Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: jA59bWLLpVduiJMVd4o9bMDvOXB9N9dxK8lxgbydufI=
Subject key identifier: 38:AD:F8:1F:D8:10:7B:1D:3C:2E:C5:EA:88:C3:BD:07:D4:1A:71:73
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 019E1F7E7F3D2B2A95552E4390171A8ADA88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 1288
Signing time: Wed 13 May 2026 04:00:44 +0000
Manifest this update: Wed 13 May 2026 04:00:44 +0000
Manifest next update: Thu 14 May 2026 04:00:44 +0000
Files and hashes: 1: PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa (hash: uNWAi4ypu2U7vKEwyptJEE3BsJukgPqN0/lL7CgpehE=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: 8LZWbqvfap8T4VMnU3dyH50dpEeY80QhXmCnMPP+Cdg=)
3: bNsvbdSJD0WI7Ewm9hgAe8yTIz4.roa (hash: fjVFQSNrjHzCOHsMITQUOhjzFotcFBmj0QqIbMKaS7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:7f:3d:2b:2a:95:55:2e:43:90:17:1a:8a:da:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: May 13 04:00:44 2026 GMT
Not After : May 14 04:00:44 2026 GMT
Subject: CN=38adf81fd8107b1d3c2ec5ea88c3bd07d41a7173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:cb:e4:89:48:0c:a3:02:82:99:a3:b0:3d:
97:29:ca:b5:8d:45:9a:cd:52:e3:6c:d0:3f:63:1e:
84:62:d5:1d:f2:d6:c2:65:1d:8d:66:aa:e2:e2:ab:
a6:00:0a:5a:b1:1c:89:35:aa:2a:b9:0a:d0:b7:c4:
0c:49:c9:a8:7c:6e:29:74:53:16:3a:5b:a3:b4:6e:
a7:b5:4b:fa:d8:cd:32:ca:24:b4:8f:a4:05:52:77:
d4:43:15:5f:da:32:86:d8:c3:df:b8:4c:37:f3:c7:
6d:1a:a3:b4:46:e6:ac:4e:e5:28:ca:be:8f:8f:be:
c4:98:b0:35:e8:d4:70:c3:bb:e9:af:59:49:f5:d4:
92:8e:94:68:7d:1d:0b:b0:8e:46:f2:d5:a6:74:60:
19:e9:60:d8:0c:ac:1b:d8:46:8d:e8:14:1b:04:39:
16:82:4e:bb:7a:36:47:44:ea:9c:5f:c3:33:6c:8c:
3a:a8:98:d1:be:9e:89:8b:19:0d:c8:07:26:4b:ad:
79:00:09:59:70:21:4c:69:47:eb:81:89:65:15:62:
bc:ea:48:98:5b:41:3b:b2:e1:2a:82:2d:4b:fd:b9:
3e:0a:ad:d2:9a:b9:c5:6e:c9:e4:c8:23:96:55:c2:
8b:11:a4:b2:ef:8b:00:97:9b:5f:63:50:6e:bb:cf:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AD:F8:1F:D8:10:7B:1D:3C:2E:C5:EA:88:C3:BD:07:D4:1A:71:73
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:6e:8f:70:a8:62:a4:0d:b5:b5:a8:4d:db:1d:8a:73:0f:47:
f5:8e:e9:9b:43:f8:90:9a:ec:9e:f8:44:ef:da:1c:df:ac:ff:
ca:e0:2d:7a:1a:90:7f:cf:da:7d:ce:23:6b:87:e1:df:7b:0d:
e4:dd:78:29:0c:ad:49:ee:47:59:66:f6:60:6b:67:9b:63:aa:
a9:c1:84:6b:46:40:ea:f9:89:ae:9c:cb:88:0d:4b:d5:84:90:
58:e0:c3:58:bb:ba:60:73:57:5c:6b:3b:0e:1f:fc:af:b3:a2:
45:62:4f:48:c7:89:ef:fb:86:99:54:71:04:23:c6:0b:0b:17:
89:9c:8f:c7:1e:31:b2:f9:05:7c:0e:d1:4c:94:00:3d:ea:a4:
80:6f:6e:e2:39:c6:6d:82:ab:84:97:60:24:56:1b:16:bf:df:
a2:da:76:66:dd:da:02:42:e7:1b:e8:a8:88:dd:86:15:c4:ba:
4b:92:68:c5:d0:d2:04:18:90:be:bf:4c:0b:e4:47:34:34:21:
7b:8a:e3:48:61:ca:a7:08:40:98:25:b4:64:fc:43:cd:0d:8a:
3f:41:3c:f8:d9:b5:94:94:f5:5c:fe:1e:b7:42:17:3e:dc:f0:
4d:45:f6:b3:3a:a7:4d:a1:e9:d9:4c:16:a1:62:92:3a:00:4d:
08:65:66:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:12:44 2026 by rpki-client