Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier: SBby3OXQtr5wkf95KIJy13HPgQqoZwBqqtM5EEnWJSk=
Subject key identifier: DF:1F:BB:B9:4B:E5:99:A0:AD:56:03:1A:F5:BC:20:CC:AB:B1:0C:69
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 019F91358B2DE2B5F2A307E4FF5EFD370175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number: 19E8
Signing time: Thu 23 Jul 2026 23:00:32 +0000
Manifest this update: Thu 23 Jul 2026 23:00:32 +0000
Manifest next update: Fri 24 Jul 2026 23:00:32 +0000
Files and hashes: 1: 3lE-OFcZg5HBfiXy0gupENM3iyk.roa (hash: bLLbFDCXQ+hwG1ZI2hchMxCwkBA94qpajMIUIPVAa8Q=)
2: 3yN1WaImxLytELQ8orv8zRs2JTc.roa (hash: xMQ9DHu/OHk2/N1Hs4FxQtyh2D3+E7jpj/gCToK104o=)
3: 6tH2d7DuA0R1l2Pidcpu6hElWDI.roa (hash: CfNi98riUNvkPkY0puJ/adG9NQhrM30w+euigtAJ/Sw=)
4: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: w5ShEVKCsVfwym4b7/wDnkARS8X/YPbbsb0fYzyIZEk=)
5: TzbPsDZ-cxzqjv8-LwUqnZiNDVA.roa (hash: Fw/wCqm5ct+1+LFhxRHPMU/lUojt4L4OVaEyFt+zO+s=)
6: ddUJNLSqBtnSmNldI4m1ICrrXaA.roa (hash: 3+OVO0aN+wd5+fw851/RNy2HHQdglPinsg8QGb8dxQo=)
7: eJhW9z5ku9_qhNiO6iw_ATXoEHw.roa (hash: EPkgNIk6bKUUZeeYQssHTaftEyd1+IqUJt3qVX40j0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:8b:2d:e2:b5:f2:a3:07:e4:ff:5e:fd:37:01:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Jul 23 23:00:32 2026 GMT
Not After : Jul 24 23:00:32 2026 GMT
Subject: CN=df1fbbb94be599a0ad56031af5bc20ccabb10c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:fc:59:bb:af:ae:fe:a2:d3:45:e3:90:03:
9f:1e:a7:31:9d:1e:f5:f9:58:23:82:4d:fd:8d:b1:
0c:c8:4a:a6:a8:6e:4f:db:34:90:6b:b7:5c:7e:ed:
9f:c0:aa:3e:2f:cd:d8:a7:72:73:8d:b7:6e:79:80:
88:15:1e:00:34:c8:b1:91:14:c5:64:c7:c8:0a:ee:
49:5a:97:a5:40:eb:c0:2e:9a:92:9a:1b:90:33:50:
b9:da:19:59:a2:cc:de:a7:0d:1c:49:e0:49:f2:21:
71:1b:1c:bf:a3:46:b7:b8:bd:5c:76:dc:5d:73:a9:
6e:95:78:b0:20:03:68:ef:fc:2f:0c:cb:88:e9:d9:
d0:ab:0d:5c:c5:86:64:59:91:0d:23:59:9a:38:fa:
ed:b1:68:24:55:d1:18:87:0a:bb:5e:77:39:43:f7:
20:ea:45:61:27:a9:e7:4e:60:5b:e0:ca:40:ae:87:
81:1d:66:7a:77:53:84:e3:08:c8:5e:44:5f:e8:49:
53:3c:d4:b5:6c:ae:a1:98:61:ca:e2:65:26:81:5a:
b5:82:d7:c6:80:2b:5b:e7:88:c8:94:d9:5c:66:5e:
3a:d5:d3:f3:4d:75:a8:dd:d9:c7:7b:3a:b4:b1:75:
4e:12:13:ad:ef:3f:cb:58:19:f9:d6:73:09:2a:ca:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1F:BB:B9:4B:E5:99:A0:AD:56:03:1A:F5:BC:20:CC:AB:B1:0C:69
