Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
File: AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json)
Hash identifier: O5/QweGxtYTxE/FcbRvhMzsoCyQJAfu7kzRlvcZvels=
Subject key identifier: 2E:D2:42:D1:1A:00:7E:74:A8:AA:B3:DD:9D:E3:72:BB:D4:8B:6C:F7
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 019D9A06C277472B6272F5DB935A52F9D093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
Manifest number: 13E4
Signing time: Fri 17 Apr 2026 06:00:27 +0000
Manifest this update: Fri 17 Apr 2026 06:00:27 +0000
Manifest next update: Sat 18 Apr 2026 06:00:27 +0000
Files and hashes: 1: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: om/NR6ZnvlFqv/hzkTxMlPM5yykBM9ZfrItYfXMse/0=)
2: FhAIMUxM-Ll-oJX8w_r_I6M_rVk.roa (hash: nnvV5m84QJk1AHjPftM2Kij4fMdReO4PZF5m7Lms+G8=)
3: OcFwuq-p9HfjXsFdJJy-918eeGE.roa (hash: ZCJKUc/KJIf9lC3fGgSPAtb279PGc32c5MBKffe5v3I=)
4: Pqb4jrQCqGySE_13LWqkkjr2SqA.roa (hash: MNvdDeohOV6QSo5IkgaAgBlZhC2buJQJfrYeSQwjLnc=)
5: cowiEY4LpotW_FI6i6NIxMkzq_M.roa (hash: CVVDglQk6Sk1jW5b5HdU0v+jUDJ+LW3BSjI0Z8Zod7U=)
6: hdmcIiKIZX8G4d6aOngw7fPbjSM.roa (hash: vkx9iSLozc4+nysiRZ6DJE0dNHHPaSgNyoUkZVK01oM=)
7: hxPfoQ5zcHsvOrtnuhN1m95U5cU.roa (hash: lliptOGwNH/8NzlTS+UvxhO5pR/n6bNmW4zrOP9Ic50=)
8: ssht21R0cK-y2YFHOwMdCwB13ew.roa (hash: Dhxo4nIlxfip0AdJuT5wp8b/mqjigonQHFuIrFMgf7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:c2:77:47:2b:62:72:f5:db:93:5a:52:f9:d0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Apr 17 06:00:27 2026 GMT
Not After : Apr 18 06:00:27 2026 GMT
Subject: CN=2ed242d11a007e74a8aab3dd9de372bbd48b6cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a8:b5:5a:06:50:13:33:d1:a6:03:42:54:aa:
28:00:fb:e4:8c:83:6e:98:59:99:55:2e:6f:c3:c4:
8b:8a:0c:cf:ac:7b:35:29:77:e1:ef:0a:18:66:5e:
32:6f:90:da:01:1b:b5:84:0a:ad:2a:6e:ed:2e:37:
fb:4c:f6:b3:53:10:ac:a8:01:e9:78:1c:04:a4:92:
4f:e5:7c:c6:49:21:12:53:8f:bb:99:7b:e7:80:3c:
70:4c:db:5c:bb:43:b5:7e:a9:42:c3:24:0c:8d:99:
7e:33:df:04:f8:a4:6a:67:8e:27:8c:96:ec:99:73:
c6:3f:e3:44:70:c8:5d:4f:0e:e5:36:32:b3:b1:3f:
23:7e:6d:a4:a7:b5:f1:38:b2:73:bb:69:61:c9:73:
78:c1:de:0b:07:01:b9:57:07:95:7f:68:96:b0:de:
c3:7a:60:b1:7d:de:cb:64:48:24:2a:47:e2:26:e8:
b5:e3:05:f3:86:e0:bc:2b:47:7d:48:88:0f:84:31:
b2:cf:b7:e3:b0:1b:7b:e0:6c:30:e8:03:d7:14:aa:
4e:f3:34:99:07:99:d9:6d:17:83:93:be:b8:d5:4f:
e6:1b:d7:e6:3e:ea:af:02:8c:af:60:a9:d7:b0:20:
6f:77:96:72:44:31:9e:99:76:62:4d:ad:35:b3:f2:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D2:42:D1:1A:00:7E:74:A8:AA:B3:DD:9D:E3:72:BB:D4:8B:6C:F7
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1d:55:28:a3:cb:1f:1b:ab:5e:b1:d9:2a:88:ac:25:a7:f2:
d5:70:5d:f0:31:77:a1:c6:b6:b0:f4:9b:24:af:ad:b6:0a:9b:
01:81:a4:60:bd:6c:9c:70:f1:79:42:8c:95:c5:3a:8b:6d:57:
ad:82:5c:9e:fe:7c:4c:4d:6f:23:01:54:38:ea:37:c6:56:ed:
98:a9:92:00:40:eb:fb:e2:1b:b4:f4:b8:b0:d2:4a:08:ca:58:
78:b7:35:40:3b:a4:ee:02:c7:b1:d2:d0:1c:45:2f:b1:c1:3e:
16:b2:16:da:d8:2a:71:a7:55:ff:ab:f5:ab:39:06:88:60:07:
a5:de:15:b8:a5:d0:1f:3a:dd:08:a9:83:1d:b4:7c:3c:4e:99:
6b:12:52:a9:61:5d:0a:7a:4f:40:57:9f:30:7b:f7:28:8d:18:
2c:8a:ec:10:02:e9:e4:9e:c0:79:ba:c3:f3:c8:fa:7f:80:d4:
f7:e4:8d:3f:a0:f1:75:ad:c4:e0:27:97:8a:8d:2c:0c:fb:bb:
e5:3a:e9:6a:ce:a1:9a:13:21:69:68:90:87:ac:ff:2c:61:25:
39:dc:27:15:5c:d0:b9:a9:f8:dc:54:a6:aa:1f:f8:92:6b:c9:
15:4a:32:59:57:3b:d3:ae:c6:b8:e1:5f:39:cd:6d:03:a4:ac:
65:bb:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:12 2026 by rpki-client