Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
File: AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json)
Hash identifier: wIEe5zw3eB2kHSrRy+mLlIn1W1Kw57IRlf7p+W6p7PE=
Subject key identifier: 1A:F7:BD:DE:D2:F2:9A:4F:DC:DF:C2:14:C4:83:BA:37:2D:F0:CC:84
Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
Certificate issuer: /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Certificate serial: 019F905A92AF804FFE67B5372B9EA413924C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
Manifest number: 12AE
Signing time: Thu 23 Jul 2026 19:01:22 +0000
Manifest this update: Thu 23 Jul 2026 19:01:22 +0000
Manifest next update: Fri 24 Jul 2026 19:01:22 +0000
Files and hashes: 1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: 6C9po32qUY3ty+JTxjdAhrF7pjE8w0su5BtUNzoFhpY=)
2: YF-tWCFsSuAIoswUePA1e2Wc2vc.roa (hash: pEIfFvCDAADSX4Ka/xFTpfoKfdGNNPSk4G6XnaiqnGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:92:af:80:4f:fe:67:b5:37:2b:9e:a4:13:92:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Validity
Not Before: Jul 23 19:01:22 2026 GMT
Not After : Jul 24 19:01:22 2026 GMT
Subject: CN=1af7bdded2f29a4fdcdfc214c483ba372df0cc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:7d:7b:4d:3e:d5:1e:6e:27:61:0f:0f:6a:
1d:d5:4d:d3:c4:ca:9c:21:96:98:2a:71:3e:4b:4c:
c3:8a:89:b6:1b:15:bd:5d:11:dd:2a:2c:79:a2:17:
19:c6:12:7a:87:8f:7d:fc:49:4f:a0:3e:9b:e8:f2:
f3:1d:f1:82:35:d6:36:72:ff:9b:90:32:8c:a5:4f:
8a:78:60:a4:2b:d7:1e:d2:24:d0:c1:8f:22:e2:f3:
9e:22:4d:77:97:dd:10:95:9d:3b:43:9a:d6:6c:09:
cc:9a:e7:b7:9d:16:c6:82:b0:f5:ad:70:5a:be:db:
58:f5:fb:24:05:e1:3c:c6:56:5e:f4:4c:9a:a7:09:
19:9f:21:16:32:65:0c:21:78:47:a2:e5:5b:23:ba:
55:2e:6d:2b:24:36:f3:3e:0a:26:0f:9a:fb:4a:28:
22:11:1d:ac:9d:1d:a5:db:dd:78:5e:28:e9:4a:f1:
26:63:51:b1:b5:4b:03:4f:89:bc:89:ed:4a:7f:98:
c1:5a:e5:ff:80:a4:2e:fa:22:bd:12:33:01:d5:ba:
94:22:8b:39:90:cb:a3:c4:4f:da:9b:e5:fa:bf:46:
29:17:a4:0b:8c:d0:77:dd:92:cb:94:9e:41:be:2f:
f8:8b:f5:e1:ba:2f:c2:5f:64:98:89:f9:98:e0:3c:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F7:BD:DE:D2:F2:9A:4F:DC:DF:C2:14:C4:83:BA:37:2D:F0:CC:84
X509v3 Authority Key Identifier:
keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3e:49:c6:5d:5e:ae:ea:cd:8b:f7:a1:20:2c:4f:86:b2:4c:
03:0e:50:9a:de:eb:35:a7:b5:63:d3:42:c7:16:68:5d:00:55:
d1:88:b4:82:38:ec:48:a8:4b:c9:64:fd:76:f7:e9:2d:54:4b:
a2:b3:da:16:fc:3a:a9:0d:b3:05:3f:94:4b:26:ec:95:18:62:
1f:8c:a6:10:5c:93:81:a8:07:72:fc:5c:b3:d9:4b:95:13:50:
23:b3:df:67:f8:97:f0:00:6b:1e:4d:8a:69:90:20:29:7c:86:
9f:a2:90:3a:e3:cc:04:85:4a:bb:cd:41:d3:ed:81:54:94:75:
15:de:a6:76:c2:8a:11:14:bb:54:5e:c0:08:c7:be:08:cb:9f:
71:76:5e:f9:39:cf:7f:53:b6:ba:4d:df:87:aa:4a:d4:99:f4:
92:34:d7:05:ee:d2:01:6c:92:e8:5e:18:02:3a:c9:57:05:e4:
63:31:87:f2:30:d7:4d:b8:ac:b3:e3:2b:5b:6e:df:1d:f1:d8:
94:99:47:4e:62:3e:1e:24:76:46:25:a7:60:a8:9b:0c:3a:20:
a8:c2:05:3a:7b:0a:ac:8f:ca:72:82:a9:55:fc:88:1a:0b:22:
dc:e5:df:56:c0:e2:26:dd:8f:fa:69:4c:1c:76:97:d1:4c:7a:
7b:88:de:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:40 2026 by rpki-client