Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
File: AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json)
Hash identifier: bonq9CN+7PN5a/kaUxhWi5zbjQJGn/zRgHvxehM4wWo=
Subject key identifier: A5:2C:E9:F2:D7:6B:46:2C:6C:E2:DB:23:5C:B9:92:F4:85:32:64:F7
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 019FA93DC92DAD13F8C34D08EDAA4D98B11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
Manifest number: 14F5
Signing time: Tue 28 Jul 2026 15:00:26 +0000
Manifest this update: Tue 28 Jul 2026 15:00:26 +0000
Manifest next update: Wed 29 Jul 2026 15:00:26 +0000
Files and hashes: 1: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: XhwR90NPvh8LxZnj+7um7tkbeBltZb20XCEKxbXGR2Y=)
2: FhAIMUxM-Ll-oJX8w_r_I6M_rVk.roa (hash: nnvV5m84QJk1AHjPftM2Kij4fMdReO4PZF5m7Lms+G8=)
3: OcFwuq-p9HfjXsFdJJy-918eeGE.roa (hash: ZCJKUc/KJIf9lC3fGgSPAtb279PGc32c5MBKffe5v3I=)
4: Pqb4jrQCqGySE_13LWqkkjr2SqA.roa (hash: MNvdDeohOV6QSo5IkgaAgBlZhC2buJQJfrYeSQwjLnc=)
5: cowiEY4LpotW_FI6i6NIxMkzq_M.roa (hash: CVVDglQk6Sk1jW5b5HdU0v+jUDJ+LW3BSjI0Z8Zod7U=)
6: hdmcIiKIZX8G4d6aOngw7fPbjSM.roa (hash: vkx9iSLozc4+nysiRZ6DJE0dNHHPaSgNyoUkZVK01oM=)
7: hxPfoQ5zcHsvOrtnuhN1m95U5cU.roa (hash: lliptOGwNH/8NzlTS+UvxhO5pR/n6bNmW4zrOP9Ic50=)
8: ssht21R0cK-y2YFHOwMdCwB13ew.roa (hash: Dhxo4nIlxfip0AdJuT5wp8b/mqjigonQHFuIrFMgf7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:c9:2d:ad:13:f8:c3:4d:08:ed:aa:4d:98:b1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jul 28 15:00:26 2026 GMT
Not After : Jul 29 15:00:26 2026 GMT
Subject: CN=a52ce9f2d76b462c6ce2db235cb992f4853264f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ce:3d:9e:43:31:1c:7d:b7:3e:5d:cc:cf:43:
c6:b2:01:e5:9a:1c:44:d2:52:4e:79:18:42:50:72:
54:67:24:0f:a2:c4:bf:22:b9:c2:67:53:ca:4c:a6:
83:b7:7b:39:bd:82:11:01:21:db:3f:44:d4:89:dc:
bf:2b:f0:04:a1:a1:01:ea:c9:39:19:94:c8:0e:b3:
9f:18:4f:22:72:24:8c:f5:b6:be:b1:88:02:3c:48:
0b:77:3d:a7:57:72:b5:5d:a4:ab:03:23:9c:31:4b:
15:84:d9:cf:0c:c4:95:cf:fa:46:00:83:bd:fc:75:
3a:62:1e:61:17:00:50:5c:b8:b2:5f:e0:e2:2b:c8:
80:21:05:64:4e:6a:d5:5a:9c:76:ea:62:09:09:70:
55:9e:79:ab:2b:fc:8b:43:22:00:4c:f3:25:db:d3:
f9:7e:3f:a5:3d:52:bd:49:a1:4e:54:a2:39:d4:bc:
33:ab:96:73:8a:66:77:c9:3e:17:f0:81:fe:d8:66:
ac:1b:11:16:27:05:83:2a:d7:d2:d2:13:df:29:2c:
d0:6c:03:4d:21:51:cc:79:0c:35:a2:65:92:82:b0:
6e:7c:24:2d:f1:f1:0b:55:e5:ff:7c:b5:95:82:1f:
a0:b5:69:da:a3:c9:03:ce:7f:b6:d5:68:d9:cd:94:
8e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2C:E9:F2:D7:6B:46:2C:6C:E2:DB:23:5C:B9:92:F4:85:32:64:F7
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ee:93:97:0e:c2:ed:9f:9c:c2:cc:d1:f8:3d:40:e0:ec:f2:
9e:14:23:4b:f9:78:55:66:f4:84:4c:12:80:8a:77:bf:e3:17:
15:11:27:a5:22:98:a4:1b:e2:5b:2c:53:34:3d:a4:d1:81:65:
14:14:d4:b7:14:7a:0c:20:1f:ae:9f:8c:16:0b:de:fa:8c:c4:
1b:d8:40:0d:8e:89:88:76:87:2c:f9:21:55:30:18:a4:33:31:
6a:8a:ab:79:89:e0:ce:ff:30:08:b4:73:78:04:04:b2:0a:40:
7b:27:bd:16:b6:ca:ee:b1:83:f0:7a:74:db:67:81:8c:22:7d:
f6:6b:f3:e5:51:50:31:b2:50:7f:bc:f4:90:d4:44:2a:2f:62:
52:c3:f9:c6:a2:aa:e2:c6:86:7a:1e:e8:20:e6:7e:55:03:f3:
89:9c:bb:62:2d:de:da:35:97:71:0c:ea:07:03:e1:bb:7e:fc:
ea:3f:13:84:a8:28:50:7c:60:9c:21:fc:99:b0:cc:86:d2:f2:
e2:b8:c5:08:63:c1:00:f8:a0:02:96:6e:cf:12:33:c5:11:4d:
97:71:27:58:2d:6e:7b:ff:45:f5:2e:31:0d:24:7b:ee:e3:2b:
5c:ee:49:b4:9d:ea:fe:c2:5e:61:26:08:11:e3:d0:88:95:3d:
07:71:32:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:53 2026 by rpki-client