Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
File: AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json)
Hash identifier: UfDuWLZE+gnynDeKgOJMrK3DfncuWE7YjfdOzZEYmPo=
Subject key identifier: 02:74:FD:9B:50:D3:FA:98:7A:1D:9B:89:BB:B8:66:DC:88:99:06:18
Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
Certificate issuer: /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Certificate serial: 01A08C0CABF037FD1ADAFE0821F391D044A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 16:00:35 +0000
Manifest this update: Thu 10 Sep 2026 16:00:35 +0000
Manifest next update: Fri 11 Sep 2026 16:00:35 +0000
Files and hashes: 1: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: /3OWHN+IfQRd6VXaD35/JfGh9fddCSzxYq+ZG/h416k=)
2: C3pfKMQJQW-010A2V2GrYZcMHLQ.roa (hash: VPKEZMstZH4HBeMsv7PNI+XFDpbDiaB9jj0dzD39XgQ=)
3: daRE9O1fZqkKzy4fulwDE1DZwPw.roa (hash: QKM8Dv9ERwfYZf45lCGN842GGmFpg8jICmmZMoRDLpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:ab:f0:37:fd:1a:da:fe:08:21:f3:91:d0:44:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Validity
Not Before: Sep 10 16:00:35 2026 GMT
Not After : Sep 11 16:00:35 2026 GMT
Subject: CN=0274fd9b50d3fa987a1d9b89bbb866dc88990618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:b7:d3:28:a8:be:d7:25:a4:2e:a1:cd:7b:
0c:0a:8b:70:8b:e7:72:d5:40:4e:21:25:7f:8f:0f:
7e:96:95:09:fe:89:0b:fc:a4:73:ae:ac:9f:90:68:
92:fc:ff:8a:ec:99:c3:25:65:06:46:cc:64:2a:80:
40:5c:c9:21:24:69:30:e1:f0:5c:d2:bb:6f:18:cd:
2d:db:34:e4:14:2c:3d:ce:cc:8f:b5:fa:ae:f8:51:
03:07:d9:da:ca:76:24:e1:f3:c0:75:f9:0f:c0:74:
8e:f2:e9:09:7b:8c:26:88:08:66:45:35:0b:17:86:
8e:65:45:bc:bb:6a:12:a1:8b:46:e1:96:0d:ef:44:
eb:a8:d5:20:07:40:76:3f:c0:3d:ae:83:50:e7:91:
39:d9:30:5a:cc:b4:b6:0e:78:ee:c0:e6:cd:98:9d:
0f:54:51:4b:80:30:97:91:b6:4e:0b:21:ce:98:f6:
f7:69:39:18:6c:61:ef:7b:90:4b:5b:bd:4c:82:fa:
22:45:e5:d1:74:47:04:14:fd:5a:d9:df:c8:b8:7c:
5e:fe:1f:da:7e:52:9f:fc:39:c5:09:39:97:09:fa:
76:70:4a:ef:ba:e5:b0:ec:83:cc:ae:74:26:7f:b2:
3c:85:b0:e9:56:3b:5c:17:f2:0c:35:34:23:bd:56:
4f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:74:FD:9B:50:D3:FA:98:7A:1D:9B:89:BB:B8:66:DC:88:99:06:18
X509v3 Authority Key Identifier:
keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:34:f5:25:dc:17:d3:b6:0b:cd:bd:97:95:c5:b4:3f:de:75:
a2:5f:a6:61:dc:37:8c:f4:35:93:53:4a:77:1c:75:1a:6f:8a:
87:e8:b8:45:64:9d:c8:43:b0:6a:cc:f5:08:93:49:e2:b7:2f:
43:5e:44:1b:9a:01:de:2a:cb:aa:aa:1a:ea:2c:32:d1:9a:a7:
cb:5e:af:95:4c:bf:ac:0a:d2:a4:e5:a9:1f:bc:2c:2d:96:40:
0c:e4:ab:b3:5d:8b:2b:07:cc:85:19:44:6d:f8:91:58:87:99:
2d:7f:cf:11:49:b9:0d:89:13:19:c3:91:49:15:f5:85:97:88:
c3:f2:b4:dd:3c:86:b5:c1:9e:8d:99:88:dd:4a:27:77:00:c9:
c4:0a:58:d9:e5:31:52:09:ae:16:36:43:bf:8d:1a:e5:3a:01:
66:32:40:35:5a:e6:b4:8b:6f:57:a3:e7:34:1d:59:e1:cb:56:
21:08:4c:27:10:6f:9e:d0:4a:c1:52:48:4b:cf:63:bf:17:dd:
d5:1b:62:58:55:2a:7b:d7:da:17:80:1a:6c:59:9b:57:3c:ba:
f5:6a:67:b7:01:23:2a:58:7e:b4:74:3f:12:e1:c4:9d:a9:e0:
9f:b7:38:85:e2:0d:66:e3:f8:a7:35:bd:06:f3:c5:b1:7f:d8:
7d:08:b4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:55:33 2026 by rpki-client