:88:4e:8e:5b:dc:6f:28:
67:d0:64:93:29:cf:79:04:c3:e6:7a:32:64:ee:25:
b6:1d:8d:ef:b4:52:ab:00:dd:35:41:9b:ac:72:b4:
63:dd:25:c4:b4:52:a8:a9:15:74:ed:e8:1d:5a:0d:
fb:f8:01:fd:18:bd:97:e8:bb:6d:9e:72:a6:0d:af:
40:61:f8:e1:ac:78:02:9a:de:23:45:3b:26:b2:55:
01:b6:80:a2:3f:09:a4:42:83:a4:11:8d:c4:84:0e:
d1:7e:e2:6a:46:bf:30:c7:35:89:bf:ed:35:0a:85:
d6:01:c9:6e:dd:3b:d1:84:ec:9e:bf:42:d2:7f:fc:
31:f6:5f:c9:28:19:ae:a2:df:c5:3d:ec:0b:ef:74:
b0:b8:36:9e:28:a5:9b:9e:cd:ba:39:15:c2:d3:78:
90:c0:2a:79:f3:30:92:2c:5a:4d:e5:1f:4b:36:98:
f7:1a:50:7b:e3:0e:98:e3:cf:a7:0f:83:f0:df:28:
5f:37:f0:eb:3e:00:77:f0:d4:c6:e2:b8:33:47:66:
e7:5c:d1:6f:8b:64:79:09:6a:d2:52:75:fe:d3:6f:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CD:7A:57:6A:74:98:D8:8D:97:2D:33:BC:FC:2D:E7:85:8F:CB:79
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:61:7e:74:fb:30:4a:82:59:c7:70:b2:af:d7:4c:29:e6:d0:
71:91:58:fd:4d:11:07:36:35:1d:71:03:20:93:75:f9:0a:3e:
ba:1c:1f:d8:66:74:ad:4f:7f:4c:ba:92:cd:c0:60:f6:fc:f6:
e7:7d:51:18:d2:c4:97:d5:b5:c1:38:e2:59:09:e6:95:11:85:
7c:78:bd:db:19:76:4e:ff:e6:ba:23:18:75:ee:ad:96:48:1a:
68:06:db:36:6a:80:90:34:81:f2:e3:74:a8:87:84:2d:f6:59:
a6:83:bd:bd:d3:ca:46:db:70:00:ab:05:72:5f:d3:19:3e:73:
23:a7:74:7e:33:16:90:db:3f:cf:6e:b9:a8:a0:6e:35:35:5b:
7a:e7:5f:29:b6:61:7b:a3:3d:91:19:43:cb:a5:42:50:0c:09:
fc:17:a6:b5:cd:dd:32:15:77:e4:61:98:b2:72:3b:d8:d1:5e:
45:a7:2c:c7:7c:77:40:53:01:7a:43:fd:d5:bd:fe:9a:be:a1:
db:a7:7d:d2:1b:40:91:4c:f1:a9:28:3d:3e:e6:cb:44:ef:b3:
5c:8b:8d:e0:9d:78:d2:31:22:81:4d:7d:ce:79:f7:f0:a1:0d:
d2:46:b7:47:7b:b1:4b:9a:70:26:e0:a6:04:3d:b9:dd:84:8e:
52:a2:0a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:03:40 2026 by rpki-client