Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
File: AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json)
Hash identifier: 1H9FX8lv/Wp93A7zjC7Uv57l3QRHjFfkPe7o5xJhtyo=
Subject key identifier: 3E:7E:8D:3A:A6:50:93:CA:B8:FE:17:21:65:5D:AF:7E:54:1B:06:1F
Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
Certificate issuer: /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Certificate serial: 01A0DB3B05BB539780DA2B9BFAD8ACDD7727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 01:01:13 +0000
Manifest this update: Sat 26 Sep 2026 01:01:13 +0000
Manifest next update: Sun 27 Sep 2026 01:01:13 +0000
Files and hashes: 1: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: M9XtrWuTquilu38NsqqTve/2I48hZCeKg+U2RRSDfqw=)
2: C3pfKMQJQW-010A2V2GrYZcMHLQ.roa (hash: VPKEZMstZH4HBeMsv7PNI+XFDpbDiaB9jj0dzD39XgQ=)
3: daRE9O1fZqkKzy4fulwDE1DZwPw.roa (hash: QKM8Dv9ERwfYZf45lCGN842GGmFpg8jICmmZMoRDLpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:05:bb:53:97:80:da:2b:9b:fa:d8:ac:dd:77:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Validity
Not Before: Sep 26 01:01:13 2026 GMT
Not After : Sep 27 01:01:13 2026 GMT
Subject: CN=3e7e8d3aa65093cab8fe1721655daf7e541b061f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:d0:e5:99:0a:58:c3:da:a1:b6:eb:5a:63:
12:85:c0:c6:87:de:d0:7f:2e:89:ae:1d:3f:5a:c2:
42:dd:ef:49:d1:42:28:7c:57:7b:69:dc:67:f3:a2:
ba:b7:9c:e7:10:07:f0:bb:f1:75:6a:6c:ba:ad:58:
a1:e3:77:52:07:d3:22:aa:14:10:61:ef:27:34:12:
60:98:ac:d2:ff:2a:ba:8f:e5:ea:82:53:42:d0:c5:
fc:c1:58:26:7c:61:91:e4:fa:75:68:6a:9f:c2:65:
34:7d:e1:c2:dd:a7:63:fe:40:f5:65:f7:c5:63:c7:
a2:5d:b8:13:a4:c9:8e:d7:3b:9a:49:b9:3a:c5:77:
40:e6:3c:08:3a:2f:f6:46:03:90:93:84:0b:36:09:
e9:04:4f:a0:b8:c3:c8:d3:ca:b7:17:f9:2d:16:39:
4d:d7:c4:99:33:9f:12:f8:44:4f:3f:52:47:9e:31:
50:2a:eb:5d:a3:14:88:1a:75:e6:21:77:93:e8:2b:
3c:01:61:84:90:20:5b:6c:23:cd:d8:98:39:88:69:
cd:e9:2e:0e:b0:b7:29:8c:c0:74:87:de:65:8e:75:
cc:1a:32:32:b7:a3:c9:39:d2:d9:6d:c4:af:2d:b9:
bf:67:64:4a:32:51:d4:c3:5c:1f:b8:2d:56:d9:41:
26:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:7E:8D:3A:A6:50:93:CA:B8:FE:17:21:65:5D:AF:7E:54:1B:06:1F
X509v3 Authority Key Identifier:
keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c6:1b:81:03:31:95:7a:4b:ce:13:0a:d6:31:62:87:f8:25:
ba:19:5c:2a:4a:f4:b8:6f:f0:a0:9a:47:28:39:5d:7f:27:67:
2b:b5:cb:b3:39:b7:4a:e8:0c:72:a7:5d:0f:75:dd:98:e3:27:
9b:55:41:7a:d6:00:28:a1:bc:3d:41:cd:0e:93:cf:b9:40:d3:
aa:8a:39:7e:2f:65:a3:bd:74:13:5b:03:3e:7b:70:5d:12:57:
a7:4a:81:8f:a1:0f:a0:ce:30:03:ad:0f:d9:c2:d8:67:74:5d:
6b:c9:cc:3d:09:ca:c9:89:a1:a2:60:74:1f:d5:f9:ab:11:79:
3a:86:32:97:7c:2a:d6:e6:78:6f:af:69:aa:d3:fa:1e:15:1c:
ee:ae:ca:99:a6:7c:af:c4:1a:fa:a8:b8:1b:78:6a:d7:f3:d4:
f4:67:fe:6b:d3:7d:4f:3b:d6:c5:55:10:5f:15:80:6a:d7:2f:
82:18:3f:71:d8:47:e0:a6:25:a1:fb:b0:fe:39:1c:7c:66:95:
7b:0b:25:91:96:17:ab:93:2d:09:52:42:f7:0c:2f:39:8f:84:
ac:ba:0a:2e:5e:05:0b:29:c8:bb:dd:db:4c:8a:7c:1c:82:8d:
a7:89:5f:34:5c:84:b3:08:e6:f6:07:18:87:55:a3:bd:73:b1:
c6:6d:11:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:56:49 2026 by rpki-client