Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
File: AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json)
Hash identifier: Vh6YBnxu0dA+UzlDPPaw008kETD0NHIay7ZYByktSPQ=
Subject key identifier: F3:46:1F:CF:C9:EE:59:35:94:4F:25:24:24:29:BE:CC:0D:97:C1:DD
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 019CAC7DB75ABD9E91C2749DD612E5DD644A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
Manifest number: 1369
Signing time: Mon 02 Mar 2026 03:00:45 +0000
Manifest this update: Mon 02 Mar 2026 03:00:45 +0000
Manifest next update: Tue 03 Mar 2026 03:00:45 +0000
Files and hashes: 1: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: 39wcr2DS4CUtWPaLGxQ6sEfPsxygcOG6Yn6dM/3X4AQ=)
2: FhAIMUxM-Ll-oJX8w_r_I6M_rVk.roa (hash: nnvV5m84QJk1AHjPftM2Kij4fMdReO4PZF5m7Lms+G8=)
3: OcFwuq-p9HfjXsFdJJy-918eeGE.roa (hash: ZCJKUc/KJIf9lC3fGgSPAtb279PGc32c5MBKffe5v3I=)
4: Pqb4jrQCqGySE_13LWqkkjr2SqA.roa (hash: MNvdDeohOV6QSo5IkgaAgBlZhC2buJQJfrYeSQwjLnc=)
5: cowiEY4LpotW_FI6i6NIxMkzq_M.roa (hash: CVVDglQk6Sk1jW5b5HdU0v+jUDJ+LW3BSjI0Z8Zod7U=)
6: hdmcIiKIZX8G4d6aOngw7fPbjSM.roa (hash: vkx9iSLozc4+nysiRZ6DJE0dNHHPaSgNyoUkZVK01oM=)
7: hxPfoQ5zcHsvOrtnuhN1m95U5cU.roa (hash: lliptOGwNH/8NzlTS+UvxhO5pR/n6bNmW4zrOP9Ic50=)
8: ssht21R0cK-y2YFHOwMdCwB13ew.roa (hash: Dhxo4nIlxfip0AdJuT5wp8b/mqjigonQHFuIrFMgf7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:b7:5a:bd:9e:91:c2:74:9d:d6:12:e5:dd:64:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Mar 2 03:00:45 2026 GMT
Not After : Mar 3 03:00:45 2026 GMT
Subject: CN=f3461fcfc9ee5935944f25242429becc0d97c1dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ac:e6:cc:e8:3b:dc:95:12:22:74:a9:ae:be:
b5:25:61:e2:f7:67:56:e7:00:b6:b6:c2:d8:ea:d4:
32:4e:d4:82:2b:a8:27:0c:d8:4f:8d:01:b2:66:0b:
5f:67:9f:76:f2:89:51:01:2e:a8:a9:03:48:27:c3:
3e:99:93:a5:ff:79:73:c1:93:62:da:2d:77:c2:61:
1f:a0:5b:c8:5c:56:d7:95:31:a8:da:50:0d:94:dd:
28:52:b0:b9:7d:17:27:ce:b4:82:af:86:63:e3:79:
8a:9e:a3:e7:09:b8:c5:25:7a:78:26:c4:ea:76:83:
67:e8:4d:53:85:a2:e4:13:cd:0b:4f:84:86:fa:5f:
64:91:4c:1a:ce:ad:cd:f8:50:88:46:7c:75:1d:2b:
dd:79:d6:e1:b7:c6:fd:86:62:07:dc:9c:00:50:02:
60:51:89:52:73:2e:5f:30:e4:15:8f:0b:52:fc:69:
c5:77:0b:61:7e:2c:7a:54:24:3e:cd:06:49:ea:87:
e0:5c:5b:ab:8b:01:6d:0e:f8:97:11:aa:96:c6:00:
