Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
File: AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json)
Hash identifier: +S9Nswr+6RIAN29pWz1ylc2fGLGARZbYgCO/VXg4EI8=
Subject key identifier: 47:44:D1:B7:B6:B3:FC:97:05:B6:DD:DE:86:A2:FF:3F:A6:59:26:9F
Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
Certificate issuer: /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Certificate serial: 019FA2606F6013564F1FDAD146E78E555F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 07:00:56 +0000
Manifest this update: Mon 27 Jul 2026 07:00:56 +0000
Manifest next update: Tue 28 Jul 2026 07:00:56 +0000
Files and hashes: 1: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: RiW1GuMQMJdVJVIENmG/8m3JRXLCKrUFGo0nKHK/JyU=)
2: C3pfKMQJQW-010A2V2GrYZcMHLQ.roa (hash: VPKEZMstZH4HBeMsv7PNI+XFDpbDiaB9jj0dzD39XgQ=)
3: daRE9O1fZqkKzy4fulwDE1DZwPw.roa (hash: QKM8Dv9ERwfYZf45lCGN842GGmFpg8jICmmZMoRDLpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:6f:60:13:56:4f:1f:da:d1:46:e7:8e:55:5f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Validity
Not Before: Jul 27 07:00:56 2026 GMT
Not After : Jul 28 07:00:56 2026 GMT
Subject: CN=4744d1b7b6b3fc9705b6ddde86a2ff3fa659269f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:89:43:f9:79:b3:8c:32:f4:bb:d4:23:f5:27:
2d:e8:4f:cf:61:a7:c6:06:7c:6c:cf:fd:60:68:f6:
73:3f:35:00:8e:6e:7f:21:e2:39:c6:bc:76:af:39:
88:75:b1:1e:81:65:d8:96:d7:bd:c3:8b:df:aa:b8:
4c:61:74:20:cd:e6:1b:33:41:e1:2b:5e:d0:5f:22:
59:d1:e0:70:45:34:79:9e:ab:ff:f6:15:f1:6d:d0:
54:a5:51:ec:86:31:76:88:e9:37:6e:a3:1a:33:59:
1c:1b:5a:36:39:e4:7f:fc:d7:92:23:41:db:1d:13:
9c:04:4d:e0:e0:44:9c:99:13:e4:bd:0f:92:30:ec:
68:97:5a:33:48:a3:84:67:7e:9d:e0:a6:e6:38:3e:
d4:ca:cf:9f:21:ea:d4:89:99:3b:12:31:8e:99:5b:
7d:a9:d4:ee:17:c8:1f:50:70:e8:16:3c:f4:b5:85:
74:83:05:9f:e1:d8:85:4c:99:21:09:15:9c:48:f6:
30:93:9f:ce:56:68:ca:3c:5b:ee:16:c5:3d:bb:17:
99:90:c2:d0:44:a9:b7:0e:7f:9b:a3:36:c2:3a:e5:
ab:4a:44:cc:01:db:9a:6e:4e:97:12:77:17:f2:b1:
f3:bb:62:e7:11:85:ab:ed:1b:44:79:24:35:24:cf:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:44:D1:B7:B6:B3:FC:97:05:B6:DD:DE:86:A2:FF:3F:A6:59:26:9F
X509v3 Authority Key Identifier:
keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b2:bb:17:85:d7:dd:ac:ad:a1:f1:b4:ad:42:63:81:77:97:
89:10:97:bf:f0:8a:b1:85:de:a8:f1:c8:9a:4a:7c:6a:30:d9:
5c:a5:a0:0f:0d:82:d8:a7:7f:b7:64:d3:6a:5f:49:11:77:86:
97:df:c3:9c:58:c4:1d:5c:a5:43:e8:ea:1e:e0:f9:c0:62:81:
86:2d:f6:67:91:bd:5b:20:14:97:0d:3d:78:f5:f8:2a:1a:cc:
76:c6:4a:64:1f:4a:93:8f:eb:a1:38:32:dd:30:38:2e:e1:78:
80:03:d1:8d:52:06:67:37:d1:37:e5:27:73:04:06:9b:ce:43:
a4:45:88:08:37:59:98:2a:f3:cc:58:d9:57:ea:76:e2:ad:6e:
58:c2:0a:59:eb:94:d6:34:f6:1e:85:82:fc:87:65:59:ea:ad:
5c:c0:80:9d:04:1f:d6:9c:df:c8:ba:dd:b3:74:34:b5:0b:99:
2a:18:a4:22:89:f1:0b:c3:74:c5:01:94:c4:6a:13:65:ec:11:
1e:7a:97:93:04:d6:cd:ae:64:bd:2d:cd:ee:0b:7f:12:01:ea:
fa:3c:b4:9e:9f:59:0e:2b:a3:85:3d:1b:31:92:2d:77:e2:7c:
2c:70:29:18:dd:f4:26:9f:a5:55:e2:43:68:08:5f:15:09:76:
7e:98:cb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:28:20 2026 by rpki-client