Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
File: AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json)
Hash identifier: /FLlqdD486N3h3NFPtuVK9e4QfnmrocJQ8MeAHgbUNU=
Subject key identifier: 42:CE:09:F2:70:E4:16:8E:19:72:5C:E4:33:7B:70:D6:EE:0E:24:A0
Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
Certificate issuer: /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Certificate serial: 019E1C468BDACA45ED589014669DCECA0547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 13:00:45 +0000
Manifest this update: Tue 12 May 2026 13:00:45 +0000
Manifest next update: Wed 13 May 2026 13:00:45 +0000
Files and hashes: 1: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: 3PfuJQLdGJXyFpz62FUDqFib8sM1VynLpBw1SaIg1Bk=)
2: C3pfKMQJQW-010A2V2GrYZcMHLQ.roa (hash: VPKEZMstZH4HBeMsv7PNI+XFDpbDiaB9jj0dzD39XgQ=)
3: daRE9O1fZqkKzy4fulwDE1DZwPw.roa (hash: QKM8Dv9ERwfYZf45lCGN842GGmFpg8jICmmZMoRDLpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:8b:da:ca:45:ed:58:90:14:66:9d:ce:ca:05:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Validity
Not Before: May 12 13:00:45 2026 GMT
Not After : May 13 13:00:45 2026 GMT
Subject: CN=42ce09f270e4168e19725ce4337b70d6ee0e24a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:87:ae:84:b6:d4:b8:00:e6:c5:ff:14:a4:
45:e1:34:d5:3d:4f:1e:47:db:09:54:a8:95:15:76:
f9:32:56:b1:78:1e:8c:6a:36:38:66:1f:0e:92:05:
8f:8f:e3:37:7b:93:c7:d2:9b:33:66:2a:9a:48:a9:
a0:dc:6c:a3:e3:67:f7:8b:8c:f2:61:2f:c1:1a:3e:
f8:ff:7e:53:83:70:70:73:a1:aa:c9:88:96:2d:11:
42:71:cb:20:e9:0f:41:5e:9f:7a:14:de:a9:27:7d:
e4:11:3f:76:dd:0b:65:79:53:4a:6e:35:48:6c:d1:
da:ba:8e:ab:e3:95:e1:64:a5:e1:0a:2b:74:7d:1c:
e4:3a:cb:54:0b:71:20:99:ce:b2:45:01:fd:6a:ca:
50:76:86:4e:26:39:62:4b:57:ed:6b:af:99:bb:fb:
64:f1:69:32:9d:b6:0e:1a:4b:0b:df:96:05:80:c6:
91:38:c5:fd:3e:f1:c1:2d:bd:cb:62:55:22:14:f5:
94:be:00:51:4f:0f:b2:0a:59:3b:a5:71:39:f3:5f:
1a:a4:74:91:c4:5b:3b:8f:50:31:38:32:16:18:4c:
87:db:8c:bc:5a:0c:93:c0:3a:e5:a6:c4:3d:eb:4d:
03:6b:b3:93:78:39:24:69:91:13:ce:f9:0d:48:66:
fa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CE:09:F2:70:E4:16:8E:19:72:5C:E4:33:7B:70:D6:EE:0E:24:A0
X509v3 Authority Key Identifier:
keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:45:24:79:3f:b2:92:78:95:84:4b:a9:f8:a3:4d:c3:51:75:
36:21:ba:e7:4e:82:00:fe:f0:73:d7:18:c8:bb:78:29:4e:8d:
04:95:65:cc:85:a1:39:e4:e8:b6:9e:65:4b:2e:4e:00:d7:57:
35:d6:a1:d2:05:34:6b:9d:2b:0c:52:01:4d:0c:82:bb:27:a7:
c2:92:11:33:e9:af:c7:e3:da:9e:9b:0f:6f:40:6a:09:f1:df:
c9:89:f5:e5:27:70:6e:d3:28:a3:6b:03:41:02:7a:26:a3:b7:
0f:c3:23:65:8b:ed:c0:4e:cc:93:db:ac:eb:0c:17:48:f5:22:
39:dd:99:55:24:65:63:ea:59:b3:ee:51:1e:61:33:63:cf:1e:
43:36:e8:30:87:00:ee:ae:7b:dc:04:d5:ff:4c:9b:83:ce:69:
07:8a:aa:b9:19:47:b6:0f:84:ff:d4:de:2d:9f:a6:4c:ae:d7:
68:d7:d0:01:07:7b:6c:1d:cd:33:68:af:07:0e:ba:48:47:dc:
c2:03:29:9b:72:eb:05:bb:54:bf:88:06:d1:46:a7:7a:8d:31:
1d:7c:c3:2f:e2:f3:ed:8a:17:49:9d:43:c6:a9:9d:ab:07:d5:
5c:0e:cb:df:a8:e6:46:f2:bd:24:48:8b:c6:1e:ab:1e:a6:f3:
43:26:8e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:24 2026 by rpki-client