Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
File: AefDBFk1apANxjNpdkp1TFwfMxk.mft (raw, json)
Hash identifier: aWGJjQjNQSGoLDh/LiHHgiZLDhmwvNE8acwz3faTJ2U=
Subject key identifier: 20:AF:6A:44:62:22:91:75:1A:94:A0:99:47:87:AF:E9:8B:4C:8A:EA
Authority key identifier: 01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
Certificate issuer: /CN=01e7c30459356a900dc63369764a754c5c1f3319
Certificate serial: 01A1DB014A5C4B8E247647C876249E7EA697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
Manifest number: 172A
Signing time: Sat 14 Nov 2026 17:00:56 +0000
Manifest this update: Sat 14 Nov 2026 17:00:56 +0000
Manifest next update: Sun 15 Nov 2026 17:00:56 +0000
Files and hashes: 1: AefDBFk1apANxjNpdkp1TFwfMxk.crl (hash: VZNBo2u5uxZbbnV/D7Lr7avYwEUvpDOmp0fo1mUHsD8=)
2: nGPG4bCL5fRCaWtl1CSmf_9dePY.roa (hash: 3oWYfym4fwpXiHhFERmmlWHPC0407WEVDioP2HJ+Lrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:01:4a:5c:4b:8e:24:76:47:c8:76:24:9e:7e:a6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01e7c30459356a900dc63369764a754c5c1f3319
Validity
Not Before: Nov 14 17:00:56 2026 GMT
Not After : Nov 15 17:00:56 2026 GMT
Subject: CN=20af6a44622291751a94a0994787afe98b4c8aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:25:df:f7:ae:a0:d7:d5:2f:b9:5d:3e:d1:
4a:8a:90:12:00:51:28:3a:50:d2:ae:52:e7:a8:ec:
8f:3a:a3:38:8f:98:38:13:64:7d:c7:8a:c4:8d:20:
42:d9:a6:04:7e:0c:fb:07:50:db:a9:12:cf:e1:57:
de:6e:b0:94:ed:ca:4d:bc:a5:32:af:ce:74:17:b7:
5c:fe:c0:fb:af:27:2f:58:a1:79:30:c9:8d:c7:f9:
12:34:5b:ab:53:1d:55:f7:4f:a1:4a:28:22:45:ed:
20:8a:1d:da:01:b8:df:e5:8f:28:8a:93:73:2d:41:
e1:04:f7:cc:ef:92:88:df:f5:09:bb:bb:9c:9a:50:
36:4f:fb:26:41:d6:c3:f7:c3:1f:01:71:56:2e:ae:
8a:36:5a:52:52:e9:82:24:03:c2:d0:69:7e:4a:40:
d6:19:48:f2:fb:33:c0:f5:c6:6d:a1:ba:e8:91:4a:
c8:1a:ce:86:95:17:98:27:88:7f:f0:aa:db:42:2e:
01:6f:86:18:b0:5a:3c:1f:14:30:f8:78:4c:1d:4f:
f1:c3:05:67:70:2a:eb:df:6b:6c:cd:31:aa:d5:81:
ec:61:d7:6b:6f:96:a5:12:a9:96:f1:09:04:44:20:
4a:cc:c3:e0:40:ac:e9:e6:b0:1c:23:a0:3f:c1:ea:
be:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AF:6A:44:62:22:91:75:1A:94:A0:99:47:87:AF:E9:8B:4C:8A:EA
X509v3 Authority Key Identifier:
keyid:01:E7:C3:04:59:35:6A:90:0D:C6:33:69:76:4A:75:4C:5C:1F:33:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AefDBFk1apANxjNpdkp1TFwfMxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/19c164-eae7-46bd-a1de-bf29c4188d7e/1/AefDBFk1apANxjNpdkp1TFwfMxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ad:37:ec:e1:b6:44:fb:71:e5:a4:6c:68:fb:47:c5:bd:5c:
ce:e1:64:27:25:e8:01:dd:89:38:2d:ca:4f:34:3c:69:62:91:
a2:e1:42:07:c1:67:13:55:2f:63:26:95:df:75:09:d3:45:e9:
dd:9b:2f:12:3a:55:8e:e4:af:4d:3a:d1:e0:dc:18:48:78:d1:
6c:b3:29:60:0c:7a:30:50:ba:88:0d:3f:9c:eb:09:77:0e:cf:
eb:53:18:76:f6:43:1c:fb:d4:c1:3f:b1:17:45:08:64:3b:9b:
de:4d:c8:04:8a:67:52:04:7a:b0:62:ae:96:fe:7d:47:bf:b4:
9a:1b:ee:75:26:65:df:e3:b9:55:d3:8b:78:dd:1f:6b:ab:36:
33:49:96:13:d8:a0:e8:97:82:9f:04:4a:33:ae:79:c9:8c:1b:
19:5a:9d:54:b0:01:f4:07:05:f4:04:b8:99:ee:a1:d5:f9:10:
56:03:43:9f:f7:1f:54:86:bb:f6:58:1b:8b:6f:c9:28:18:fc:
a2:a9:c3:b2:0e:c1:b6:cf:06:05:99:84:d2:42:46:87:e0:6c:
18:a4:71:85:93:41:71:00:86:67:85:c7:52:37:e5:4d:57:10:
2e:09:ff:09:7d:c4:23:22:43:ae:c9:01:48:70:14:94:90:f8:
bd:41:98:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:14 2026 by rpki-client