Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
File: AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json)
Hash identifier: 7EBv9Cp1lPmwnq3ASZ9ctStEGsZOpkycP0sgoUrMXGc=
Subject key identifier: 33:3C:8F:4B:6B:4D:F6:28:01:CF:41:C6:46:D0:10:08:DB:98:DF:7D
Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
Certificate issuer: /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Certificate serial: 019E1D9119C15A93B36D9D25308B77525F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
Manifest number: 11EE
Signing time: Tue 12 May 2026 19:01:49 +0000
Manifest this update: Tue 12 May 2026 19:01:49 +0000
Manifest next update: Wed 13 May 2026 19:01:49 +0000
Files and hashes: 1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: Azd+k4C7jDNF13uyxBFIhah+kTuUfDPt0w9bwOvBG6s=)
2: YF-tWCFsSuAIoswUePA1e2Wc2vc.roa (hash: pEIfFvCDAADSX4Ka/xFTpfoKfdGNNPSk4G6XnaiqnGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:19:c1:5a:93:b3:6d:9d:25:30:8b:77:52:5f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Validity
Not Before: May 12 19:01:49 2026 GMT
Not After : May 13 19:01:49 2026 GMT
Subject: CN=333c8f4b6b4df62801cf41c646d01008db98df7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1a:b3:8f:ca:22:10:2d:05:0e:be:d3:60:df:
8e:08:a6:4a:7b:ae:77:3b:96:2f:fa:b4:a0:d2:5e:
94:66:76:5b:24:50:21:54:6e:81:99:7f:cb:58:e7:
07:06:4b:3c:08:b4:b5:30:2b:6e:e3:aa:e6:82:d9:
94:f9:ee:e5:da:bc:6e:5e:9f:9b:fb:37:6b:13:7e:
5d:8c:68:e8:77:96:67:67:e4:24:3d:5b:2a:72:16:
c6:e0:fb:ed:25:3b:b7:75:9d:cd:c7:65:50:63:16:
68:3f:1d:e9:91:66:c8:66:1b:98:d9:e8:0a:d9:4b:
cd:5f:03:02:45:5b:36:6b:c6:3f:af:34:da:36:3b:
a0:a1:29:61:33:1a:02:f1:23:ff:c2:d1:22:36:54:
ce:49:73:a5:07:f5:ae:98:04:a3:8f:1a:83:62:0f:
a2:a8:ef:e9:b9:71:5c:83:97:31:20:78:60:bb:fc:
35:a9:37:45:64:91:75:26:93:d4:1d:ac:de:31:10:
3a:5a:4f:ac:63:33:d9:10:45:ca:69:69:09:b7:3b:
55:c5:2b:f6:e8:66:79:6b:6d:9d:6f:a2:bb:b5:1f:
bb:54:e5:79:27:70:52:1b:eb:bb:e5:ed:71:ff:3a:
29:7f:54:83:cd:00:99:df:02:7f:34:8b:de:5e:9d:
98:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3C:8F:4B:6B:4D:F6:28:01:CF:41:C6:46:D0:10:08:DB:98:DF:7D
X509v3 Authority Key Identifier:
keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5d:83:f6:ba:63:89:22:2d:d2:3a:58:ea:0f:a7:be:75:f2:
04:fc:46:7f:b3:b6:13:4c:16:c9:bc:53:56:ce:7a:d4:c6:b4:
4b:da:c2:3e:b4:24:a7:9b:12:56:d9:55:b8:86:66:e5:5f:12:
7b:d4:72:a2:e3:b4:5a:a0:fe:7d:27:b4:09:64:e6:a6:21:4d:
4c:8e:90:c0:04:b7:b7:94:78:89:05:bc:5d:3b:ed:41:dc:ad:
59:a4:95:29:b7:cd:a4:1b:b8:5a:77:21:32:07:05:14:aa:2e:
79:af:e3:1a:b8:da:dd:37:1b:42:b2:81:f9:ac:f3:9f:6e:c6:
8d:0b:d9:08:fd:2c:52:69:86:05:35:58:ec:a2:9a:96:67:76:
2a:0d:72:bf:fb:ee:30:d6:4d:bb:e3:74:17:9c:96:dd:9f:aa:
44:41:ad:2b:b6:7b:39:1e:8a:06:fd:69:b8:2d:bc:10:e6:f3:
89:95:ff:cf:9e:ae:05:30:b2:85:11:91:db:b5:9a:d5:a5:d7:
35:55:a0:44:a6:49:bd:0a:2e:a2:23:85:9f:d3:23:7d:c8:ef:
6e:67:99:3e:8a:8a:2d:88:94:c9:e6:4e:57:1a:92:42:09:3e:
f7:b7:3f:1f:e5:92:a5:dd:63:8f:73:89:bb:6f:c0:75:9d:fa:
37:06:db:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:54 2026 by rpki-client