Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
File: AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json)
Hash identifier: kGO6rt5BFN/Qc40TnIHR7gnmuhqMciuGAZPIdnnDJNs=
Subject key identifier: 8E:73:EE:F2:84:C4:33:D4:67:F9:86:96:2B:0F:EB:4D:15:44:6B:30
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 019EBF91C1E618A3AA00BCA7D6EED67F1C85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
Manifest number: 147C
Signing time: Sat 13 Jun 2026 06:01:00 +0000
Manifest this update: Sat 13 Jun 2026 06:01:00 +0000
Manifest next update: Sun 14 Jun 2026 06:01:00 +0000
Files and hashes: 1: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: AJBTHHIeVW+Hv9haOS0v/Anj9B+ecgftfSKFrhXLUlI=)
2: FhAIMUxM-Ll-oJX8w_r_I6M_rVk.roa (hash: nnvV5m84QJk1AHjPftM2Kij4fMdReO4PZF5m7Lms+G8=)
3: OcFwuq-p9HfjXsFdJJy-918eeGE.roa (hash: ZCJKUc/KJIf9lC3fGgSPAtb279PGc32c5MBKffe5v3I=)
4: Pqb4jrQCqGySE_13LWqkkjr2SqA.roa (hash: MNvdDeohOV6QSo5IkgaAgBlZhC2buJQJfrYeSQwjLnc=)
5: cowiEY4LpotW_FI6i6NIxMkzq_M.roa (hash: CVVDglQk6Sk1jW5b5HdU0v+jUDJ+LW3BSjI0Z8Zod7U=)
6: hdmcIiKIZX8G4d6aOngw7fPbjSM.roa (hash: vkx9iSLozc4+nysiRZ6DJE0dNHHPaSgNyoUkZVK01oM=)
7: hxPfoQ5zcHsvOrtnuhN1m95U5cU.roa (hash: lliptOGwNH/8NzlTS+UvxhO5pR/n6bNmW4zrOP9Ic50=)
8: ssht21R0cK-y2YFHOwMdCwB13ew.roa (hash: Dhxo4nIlxfip0AdJuT5wp8b/mqjigonQHFuIrFMgf7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:c1:e6:18:a3:aa:00:bc:a7:d6:ee:d6:7f:1c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jun 13 06:01:00 2026 GMT
Not After : Jun 14 06:01:00 2026 GMT
Subject: CN=8e73eef284c433d467f986962b0feb4d15446b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:00:0e:9d:53:dc:26:72:ba:cf:5a:92:f0:
45:78:d4:12:ef:7e:a9:1b:bf:5b:43:aa:fe:5e:26:
fd:32:b8:02:f2:2b:1d:2a:0b:f4:0e:b4:92:2c:db:
43:c7:10:3b:92:68:35:c6:38:26:c5:c0:1e:84:ab:
ae:2c:6a:eb:77:c1:d5:12:59:e0:2f:c3:e2:89:25:
34:1e:a2:05:1a:b0:1d:e6:96:15:fa:4d:cf:9e:7e:
45:c1:76:de:8e:87:61:84:7c:01:45:1b:54:5e:09:
4f:b1:06:4e:8b:e2:49:9f:67:cc:18:3c:f7:43:68:
6f:38:dc:ab:cb:35:50:ed:c6:02:dc:e7:72:ce:a7:
31:5a:dc:56:95:4a:22:5c:f2:49:35:8a:32:cb:c7:
86:4f:be:f3:64:86:eb:be:f5:d6:1d:b3:ff:14:21:
38:38:21:79:e4:4c:a7:a1:98:7f:60:82:1e:83:e0:
df:b6:2f:f5:be:20:09:70:10:20:52:7d:6d:72:36:
83:39:dc:52:62:d9:dd:81:b8:74:f0:3b:c2:56:11:
