Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
File: AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json)
Hash identifier: 5IRvH7dP2C6Uo78B8XIv0R7jpLxIwKAaon+bJfEKve8=
Subject key identifier: 2A:B6:07:BB:11:00:A5:31:86:01:B6:CD:62:31:7F:42:78:B3:87:FD
Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
Certificate issuer: /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Certificate serial: 019D27040E4125973FE9FAB53BD0D40A9BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 22:01:10 +0000
Manifest this update: Wed 25 Mar 2026 22:01:10 +0000
Manifest next update: Thu 26 Mar 2026 22:01:10 +0000
Files and hashes: 1: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: JJrsMJAlR8PSBhBx2BU3MhfIO9XQtM8X3UJgCYQYuN4=)
2: C3pfKMQJQW-010A2V2GrYZcMHLQ.roa (hash: VPKEZMstZH4HBeMsv7PNI+XFDpbDiaB9jj0dzD39XgQ=)
3: daRE9O1fZqkKzy4fulwDE1DZwPw.roa (hash: QKM8Dv9ERwfYZf45lCGN842GGmFpg8jICmmZMoRDLpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:0e:41:25:97:3f:e9:fa:b5:3b:d0:d4:0a:9b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Validity
Not Before: Mar 25 22:01:10 2026 GMT
Not After : Mar 26 22:01:10 2026 GMT
Subject: CN=2ab607bb1100a5318601b6cd62317f4278b387fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:48:ff:b6:97:32:4c:3b:1f:97:cb:e5:ca:
db:e4:3c:1d:e8:f3:9c:9c:24:27:9b:5a:41:7a:1d:
13:e8:51:2b:5b:21:50:fa:ce:2d:da:eb:97:71:a4:
c2:d2:10:bb:f6:95:24:8f:24:73:ba:49:fe:93:88:
dd:3a:9c:71:5d:8d:50:40:8a:fe:35:c9:30:fe:b6:
cb:8b:7a:cf:14:22:4c:9b:a1:7b:8a:58:be:86:de:
d9:87:1c:69:66:01:9d:4e:ba:56:39:ff:93:b4:19:
50:ee:46:ec:f4:13:f3:96:5c:36:a5:4e:88:38:b1:
1a:17:ee:a1:21:dd:29:06:64:f8:6f:92:de:e4:7b:
f2:fe:83:ed:85:39:55:47:fb:76:ea:02:bf:7a:18:
77:28:cd:a9:ed:d0:38:3c:8a:f8:20:88:f7:ed:96:
bb:a3:11:48:14:bf:bc:24:d4:14:ac:0f:1d:84:20:
12:90:89:5a:71:b4:cb:47:e6:fa:64:98:17:71:ea:
b7:e0:65:e1:4e:fa:26:cd:bb:4d:84:6e:17:59:0a:
eb:2a:93:e2:1c:34:db:40:2e:60:4b:5b:1f:b6:18:
d1:f9:cc:79:53:c1:1a:23:b8:48:0a:42:e6:00:a0:
92:40:f5:b1:ca:20:df:0a:db:2d:10:a0:04:a4:e0:
08:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B6:07:BB:11:00:A5:31:86:01:B6:CD:62:31:7F:42:78:B3:87:FD
X509v3 Authority Key Identifier:
keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ca:78:64:74:12:93:1a:21:5e:aa:c5:ee:31:22:d8:7d:32:
0c:ca:8d:ae:3a:a2:35:39:1e:5d:61:fa:fa:11:b2:aa:28:8d:
cd:5f:38:b0:91:88:78:c3:26:1d:98:0d:61:6c:2a:2c:4c:80:
f0:29:29:b2:21:ef:b4:93:0c:d3:d5:60:4f:c9:e1:2f:2f:b9:
82:02:89:b8:0d:42:3e:33:6f:1e:00:8f:b5:5d:ac:e6:2b:75:
7b:70:26:a0:b2:4f:4a:d5:1a:54:36:f9:7d:8b:e7:3b:c7:7e:
59:d8:82:ae:b2:69:58:75:fa:db:a3:b9:53:1b:d9:43:5e:e0:
4f:36:09:4d:55:fc:9c:0d:18:69:18:25:e4:d4:69:c2:a1:17:
d3:97:47:8b:8f:b7:8a:ce:62:0c:58:06:33:7d:43:14:77:3b:
84:65:4d:3b:2f:de:fe:b1:2c:19:cf:f8:6c:ee:58:41:c9:7c:
f7:ad:17:5f:d9:66:1a:62:1b:d7:33:f8:3a:fc:57:80:38:67:
73:ab:57:46:6c:f3:28:83:5f:69:42:d8:b7:5a:89:ce:4a:8e:
35:5c:dc:cc:28:9d:38:c2:97:9e:c0:99:f2:95:e8:65:c0:87:
6c:8c:86:d4:ae:d6:7c:cf:f0:15:1a:b7:f6:ac:d5:ad:86:68:
c2:b4:d9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:17 2026 by rpki-client