Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
File: AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json)
Hash identifier: viOUnxK4EXWHuSLfQc0lEiCuzGO8u2IpNdWYps242pA=
Subject key identifier: C9:15:53:49:2F:16:B5:E3:BC:8F:6B:C8:2D:B9:7F:A2:EB:DD:F1:82
Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
Certificate issuer: /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Certificate serial: 019F90FEBBEBFBD8F47B31AEEEC84F40E6A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
Manifest number: 19C7
Signing time: Thu 23 Jul 2026 22:00:41 +0000
Manifest this update: Thu 23 Jul 2026 22:00:41 +0000
Manifest next update: Fri 24 Jul 2026 22:00:41 +0000
Files and hashes: 1: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: rfg8K2MQxhxX94HUtYF64AdcCtS6+yLSfr7VbFOvwSA=)
2: C3pfKMQJQW-010A2V2GrYZcMHLQ.roa (hash: VPKEZMstZH4HBeMsv7PNI+XFDpbDiaB9jj0dzD39XgQ=)
3: daRE9O1fZqkKzy4fulwDE1DZwPw.roa (hash: QKM8Dv9ERwfYZf45lCGN842GGmFpg8jICmmZMoRDLpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:bb:eb:fb:d8:f4:7b:31:ae:ee:c8:4f:40:e6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Validity
Not Before: Jul 23 22:00:41 2026 GMT
Not After : Jul 24 22:00:41 2026 GMT
Subject: CN=c91553492f16b5e3bc8f6bc82db97fa2ebddf182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:a6:cb:6c:c7:86:15:48:4f:99:c0:74:4e:
90:36:16:81:60:29:d9:71:77:a9:23:3a:28:6e:bd:
89:a1:df:79:da:c7:63:6e:c2:e1:45:a9:86:f4:13:
02:34:a4:08:35:72:82:a0:8b:d0:36:82:f2:28:07:
46:fe:72:e1:f2:bd:d7:eb:65:37:08:0d:9e:33:50:
5b:bc:4a:4b:e7:b3:5d:fd:d3:72:e2:1c:bc:cc:a3:
b4:f4:a9:27:aa:d6:67:5b:f7:93:57:bf:44:55:a3:
1a:69:e0:fd:ac:d5:f8:d9:00:d4:05:0c:61:86:6e:
ea:9d:f3:07:01:5c:e9:f0:7f:3d:2d:35:a3:9f:51:
ba:32:0a:70:68:af:9c:1e:f2:a8:17:35:fd:6c:4c:
73:db:87:a8:d2:93:d8:65:6c:f8:93:6f:fe:4d:66:
98:d6:6a:8b:d9:09:d7:86:2e:01:ca:2a:2a:20:a1:
4c:ee:ae:33:7c:82:d0:5b:5c:b9:f0:2c:78:8e:50:
41:5a:0a:5d:05:8c:f1:6e:52:88:f9:76:9a:1a:26:
00:2a:e1:ca:4c:41:15:3f:d3:2e:ca:00:b1:34:db:
81:52:63:2d:b7:c6:14:17:f4:0b:ab:1b:d7:7c:99:
1f:20:b2:1e:1a:03:34:17:aa:16:87:a5:0c:97:6d:
ca:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:15:53:49:2F:16:B5:E3:BC:8F:6B:C8:2D:B9:7F:A2:EB:DD:F1:82
X509v3 Authority Key Identifier:
keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:66:3c:f6:50:7f:25:00:c5:13:da:1c:09:ee:bf:01:50:ef:
22:e7:a2:5f:31:76:41:2d:fe:05:bd:d4:a3:76:54:c6:c1:75:
2a:d0:37:41:64:dd:40:09:b5:a4:6c:35:bb:e0:0a:6e:1d:02:
ce:6e:85:b7:9f:ce:54:88:30:28:bc:35:31:ec:ee:ef:29:6a:
07:f4:b1:db:56:be:e3:90:4b:15:e9:b3:92:15:ed:2f:40:2b:
98:9b:02:72:b3:fc:82:72:da:db:42:c9:53:c6:ce:3c:41:6a:
68:3d:4e:7a:5e:4a:b9:a2:77:4f:fa:79:13:68:de:6a:f8:d7:
09:20:bd:1c:a3:b8:a6:74:9c:eb:ea:85:0e:28:cc:3d:c7:fb:
3e:8e:6c:09:10:c9:27:11:33:15:54:2f:c2:7a:49:cf:58:92:
59:07:57:b1:17:95:b8:b8:47:61:45:d5:cb:49:c1:b4:87:23:
f9:f4:17:f9:f8:e3:84:96:5c:b0:90:ad:1c:64:da:aa:9d:0f:
a6:6a:a0:1b:9e:99:de:b7:c6:11:4a:25:fd:80:c6:e7:ed:e4:
43:7e:bc:8d:9e:a1:bc:54:16:02:54:63:aa:28:0a:d5:88:c9:
50:62:56:70:48:41:52:56:21:93:3d:5a:ac:31:56:f6:e9:a3:
a9:c1:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:13 2026 by rpki-client