37:cf:d7:e0:19:e2:77:83:40:62:ea:84:83:55:6b:
84:08:cc:77:b6:6e:af:8e:22:07:a4:3a:0a:47:0e:
2f:a1:80:65:3a:b5:55:a0:51:4e:84:f8:9a:36:d2:
d5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:73:EE:F2:84:C4:33:D4:67:F9:86:96:2B:0F:EB:4D:15:44:6B:30
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8f:cd:29:a6:b3:0d:24:41:9b:28:72:d5:e6:be:c3:66:1b:
6b:67:cf:f4:5d:92:5c:e0:5c:73:29:b9:82:9a:b3:43:8c:a8:
99:07:ed:38:3a:ae:04:69:c3:f7:52:b6:54:fd:ba:e0:f2:4c:
15:ee:c2:4c:2b:9a:ae:30:e5:57:aa:5e:74:f5:cd:03:3a:fe:
93:bf:ed:02:d8:ff:0b:e3:2e:9b:56:e6:3b:20:44:5e:a7:a5:
c6:94:88:18:90:9b:04:28:12:25:c5:6b:7f:4e:7c:64:fc:87:
9d:99:cf:5b:15:bf:10:de:a2:65:02:df:25:03:0a:48:fe:f1:
a6:80:f7:b3:17:65:b2:af:7a:54:33:a1:94:0d:12:2b:d6:f6:
7d:6c:9a:80:3a:1b:ff:a2:14:1a:bf:cc:c1:2c:97:71:24:a9:
2c:5c:10:0a:1e:df:d1:65:f5:cc:4e:82:4d:c7:c7:8a:36:62:
be:02:4d:11:ca:96:61:63:46:da:6b:df:ce:d6:22:cd:ed:18:
9c:07:17:9a:9b:cd:28:97:24:a7:68:7b:4d:0c:2e:5b:e8:0a:
02:d8:42:33:dd:f2:c3:a8:7b:55:cf:a5:4b:42:a6:86:a4:5d:
46:8d:62:33:bb:b4:6b:d7:7b:5e:5a:bd:e1:a7:35:57:b9:4f:
2c:53:bd:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kcHmGKOqALyn1u7WfxyFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjYwNjEzMDYwMTAwWhcNMjYwNjE0MDYwMTAwWjAzMTEwLwYDVQQD
Eyg4ZTczZWVmMjg0YzQzM2Q0NjdmOTg2OTYyYjBmZWI0ZDE1NDQ2YjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGUADp1T3CZyus9akvBFeNQS736p
G79bQ6r+Xib9MrgC8isdKgv0DrSSLNtDxxA7kmg1xjgmxcAehKuuLGrrd8HVElng
L8PiiSU0HqIFGrAd5pYV+k3Pnn5FwXbejodhhHwBRRtUXglPsQZOi+JJn2fMGDz3
Q2hvONyryzVQ7cYC3OdyzqcxWtxWlUoiXPJJNYoyy8eGT77zZIbrvvXWHbP/FCE4
OCF55EynoZh/YIIeg+Dfti/1viAJcBAgUn1tcjaDOdxSYtndgbh08DvCVhE3z9fg
GeJ3g0Bi6oSDVWuECMx3tm6vjiIHpDoKRw4voYBlOrVVoFFOhPiaNtLVJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5z7vKExDPUZ/mGlisP600VRGswMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbY/NKaaz
DSRBmyhy1ea+w2Yba2fP9F2SXOBccym5gpqzQ4yomQftODquBGnD91K2VP264PJM
Fe7CTCuarjDlV6pedPXNAzr+k7/tAtj/C+Mum1bmOyBEXqelxpSIGJCbBCgSJcVr
f058ZPyHnZnPWxW/EN6iZQLfJQMKSP7xpoD3sxdlsq96VDOhlA0SK9b2fWyagDob
/6IUGr/MwSyXcSSpLFwQCh7f0WX1zE6CTcfHijZivgJNEcqWYWNG2mvfztYize0Y
nAcXmpvNKJckp2h7TQwuW+gKAthCM93yw6h7Vc+lS0KmhqRdRo1iM7u0a9d7Xlq9
4ac1V7lPLFO9dg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:00:14 2026 by rpki-client