e7:f7:d5:f2:bc:54:26:66:73:77:1f:9e:e6:25:cc:
3b:53:98:77:a5:43:75:88:da:9e:8e:74:6f:3b:83:
f2:b0:1c:4a:a2:0e:d8:f1:f9:90:65:19:eb:a7:a6:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:46:1F:CF:C9:EE:59:35:94:4F:25:24:24:29:BE:CC:0D:97:C1:DD
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ec:9b:b3:79:d2:6d:9a:16:b8:5f:a5:6a:f4:4e:4c:04:df:
2c:39:84:02:29:7b:0a:27:a5:c4:9c:a2:80:07:10:6b:75:f6:
80:e1:7f:b9:4e:15:d5:1c:4c:ed:d9:5f:48:c0:d8:d3:f8:71:
38:91:59:83:c5:60:e5:ae:06:58:66:53:f0:4a:f9:ab:20:21:
b5:e1:2c:e3:03:b4:15:c5:c4:d7:67:57:87:29:95:02:8f:b8:
84:c3:1c:78:21:a8:05:7b:de:c2:0c:12:5d:63:62:00:d0:e6:
23:86:af:c3:2d:93:aa:da:e6:71:88:8b:eb:f9:e1:8b:dc:4c:
8d:c6:b8:6e:99:8e:0a:23:34:f7:57:f5:87:00:4a:08:6e:3d:
62:39:2b:63:27:51:02:b2:3d:ba:82:6d:e2:4e:02:79:ae:f4:
c7:a9:f0:8e:96:0c:b2:a9:13:89:52:57:22:e3:0b:2f:3e:de:
91:2a:4b:52:f4:98:c4:c3:47:c2:f6:fe:25:59:39:13:a4:a6:
d9:00:c5:be:13:f6:b0:62:8d:71:0e:7b:3e:32:f3:fe:69:0f:
e4:d6:ae:5e:25:2d:08:75:ab:05:5a:0c:b2:63:5d:07:d0:71:
70:c8:3a:89:62:26:fd:4b:30:bc:55:8d:25:a3:f5:30:2d:93:
71:43:40:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfbdavZ6RwnSd1hLl3WRKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjYwMzAyMDMwMDQ1WhcNMjYwMzAzMDMwMDQ1WjAzMTEwLwYDVQQD
EyhmMzQ2MWZjZmM5ZWU1OTM1OTQ0ZjI1MjQyNDI5YmVjYzBkOTdjMWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1azmzOg73JUSInSprr61JWHi92dW
5wC2tsLY6tQyTtSCK6gnDNhPjQGyZgtfZ5928olRAS6oqQNIJ8M+mZOl/3lzwZNi
2i13wmEfoFvIXFbXlTGo2lANlN0oUrC5fRcnzrSCr4Zj43mKnqPnCbjFJXp4JsTq
doNn6E1ThaLkE80LT4SG+l9kkUwazq3N+FCIRnx1HSvdedbht8b9hmIH3JwAUAJg
UYlScy5fMOQVjwtS/GnFdwthfix6VCQ+zQZJ6ofgXFuriwFtDviXEaqWxgDn99Xy
vFQmZnN3H57mJcw7U5h3pUN1iNqejnRvO4PysBxKog7Y8fmQZRnrp6bl9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNGH8/J7lk1lE8lJCQpvswNl8HdMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaeybs3nS
bZoWuF+lavROTATfLDmEAil7CielxJyigAcQa3X2gOF/uU4V1RxM7dlfSMDY0/hx
OJFZg8Vg5a4GWGZT8Er5qyAhteEs4wO0FcXE12dXhymVAo+4hMMceCGoBXvewgwS
XWNiANDmI4avwy2TqtrmcYiL6/nhi9xMjca4bpmOCiM091f1hwBKCG49YjkrYydR
ArI9uoJt4k4Cea70x6nwjpYMsqkTiVJXIuMLLz7ekSpLUvSYxMNHwvb+JVk5E6Sm
2QDFvhP2sGKNcQ57PjLz/mkP5NauXiUtCHWrBVoMsmNdB9BxcMg6iWIm/UswvFWN
JaP1MC2TcUNADg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:15:08 2026 by rpki-client