Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: hjugaE4yDHHgg0mHtC2nber53sFYwwN5dmFVmMdpNuQ=
Subject key identifier: 31:98:32:B7:75:6C:76:46:04:E2:5B:A4:3D:AE:97:BF:FC:70:EA:8A
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 01A0DE72E77E0E659ED18B49EABFE9E52C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 13F4
Signing time: Sat 26 Sep 2026 16:01:07 +0000
Manifest this update: Sat 26 Sep 2026 16:01:07 +0000
Manifest next update: Sun 27 Sep 2026 16:01:07 +0000
Files and hashes: 1: PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa (hash: uNWAi4ypu2U7vKEwyptJEE3BsJukgPqN0/lL7CgpehE=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: jMM4UZPgu1iHkNLa/Q5wIkAl8PqJSTCAe5j01nGkZVM=)
3: bNsvbdSJD0WI7Ewm9hgAe8yTIz4.roa (hash: fjVFQSNrjHzCOHsMITQUOhjzFotcFBmj0QqIbMKaS7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:72:e7:7e:0e:65:9e:d1:8b:49:ea:bf:e9:e5:2c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Sep 26 16:01:07 2026 GMT
Not After : Sep 27 16:01:07 2026 GMT
Subject: CN=319832b7756c764604e25ba43dae97bffc70ea8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4e:7c:bf:46:19:4a:e3:b4:a8:da:16:cb:44:
45:1c:fd:83:4f:db:5b:84:fa:01:ca:b0:f7:be:a3:
e4:af:41:11:56:2b:6a:a6:40:bb:1a:5e:c3:ee:9c:
e1:71:cf:d8:ac:fe:b1:17:4e:65:11:c7:2e:79:28:
69:65:dd:4d:08:b2:53:84:a9:46:4c:5d:28:e1:58:
90:a9:05:8f:02:8f:5c:43:4d:8c:aa:4f:a4:e8:bf:
99:8d:2d:0d:a7:5b:3a:b6:e3:17:44:13:a8:09:22:
a2:14:5e:62:bb:4d:13:5a:1e:58:f4:01:2b:c0:0a:
e4:43:49:fa:0c:12:60:d3:31:8e:2b:8c:70:03:e9:
f8:de:c2:a3:7e:82:99:f3:ca:83:19:01:20:70:e8:
93:b9:c0:fc:3c:36:8f:ab:ad:3f:3d:65:eb:f4:d5:
37:c2:98:81:d7:22:60:a1:bd:b0:ae:44:1e:82:cc:
e9:68:c9:47:88:8d:a4:fc:6f:12:f1:b8:ae:06:96:
c7:de:ab:26:ff:dc:7f:bf:2a:96:56:55:47:ed:93:
12:7f:a2:56:ef:d7:ca:70:b2:cb:9a:31:43:e7:da:
0b:d0:fa:75:09:69:38:cc:77:eb:c1:c9:7e:3e:82:
fb:7c:c1:fc:27:cf:c3:18:8c:fb:c3:3c:8c:f2:68:
ab:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:98:32:B7:75:6C:76:46:04:E2:5B:A4:3D:AE:97:BF:FC:70:EA:8A
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:2e:cc:9b:4d:33:d8:92:ef:a7:b8:41:49:57:45:84:43:27:
04:05:8e:25:b9:cb:ef:11:b1:11:f3:49:41:e9:68:ba:a1:59:
c8:2a:b2:f6:ab:4a:ae:39:3a:e7:34:c9:42:75:22:39:c7:ee:
5b:b7:28:7c:a7:7c:02:27:5d:6b:2b:45:49:f0:7c:08:20:b4:
c9:b0:11:ea:77:97:39:ac:90:e6:5c:bb:1b:d3:11:c7:b7:c7:
ea:d2:1b:60:a9:be:4c:73:5c:1d:a5:45:27:87:f1:7f:3e:ec:
2f:1b:b4:ca:59:48:7d:70:cd:19:e6:81:da:89:7b:93:a3:fa:
07:8e:2f:6d:6d:30:60:1f:77:9a:06:0a:3e:5e:6c:84:c0:13:
7f:67:31:9b:fa:31:f9:5e:4d:e7:96:0f:31:da:90:d4:68:2e:
79:25:be:7b:a0:05:da:23:6d:61:6d:37:49:db:bc:64:51:03:
ce:7d:5c:64:81:d1:97:17:6d:60:bf:8b:bc:bb:14:8d:3d:be:
ec:26:73:0f:71:26:3e:ef:f9:6b:e1:ca:bd:1d:ab:25:7b:97:
5a:dc:9a:ab:a2:0c:df:93:f9:b8:ec:68:36:78:61:16:33:8e:
61:bc:ed:05:a0:c8:73:b5:fd:65:0f:4a:70:a5:db:c5:d2:4a:
94:36:29:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:39:51 2026 by rpki-client