Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
File: AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json)
Hash identifier: twK/ElPW4SrtKYz7P/TBYyqQmDls6xuIai7uFEXHXCI=
Subject key identifier: C2:75:E5:5E:21:00:50:1A:04:BA:81:FA:E8:D9:21:6B:CA:61:C7:E9
Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
Certificate issuer: /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Certificate serial: 019D3A53B7302FA9CA7A9361669F2E6B3605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 16:00:58 +0000
Manifest this update: Sun 29 Mar 2026 16:00:58 +0000
Manifest next update: Mon 30 Mar 2026 16:00:58 +0000
Files and hashes: 1: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: xVZKVcpUmVztz7IM1MqAYDShnARW9jymdlF1yk4FnFE=)
2: C3pfKMQJQW-010A2V2GrYZcMHLQ.roa (hash: VPKEZMstZH4HBeMsv7PNI+XFDpbDiaB9jj0dzD39XgQ=)
3: daRE9O1fZqkKzy4fulwDE1DZwPw.roa (hash: QKM8Dv9ERwfYZf45lCGN842GGmFpg8jICmmZMoRDLpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:b7:30:2f:a9:ca:7a:93:61:66:9f:2e:6b:36:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Validity
Not Before: Mar 29 16:00:58 2026 GMT
Not After : Mar 30 16:00:58 2026 GMT
Subject: CN=c275e55e2100501a04ba81fae8d9216bca61c7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:11:02:0b:5b:d3:dc:ef:1d:3e:27:1d:45:
2c:e8:37:ac:d3:fe:7a:14:af:1d:82:c4:cd:3f:28:
0f:1b:a9:f4:be:41:4b:38:ea:72:48:de:e8:54:e7:
cc:a6:57:66:c3:a6:50:fa:db:95:89:be:6e:3f:c6:
de:8e:cd:3e:18:eb:90:82:9e:1a:03:9d:1c:04:62:
78:5f:82:10:10:aa:d2:97:b5:03:9e:8a:a7:36:cf:
b5:f8:e1:1d:48:33:97:58:44:55:83:34:a7:2a:4e:
0d:d1:33:b7:9e:cc:f9:80:15:41:7e:11:68:20:bf:
82:58:60:1f:b4:54:50:be:f1:c9:17:81:b7:b3:2a:
28:91:54:8f:16:71:ab:37:c5:33:a3:c0:2e:5c:c1:
5b:31:cf:e9:ec:e9:1d:00:c2:37:1d:d9:df:de:36:
1e:ba:da:6b:24:ab:b1:52:64:0a:4a:48:75:9c:be:
ea:9c:0a:47:72:2c:6b:30:ef:0a:6b:5c:c2:d1:a7:
0c:26:02:af:01:bb:8d:ef:2b:01:a8:8f:3e:6a:12:
6d:f5:d5:10:3d:df:6e:21:16:fc:42:97:4e:8d:a8:
71:a7:63:00:c0:14:10:60:09:83:ad:c1:fc:d9:f9:
32:82:01:57:e2:ef:88:0f:83:49:ea:79:55:c5:9d:
e7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:75:E5:5E:21:00:50:1A:04:BA:81:FA:E8:D9:21:6B:CA:61:C7:E9
X509v3 Authority Key Identifier:
keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0d:c4:6a:38:1a:a5:4e:0d:ad:a7:40:a8:01:0f:e4:b2:30:
6e:9f:6b:4d:60:8d:39:e8:63:c4:48:cf:c4:24:dd:2e:fe:f7:
7c:80:61:aa:be:18:48:58:cb:bd:5e:0d:31:a0:b5:58:fe:b3:
e4:4f:84:b4:ca:17:f5:b1:4d:78:04:c6:f1:11:8b:c7:f0:40:
43:66:99:cd:02:4e:b1:93:03:f3:f5:72:e4:eb:96:1d:1c:0c:
29:11:2b:44:a5:87:d2:c8:39:36:b5:3d:e6:c0:9a:16:bf:3b:
2f:a4:68:3c:06:91:14:bb:a1:5b:b0:8a:be:20:f1:1e:98:f7:
e0:f7:63:0c:cf:1b:e8:85:06:e7:f4:65:38:6a:a7:63:d2:a6:
d1:79:4c:ef:79:0a:f6:52:ff:62:ec:60:cb:00:42:6c:13:68:
a2:35:22:e6:35:81:84:2f:78:9c:8f:50:35:f6:ee:d4:59:66:
19:da:ae:8e:fc:a3:fb:e9:29:72:33:80:ce:55:f8:40:e4:76:
1c:4e:0b:1a:7d:b4:e1:5e:b3:77:6c:c0:98:2a:9c:ce:72:aa:
29:c4:a2:d0:50:1c:ea:2a:29:08:a8:3a:b4:48:25:7a:8e:22:
15:bc:f5:06:27:9f:87:38:26:3e:cb:e1:14:8d:fb:a3:c5:d8:
ec:81:ab:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:56 2026 by rpki-client