Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
File: afM-l5tD6I0OXsp5h5R9sh73yrk.mft (raw, json)
Hash identifier: teEdAGAYVrQXmyYFF0wgQrzsk7yvAhyjA5DYzlkryK8=
Subject key identifier: 85:2F:F5:8D:A1:E7:5A:4F:FB:6D:8F:CD:CA:D9:EF:37:32:74:E7:CE
Authority key identifier: 69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
Certificate issuer: /CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Certificate serial: 019D27A8921C6CE2471873482212F7A7707E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
Manifest number: 0740
Signing time: Thu 26 Mar 2026 01:00:52 +0000
Manifest this update: Thu 26 Mar 2026 01:00:52 +0000
Manifest next update: Fri 27 Mar 2026 01:00:52 +0000
Files and hashes: 1: afM-l5tD6I0OXsp5h5R9sh73yrk.crl (hash: pNJHhNKVgpprlgWE36SN2CqgZ4i9UUl2agHTUrkiOxk=)
2: eNYwFKvhTYAKwUVHqfcOhm_redw.roa (hash: h0zFFTvlVNTqfoPE4dwnvafuj6T5qC/XkjacHGe2Fjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:92:1c:6c:e2:47:18:73:48:22:12:f7:a7:70:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Validity
Not Before: Mar 26 01:00:52 2026 GMT
Not After : Mar 27 01:00:52 2026 GMT
Subject: CN=852ff58da1e75a4ffb6d8fcdcad9ef373274e7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:1e:76:e0:64:05:83:a2:1a:a4:2d:1f:bb:
37:ba:6a:e2:80:26:e4:a6:7a:ca:f8:e0:88:03:8b:
58:f0:d7:5e:6c:aa:98:ba:fd:06:91:03:b6:8f:be:
ab:b4:98:a5:7a:29:66:25:68:29:1f:59:63:86:72:
97:d6:aa:aa:91:f6:37:83:e9:d3:0e:ca:4b:2e:82:
29:a0:c9:00:67:0e:c0:01:e0:a3:cb:56:a9:ab:87:
c8:32:50:30:91:cf:38:79:84:2b:ab:59:98:6f:3b:
2f:9e:b0:de:ef:52:e8:b2:af:5c:e1:d6:00:64:58:
f3:cb:8b:9d:d9:77:be:02:19:49:3b:6b:75:7b:f0:
9b:72:8c:5c:a9:5f:8f:8f:3e:79:ab:98:14:2f:2b:
70:ae:c0:ec:e2:d2:f4:1b:f4:67:9b:d2:6c:92:8b:
9e:fc:89:b5:9e:49:be:6a:2a:aa:b6:e3:93:1f:e1:
a6:08:3f:79:64:35:b3:84:0b:05:68:0e:b5:f9:58:
38:6e:69:e8:a1:06:c9:74:cd:27:d4:0f:4d:11:0a:
44:11:6d:8f:30:1f:31:19:30:74:e2:af:12:9b:56:
80:7f:8f:69:23:de:ad:a0:49:bf:de:b6:7f:86:44:
9c:e1:ca:2f:8b:7b:9d:21:db:18:9a:88:40:28:fd:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2F:F5:8D:A1:E7:5A:4F:FB:6D:8F:CD:CA:D9:EF:37:32:74:E7:CE
X509v3 Authority Key Identifier:
keyid:69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b4:0f:71:d2:71:2e:69:85:a5:62:0a:2d:89:ff:b4:1b:83:
5e:16:37:4e:ad:5e:6a:23:36:ae:8e:3c:e1:e7:13:48:01:a5:
