Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
File: AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json)
Hash identifier: 7EbyKq8uczjlwOuvfFmL/3RbNqWdbUryPGNhDcWjTYk=
Subject key identifier: 7C:9E:97:12:E4:BA:52:8F:96:93:5B:46:75:25:D7:24:04:C9:1A:77
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 01A0E7E438E289BB380FF3B6B7A53D386265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
Manifest number: 159A
Signing time: Mon 28 Sep 2026 12:01:28 +0000
Manifest this update: Mon 28 Sep 2026 12:01:28 +0000
Manifest next update: Tue 29 Sep 2026 12:01:28 +0000
Files and hashes: 1: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: zl50PRLiD59cMPcdMaA6kmdj55lCUaau1FpIpMPQmzY=)
2: FhAIMUxM-Ll-oJX8w_r_I6M_rVk.roa (hash: nnvV5m84QJk1AHjPftM2Kij4fMdReO4PZF5m7Lms+G8=)
3: OcFwuq-p9HfjXsFdJJy-918eeGE.roa (hash: ZCJKUc/KJIf9lC3fGgSPAtb279PGc32c5MBKffe5v3I=)
4: Pqb4jrQCqGySE_13LWqkkjr2SqA.roa (hash: MNvdDeohOV6QSo5IkgaAgBlZhC2buJQJfrYeSQwjLnc=)
5: cowiEY4LpotW_FI6i6NIxMkzq_M.roa (hash: CVVDglQk6Sk1jW5b5HdU0v+jUDJ+LW3BSjI0Z8Zod7U=)
6: hdmcIiKIZX8G4d6aOngw7fPbjSM.roa (hash: vkx9iSLozc4+nysiRZ6DJE0dNHHPaSgNyoUkZVK01oM=)
7: hxPfoQ5zcHsvOrtnuhN1m95U5cU.roa (hash: lliptOGwNH/8NzlTS+UvxhO5pR/n6bNmW4zrOP9Ic50=)
8: ssht21R0cK-y2YFHOwMdCwB13ew.roa (hash: Dhxo4nIlxfip0AdJuT5wp8b/mqjigonQHFuIrFMgf7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e4:38:e2:89:bb:38:0f:f3:b6:b7:a5:3d:38:62:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Sep 28 12:01:28 2026 GMT
Not After : Sep 29 12:01:28 2026 GMT
Subject: CN=7c9e9712e4ba528f96935b467525d72404c91a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:9c:50:52:61:15:e2:70:ac:fa:4c:ba:4f:
a6:f6:a3:b3:0c:a1:b3:8e:ae:30:a7:0e:8d:4d:59:
4b:c4:7a:64:8e:47:8d:7b:50:2c:ef:64:2a:5d:38:
ae:88:77:6c:05:35:6d:dc:24:e5:99:a1:68:74:44:
e0:35:88:a6:8f:69:17:4b:dd:aa:c0:70:70:79:b8:
30:10:d3:75:c0:2b:07:ac:88:35:19:9e:7e:c4:88:
e3:b6:36:b5:99:ff:97:15:dc:93:1f:9c:53:c4:8d:
dd:86:02:0b:71:33:97:e4:63:f5:ae:56:9c:89:0f:
c0:31:2f:9b:fc:a2:b6:6f:e2:e4:23:6b:9b:85:70:
2a:37:85:9b:e6:a9:2f:f4:45:7c:bb:63:79:fc:73:
92:66:da:8e:86:fe:8d:c6:48:c3:2c:ab:4f:13:bc:
84:38:bc:93:a2:25:4a:99:2c:6c:04:2a:57:52:52:
cf:8b:4d:c8:74:9e:c3:4a:89:91:93:bf:0c:0d:30:
21:5a:8c:9c:7b:8c:cb:25:7c:a2:fb:ff:4b:59:4f:
b3:0d:cd:3d:5a:24:ee:26:20:a7:93:a9:66:73:b3:
09:22:80:42:21:3a:4b:0c:b1:a3:8c:6b:5f:a6:eb:
bc:ed:e0:70:20:1b:ca:41:31:63:c8:6a:52:73:d2:
c7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9E:97:12:E4:BA:52:8F:96:93:5B:46:75:25:D7:24:04:C9:1A:77
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d0:39:a6:92:08:a0:9e:1b:3c:59:25:ac:7d:a8:c9:3b:22:
61:01:dc:84:68:9d:09:0c:a1:04:ef:b6:55:19:52:d2:42:ce:
f3:76:2c:4d:30:3f:01:9b:4b:90:46:f7:42:08:35:11:77:b0:
f4:c7:0a:70:3b:22:71:f2:28:7e:62:1f:56:b7:59:bb:90:13:
e6:b2:45:6b:9c:83:99:bc:ad:49:07:1f:c9:32:72:9d:42:71:
e3:44:22:05:45:4a:f4:91:cb:91:fe:4a:25:74:73:8e:50:27:
0c:df:fc:f3:c6:69:70:43:d5:e3:b2:09:3f:23:e6:99:07:96:
af:2c:e7:e9:c0:bc:23:f0:15:5a:4a:7c:4e:5a:60:7b:34:a4:
70:62:0e:30:c2:d7:f1:b5:cf:3b:f6:78:e1:f9:85:2b:a6:47:
e3:4a:bd:1a:a6:d9:81:f1:76:a1:e6:41:5d:10:7b:06:a3:c0:
4f:6b:2a:77:62:6c:5f:f2:67:31:88:a1:eb:11:9b:88:9a:36:
19:90:6f:f8:36:ce:81:8b:c5:74:0c:80:65:09:55:fb:e9:c9:
03:ce:d0:6a:4a:3c:35:5c:b2:c4:5a:1f:4a:60:2b:47:c4:a8:
7a:ab:f4:b7:1b:4a:01:64:cd:8d:40:cf:5b:71:c1:b0:4e:4a:
fb:1b:5b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:40:21 2026 by rpki-client