Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
File: AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json)
Hash identifier: OToSTiqcV1EQg90IJpwRjJ9SE5k9WOdeRRK52vfpnaw=
Subject key identifier: BD:04:65:99:77:21:B5:09:1A:57:82:09:9C:37:40:FD:DA:6B:4F:7A
Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
Certificate issuer: /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Certificate serial: 019D265F1DCDA4A76537F0D596B1FA937483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
Manifest number: 116E
Signing time: Wed 25 Mar 2026 19:01:00 +0000
Manifest this update: Wed 25 Mar 2026 19:01:00 +0000
Manifest next update: Thu 26 Mar 2026 19:01:00 +0000
Files and hashes: 1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: cggA2NFZIusTPHUBZ83oAeF0sqNDbbSD/Nkpm+sshRI=)
2: YF-tWCFsSuAIoswUePA1e2Wc2vc.roa (hash: pEIfFvCDAADSX4Ka/xFTpfoKfdGNNPSk4G6XnaiqnGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:1d:cd:a4:a7:65:37:f0:d5:96:b1:fa:93:74:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Validity
Not Before: Mar 25 19:01:00 2026 GMT
Not After : Mar 26 19:01:00 2026 GMT
Subject: CN=bd0465997721b5091a5782099c3740fdda6b4f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:5a:75:22:34:d5:d7:fe:1d:41:48:6b:de:
40:4b:46:4a:d2:a9:5c:92:aa:b5:90:49:27:ff:16:
ed:f9:05:80:0d:36:ea:d4:7e:8d:91:40:68:e3:2c:
ae:34:7f:1b:10:70:45:92:fd:72:8b:d1:fb:fb:69:
3f:8b:7d:1d:92:d0:31:05:a8:63:1b:83:3c:f2:9c:
f5:c8:c3:64:6d:e2:d5:1a:66:f2:d5:02:19:15:f2:
fa:5c:d7:15:77:9a:46:af:f1:e9:0d:a5:2d:02:fb:
f1:1a:bd:aa:15:49:89:d1:d4:cc:ba:0d:c6:c9:31:
58:37:8a:d8:ec:54:d8:f9:e6:a0:a9:ae:3c:9a:e1:
4e:84:38:29:43:ca:a1:6b:97:f8:24:b7:a2:fa:1c:
de:0f:49:9b:86:64:92:45:f7:2c:64:10:f2:d0:21:
cc:4f:14:74:b3:31:76:7d:9d:f9:27:89:b0:f3:9e:
c7:f7:16:02:d1:30:ad:ff:2f:4e:3a:cb:4c:79:c4:
e0:cd:81:24:1d:50:f9:67:1f:c6:fa:83:2d:ec:a8:
bc:49:51:88:e9:f5:bc:99:76:65:ba:81:2a:10:98:
28:5f:09:2c:78:c2:50:b3:ba:38:cd:a3:27:21:dc:
24:94:2b:3e:26:5f:5c:f6:f0:dd:86:99:4e:0e:61:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:04:65:99:77:21:B5:09:1A:57:82:09:9C:37:40:FD:DA:6B:4F:7A
X509v3 Authority Key Identifier:
keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d7:5f:c2:ff:65:c9:8e:04:34:c4:3a:66:e7:66:08:c9:ec:
ab:a2:e5:13:5d:d7:30:8e:5e:e1:71:f9:22:6f:27:43:73:97:
97:9e:a0:4f:39:0b:26:c3:43:54:4d:a0:aa:85:82:66:eb:95:
4f:cb:ec:e5:f6:2e:15:90:e3:d1:5b:2e:6c:2f:20:48:00:bb:
22:14:c7:1c:d4:89:7e:0f:f7:7d:0f:53:7c:a7:9c:4b:c5:8c:
d9:c9:dd:cf:5e:f7:76:41:59:5d:51:67:b8:7f:ba:3b:ca:26:
fc:e6:12:ea:34:68:97:6b:ae:ee:95:09:0c:2f:b9:40:8a:26:
fa:6e:7a:eb:3c:03:13:af:78:27:c9:c7:5a:4d:7d:43:63:9d:
0e:03:81:e9:bb:f0:f8:b5:f2:84:4b:33:c3:75:bb:4a:a2:26:
93:c0:61:c0:47:b8:4e:0d:19:59:c7:08:a8:81:c7:80:41:7e:
ba:4c:7c:f4:0a:6c:32:bd:83:c4:13:cb:82:f1:16:93:8f:2e:
a0:1e:26:30:7a:63:53:28:e5:2a:f4:f7:6c:53:fa:19:b3:5d:
6f:65:7f:fc:cc:2f:0c:39:59:b6:ce:ac:bb:fb:e2:35:c6:5d:
30:c3:ac:81:b2:39:c7:c7:a2:d7:66:25:f1:67:8e:cb:6f:39:
e8:ec:0d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:38 2026 by rpki-client