7e:52:ac:87:71:cc:24:37:3e:32:de:be:98:f7:79:78:43:7d:
f4:42:f0:8e:8c:cd:cb:78:06:4b:07:2b:31:4a:9b:0e:3b:b0:
10:77:a9:13:f1:64:61:67:49:18:56:3e:30:d5:69:fb:ef:f3:
47:b4:a4:30:a1:1a:af:b8:b7:d6:2e:89:b3:83:fa:a9:fb:37:
7f:36:d0:40:9f:93:27:fc:fa:7d:75:19:43:b2:3d:2a:88:53:
59:fd:ca:4e:31:3e:ea:71:a0:df:c7:2a:de:38:18:63:93:f6:
43:d7:8e:69:a5:4b:df:ab:c6:b9:d8:db:89:f7:dd:0a:b3:7b:
66:3e:c6:8a:5f:8d:65:15:bc:61:f4:bc:15:10:29:cb:36:1c:
24:27:05:9f:01:54:8e:6c:7b:85:f5:54:35:2c:77:92:d9:c6:
5f:10:6d:44:6a:d5:a2:ba:85:d6:5d:78:82:53:2a:c3:ba:b7:
84:79:53:50:17:cc:e2:8a:10:80:e8:e8:fd:34:1e:d2:19:a2:
28:3b:48:72:85:b4:ff:08:50:4b:e7:00:73:4f:48:60:9c:6c:
87:56:2c:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqJIcbOJHGHNIIhL3p3B+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjMzZTk3OWI0M2U4OGQwZTVlY2E3OTg3OTQ3ZGIyMWVm
N2NhYjkwHhcNMjYwMzI2MDEwMDUyWhcNMjYwMzI3MDEwMDUyWjAzMTEwLwYDVQQD
Eyg4NTJmZjU4ZGExZTc1YTRmZmI2ZDhmY2RjYWQ5ZWYzNzMyNzRlN2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/MeduBkBYOiGqQtH7s3umrigCbk
pnrK+OCIA4tY8NdebKqYuv0GkQO2j76rtJileilmJWgpH1ljhnKX1qqqkfY3g+nT
DspLLoIpoMkAZw7AAeCjy1apq4fIMlAwkc84eYQrq1mYbzsvnrDe71Losq9c4dYA
ZFjzy4ud2Xe+AhlJO2t1e/CbcoxcqV+Pjz55q5gULytwrsDs4tL0G/Rnm9Jskoue
/Im1nkm+aiqqtuOTH+GmCD95ZDWzhAsFaA61+Vg4bmnooQbJdM0n1A9NEQpEEW2P
MB8xGTB04q8Sm1aAf49pI96toEm/3rZ/hkSc4covi3udIdsYmohAKP0RNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUv9Y2h51pP+22PzcrZ7zcydOfOMB8GA1UdIwQY
MBaAFGnzPpebQ+iNDl7KeYeUfbIe98q5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZNLWw1dEQ2STBPWHNwNWg1UjlzaDczeXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85NTNhNjEtMzM0OS00N2JmLWExMmIt
ZTRjNjkzMzQxNDJjLzEvYWZNLWw1dEQ2STBPWHNwNWg1UjlzaDczeXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85NTNhNjEtMzM0OS00N2JmLWExMmItZTRjNjkzMzQxNDJj
LzEvYWZNLWw1dEQ2STBPWHNwNWg1UjlzaDczeXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7QPcdJx
LmmFpWIKLYn/tBuDXhY3Tq1eaiM2ro484ecTSAGlflKsh3HMJDc+Mt6+mPd5eEN9
9ELwjozNy3gGSwcrMUqbDjuwEHepE/FkYWdJGFY+MNVp++/zR7SkMKEar7i31i6J
s4P6qfs3fzbQQJ+TJ/z6fXUZQ7I9KohTWf3KTjE+6nGg38cq3jgYY5P2Q9eOaaVL
36vGudjbiffdCrN7Zj7Gil+NZRW8YfS8FRApyzYcJCcFnwFUjmx7hfVUNSx3ktnG
XxBtRGrVorqF1l14glMqw7q3hHlTUBfM4ooQgOjo/TQe0hmiKDtIcoW0/whQS+cA
c09IYJxsh1YsTw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:41:55 2026 by rpki-client