Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
File: AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json)
Hash identifier: 3Fo7dc9/fDbq0bY173BwSpVgCp2QS8kMx+mzfVUSlcM=
Subject key identifier: 0B:B7:33:1F:AF:3D:1B:C5:63:5C:42:30:6E:CA:B9:90:DB:A0:F8:5E
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 019FA184618852D75F965D7D7BB4D3E5C145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
Manifest number: 14F1
Signing time: Mon 27 Jul 2026 03:00:35 +0000
Manifest this update: Mon 27 Jul 2026 03:00:35 +0000
Manifest next update: Tue 28 Jul 2026 03:00:35 +0000
Files and hashes: 1: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: 8PNBzJTJ3CQgeVNfu6IBtTHQGNPPsQn08e1yeVravFQ=)
2: FhAIMUxM-Ll-oJX8w_r_I6M_rVk.roa (hash: nnvV5m84QJk1AHjPftM2Kij4fMdReO4PZF5m7Lms+G8=)
3: OcFwuq-p9HfjXsFdJJy-918eeGE.roa (hash: ZCJKUc/KJIf9lC3fGgSPAtb279PGc32c5MBKffe5v3I=)
4: Pqb4jrQCqGySE_13LWqkkjr2SqA.roa (hash: MNvdDeohOV6QSo5IkgaAgBlZhC2buJQJfrYeSQwjLnc=)
5: cowiEY4LpotW_FI6i6NIxMkzq_M.roa (hash: CVVDglQk6Sk1jW5b5HdU0v+jUDJ+LW3BSjI0Z8Zod7U=)
6: hdmcIiKIZX8G4d6aOngw7fPbjSM.roa (hash: vkx9iSLozc4+nysiRZ6DJE0dNHHPaSgNyoUkZVK01oM=)
7: hxPfoQ5zcHsvOrtnuhN1m95U5cU.roa (hash: lliptOGwNH/8NzlTS+UvxhO5pR/n6bNmW4zrOP9Ic50=)
8: ssht21R0cK-y2YFHOwMdCwB13ew.roa (hash: Dhxo4nIlxfip0AdJuT5wp8b/mqjigonQHFuIrFMgf7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:61:88:52:d7:5f:96:5d:7d:7b:b4:d3:e5:c1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jul 27 03:00:35 2026 GMT
Not After : Jul 28 03:00:35 2026 GMT
Subject: CN=0bb7331faf3d1bc5635c42306ecab990dba0f85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:36:19:b9:b5:3e:e1:5f:0c:4f:d7:e8:74:
1f:2f:3c:98:4b:67:10:8d:58:16:f5:10:79:0a:16:
b7:f1:d2:ab:6e:93:8e:b5:65:19:d4:a0:f6:e6:ba:
0b:46:aa:58:88:3a:0d:df:bd:b4:b9:9c:27:48:eb:
d9:c4:48:33:75:ab:f4:71:38:0a:90:be:61:cc:00:
3b:21:fd:df:ec:b1:ab:92:3e:dc:c8:d4:22:00:4e:
b0:c5:cf:f2:22:68:05:6b:92:d4:43:8d:9a:3e:43:
49:18:20:e5:d3:1c:60:76:6a:2f:ad:9f:77:67:96:
5e:af:0e:9b:84:9c:78:13:4d:65:18:3d:0a:57:f5:
e3:92:b5:41:99:ca:80:46:5f:4a:c9:8e:7d:70:5a:
03:84:56:02:fc:7f:74:c7:34:0b:e6:df:2e:75:dc:
94:fd:e6:98:9c:69:17:17:7f:cf:2c:17:74:bf:67:
f5:da:7e:4e:7f:76:c5:9f:5d:6c:24:c5:9e:e8:69:
82:60:b7:bd:20:b4:39:2a:75:71:57:3a:f1:83:d1:
f5:04:4d:6b:2c:f9:19:87:83:25:92:e6:2e:13:91:
5a:c8:4c:7d:f3:67:01:93:86:ca:87:ef:53:24:f5:
4e:dd:83:cd:ab:66:9d:6c:f2:96:6d:c7:f2:87:63:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B7:33:1F:AF:3D:1B:C5:63:5C:42:30:6E:CA:B9:90:DB:A0:F8:5E
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:50:8d:33:18:5f:7a:b2:b9:17:a0:58:d9:48:dd:8f:87:96:
75:8f:60:77:fe:a8:2c:c5:c6:cf:60:60:a4:19:67:d2:47:3e:
de:3e:b1:cb:cf:75:25:98:9e:26:73:f1:bf:0b:17:a4:0c:e2:
c7:59:41:ef:5f:be:9a:d1:9f:b5:89:7d:9c:15:0f:2e:ec:bb:
4d:3f:89:3f:8a:1d:ae:34:0c:ff:61:ec:38:a4:67:dd:22:74:
df:d5:af:47:a4:66:19:31:45:29:c1:74:31:21:31:a6:f3:7c:
8e:15:cb:0d:37:52:64:97:21:b9:ff:f5:d6:aa:ef:e8:9b:4c:
41:a7:a9:bc:87:97:15:09:a8:9c:ec:d6:c2:08:6a:6c:42:06:
80:46:1f:8c:cb:72:e4:06:1c:fc:73:d0:2d:a1:38:50:d0:fd:
83:a9:d6:ef:a5:0c:cb:12:33:c3:24:d2:99:32:86:5f:34:92:
da:c7:6c:c7:f4:6b:d6:e5:f5:c3:97:f2:05:1f:39:39:a3:30:
d8:fa:1c:24:4e:76:a8:df:6d:2d:67:72:eb:3e:99:a3:ca:f7:
da:0e:fd:4e:64:10:54:67:96:15:e6:a3:36:67:db:70:7d:0b:
5f:95:26:eb:2d:e1:e4:17:51:6f:b0:c1:15:b2:32:89:e3:1f:
47:59:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:20:11 2026 by rpki-client