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:09:94:d8:bd:6e:2e:17:cd:3d:40:66:d1:2d:a0:87:bb:c4:
73:a0:4f:c8:59:02:1f:d5:3b:41:81:e8:c6:d9:96:4d:5a:7f:
3e:f8:20:fc:85:e5:0c:10:84:e3:64:5d:26:13:3b:41:25:18:
f6:5f:61:9b:48:82:86:55:db:29:20:22:ae:c1:19:31:1f:53:
b1:9a:87:f9:a9:07:31:21:85:a6:f2:69:f4:66:4d:89:25:84:
58:91:2b:d1:94:6c:15:e9:3f:4c:96:1d:60:27:15:a3:b4:f2:
4a:c5:b6:91:cc:60:cc:c0:5d:e4:74:14:ef:45:40:67:18:eb:
0c:d9:cb:c4:5a:d7:53:dc:a9:ab:1b:5c:df:91:7a:14:b0:22:
b0:e7:1c:89:a5:d7:d4:50:7e:83:ba:e9:bf:0a:5b:ef:34:f5:
dc:bd:d6:27:f4:59:9b:48:dd:70:5b:0c:92:f6:d4:f4:28:79:
68:fb:47:69:72:62:7c:b5:2c:8a:bf:b7:14:21:22:92:b4:83:
c1:3b:63:f1:e6:1c:dc:61:f6:3f:b7:73:99:02:ff:cf:e9:cc:
21:87:db:e1:fc:14:79:21:fd:d4:0f:59:1c:83:ea:26:f1:47:
2b:09:4e:3c:15:16:42:51:04:e7:48:fa:f7:49:1b:15:11:e9:
20:c4:17:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNYst4rXyowfk/179NwF1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZjNlZjNlMGVhOTVhOTc1NTM3ZDVjMjVkOTNjYjc2YWY2
ODcyMzQwHhcNMjYwNzIzMjMwMDMyWhcNMjYwNzI0MjMwMDMyWjAzMTEwLwYDVQQD
EyhkZjFmYmJiOTRiZTU5OWEwYWQ1NjAzMWFmNWJjMjBjY2FiYjEwYzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYb8Wbuvrv6i00XjkAOfHqcxnR71
+Vgjgk39jbEMyEqmqG5P2zSQa7dcfu2fwKo+L83Yp3JzjbdueYCIFR4ANMixkRTF
ZMfICu5JWpelQOvALpqSmhuQM1C52hlZoszepw0cSeBJ8iFxGxy/o0a3uL1cdtxd
c6lulXiwIANo7/wvDMuI6dnQqw1cxYZkWZENI1maOPrtsWgkVdEYhwq7Xnc5Q/cg
6kVhJ6nnTmBb4MpAroeBHWZ6d1OE4wjIXkRf6ElTPNS1bK6hmGHK4mUmgVq1gtfG
gCtb54jIlNlcZl461dPzTXWo3dnHezq0sXVOEhOt7z/LWBn51nMJKsqfjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8fu7lL5ZmgrVYDGvW8IMyrsQxpMB8GA1UdIwQY
MBaAFAHz7z4OqVqXVTfVwl2Ty3avaHI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEt
MzUzYjNhNjMzYWRhLzEvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEtMzUzYjNhNjMzYWRh
LzEvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQmU2L1u
LhfNPUBm0S2gh7vEc6BPyFkCH9U7QYHoxtmWTVp/Pvgg/IXlDBCE42RdJhM7QSUY
9l9hm0iChlXbKSAirsEZMR9TsZqH+akHMSGFpvJp9GZNiSWEWJEr0ZRsFek/TJYd
YCcVo7TySsW2kcxgzMBd5HQU70VAZxjrDNnLxFrXU9ypqxtc35F6FLAisOcciaXX
1FB+g7rpvwpb7zT13L3WJ/RZm0jdcFsMkvbU9Ch5aPtHaXJifLUsir+3FCEikrSD
wTtj8eYc3GH2P7dzmQL/z+nMIYfb4fwUeSH91A9ZHIPqJvFHKwlOPBUWQlEE50j6
90kbFRHpIMQX9Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:33 2026 by rpki-client