Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: eyFAXUP9aKLFVvatv+SNtxCZJJnwK9ftREoy+MRGjs8=
Subject key identifier: 35:C3:19:0F:E0:CE:0B:59:2E:B0:06:38:28:9C:4D:EC:71:08:3D:47
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 019D2A3B5B339ACE97281186EBD923474305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 1209
Signing time: Thu 26 Mar 2026 13:00:26 +0000
Manifest this update: Thu 26 Mar 2026 13:00:26 +0000
Manifest next update: Fri 27 Mar 2026 13:00:26 +0000
Files and hashes: 1: PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa (hash: uNWAi4ypu2U7vKEwyptJEE3BsJukgPqN0/lL7CgpehE=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: QNI4k8OuPLXebmtiTIrKUHZ3XQwM+75mq8ZvPa7zW5A=)
3: bNsvbdSJD0WI7Ewm9hgAe8yTIz4.roa (hash: fjVFQSNrjHzCOHsMITQUOhjzFotcFBmj0QqIbMKaS7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:5b:33:9a:ce:97:28:11:86:eb:d9:23:47:43:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Mar 26 13:00:26 2026 GMT
Not After : Mar 27 13:00:26 2026 GMT
Subject: CN=35c3190fe0ce0b592eb00638289c4dec71083d47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:60:86:8e:d9:fa:ba:b5:98:3e:ff:fa:ff:
75:fe:b0:b8:25:dc:f8:53:1b:f9:3b:48:a2:a6:80:
4e:3a:10:4f:c1:d2:fb:93:31:86:67:0e:95:a2:48:
6c:0b:0a:66:fa:f2:ee:ec:7f:f0:4b:b2:f7:b1:6b:
6f:a1:be:74:68:aa:f3:e3:4f:ce:78:a3:56:8e:ca:
8a:f0:73:c3:a0:14:ab:03:65:05:6c:80:02:62:f3:
e5:41:70:1c:93:1f:a5:04:d2:00:58:e5:d1:af:3a:
82:c1:75:e8:51:ba:d7:55:e8:0e:a4:e9:b7:eb:1a:
44:ba:a7:0f:f1:20:24:99:ac:d5:97:23:22:e4:54:
93:5e:24:21:63:ef:d8:93:e9:bc:00:25:28:19:c7:
6d:c4:89:e8:05:2a:4c:84:40:cf:16:6f:a8:03:07:
db:22:d3:2a:ea:27:e8:f3:c4:30:69:3d:af:ce:ad:
a9:5c:b4:8d:16:83:45:e7:1b:1e:1c:c7:1b:02:4b:
e8:66:ee:73:e3:b0:72:70:f9:c3:d9:cc:97:a6:9b:
2c:32:28:dc:f3:07:a6:c9:91:14:86:25:ca:4a:7e:
36:1f:c8:16:10:b3:0c:37:ba:25:a4:2c:46:b5:6e:
a4:ea:38:49:48:db:31:4e:ab:ad:69:03:a3:01:38:
f6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C3:19:0F:E0:CE:0B:59:2E:B0:06:38:28:9C:4D:EC:71:08:3D:47
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:05:fe:00:45:13:23:44:33:96:ac:5f:f0:95:16:0c:a1:af:
ab:41:ff:10:b4:96:31:67:fa:30:75:98:15:84:1f:58:5a:63:
2f:f9:2b:e7:2d:b2:4c:a5:41:99:7a:5d:fb:1e:26:a4:74:80:
df:90:3b:37:4c:78:79:63:b4:ea:89:c3:c1:1d:c3:f2:82:95:
75:12:fd:8f:f0:96:f1:ee:49:10:4e:49:01:6d:a4:83:4a:9d:
4d:33:3d:c2:7a:55:09:36:58:87:93:55:ac:1d:22:e2:4b:32:
d6:b5:8d:a2:4c:bc:64:cd:20:ea:d8:6e:d3:da:04:6a:c2:f1:
88:af:8b:ec:05:46:76:ad:10:c3:32:cd:99:ea:1f:cf:b2:e2:
13:2b:9d:2d:19:bd:6c:a0:e6:dd:09:9f:f8:ad:d2:03:75:04:
95:f8:a0:75:a3:67:30:0c:6d:6a:0e:59:4e:0e:9f:89:c4:29:
ea:0a:93:d8:ab:6a:61:fb:3f:a2:da:85:01:e1:1d:92:b0:0d:
b7:43:85:2e:ee:84:e9:c6:57:1e:d4:a8:a4:cb:39:75:85:0f:
b6:46:90:1c:2f:ad:5b:3d:bf:13:59:61:47:20:9c:56:9b:9c:
c8:84:eb:67:12:21:26:f3:13:61:37:3f:11:45:34:a0:74:59:
9d:0f:bc:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qO1szms6XKBGG69kjR0MFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjczNTJkMDcxMzU2MjNlMzNmNWE3ZTYyOTI1ZDRiYWI3
MjJmYzYwHhcNMjYwMzI2MTMwMDI2WhcNMjYwMzI3MTMwMDI2WjAzMTEwLwYDVQQD
EygzNWMzMTkwZmUwY2UwYjU5MmViMDA2MzgyODljNGRlYzcxMDgzZDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVVgho7Z+rq1mD7/+v91/rC4Jdz4
Uxv5O0iipoBOOhBPwdL7kzGGZw6VokhsCwpm+vLu7H/wS7L3sWtvob50aKrz40/O
eKNWjsqK8HPDoBSrA2UFbIACYvPlQXAckx+lBNIAWOXRrzqCwXXoUbrXVegOpOm3
6xpEuqcP8SAkmazVlyMi5FSTXiQhY+/Yk+m8ACUoGcdtxInoBSpMhEDPFm+oAwfb
ItMq6ifo88QwaT2vzq2pXLSNFoNF5xseHMcbAkvoZu5z47BycPnD2cyXppssMijc
8wemyZEUhiXKSn42H8gWELMMN7olpCxGtW6k6jhJSNsxTqutaQOjATj2AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXDGQ/gzgtZLrAGOCicTexxCD1HMB8GA1UdIwQY
MBaAFGn3NS0HE1Yj4z9afmKSXUurci/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEt
MDcxNTE4ZTA1NzNlLzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEtMDcxNTE4ZTA1NzNl
LzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQX+AEUT
I0Qzlqxf8JUWDKGvq0H/ELSWMWf6MHWYFYQfWFpjL/kr5y2yTKVBmXpd+x4mpHSA
35A7N0x4eWO06onDwR3D8oKVdRL9j/CW8e5JEE5JAW2kg0qdTTM9wnpVCTZYh5NV
rB0i4ksy1rWNoky8ZM0g6thu09oEasLxiK+L7AVGdq0QwzLNmeofz7LiEyudLRm9
bKDm3Qmf+K3SA3UElfigdaNnMAxtag5ZTg6ficQp6gqT2KtqYfs/otqFAeEdkrAN
t0OFLu6E6cZXHtSopMs5dYUPtkaQHC+tWz2/E1lhRyCcVpucyITrZxIhJvMTYTc/
EUU0oHRZnQ+8qw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 22:09:13 2026 by rpki-client