Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/AfI_WRb7Anvfv7BGjNbtwAqZQDU.mft
File: AfI_WRb7Anvfv7BGjNbtwAqZQDU.mft (raw, json)
Hash identifier: BXZMhpduWLvrie9Cig1iAsiNYWog+0KycV2g/Zva08c=
Subject key identifier: C3:30:2D:48:86:DC:9A:88:CC:08:5B:26:3B:91:41:E1:83:70:27:AB
Authority key identifier: 01:F2:3F:59:16:FB:02:7B:DF:BF:B0:46:8C:D6:ED:C0:0A:99:40:35
Certificate issuer: /CN=01f23f5916fb027bdfbfb0468cd6edc00a994035
Certificate serial: 01A0CD47BBEB074B34D22ECA0B25F4597969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfI_WRb7Anvfv7BGjNbtwAqZQDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/AfI_WRb7Anvfv7BGjNbtwAqZQDU.mft
Manifest number: 4C
Signing time: Wed 23 Sep 2026 08:00:25 +0000
Manifest this update: Wed 23 Sep 2026 08:00:25 +0000
Manifest next update: Thu 24 Sep 2026 08:00:25 +0000
Files and hashes: 1: AfI_WRb7Anvfv7BGjNbtwAqZQDU.crl (hash: aCvUapzSvVtzQviBX1l7exJKEGjdHujYGIAtDg9RApE=)
2: FfOPMY7mii2Cm6kOOlKnObrAFlk.roa (hash: +7ly5U6D6BJx7M0g52gce1GzJrj9+P8diN5kHhF4NhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/AfI_WRb7Anvfv7BGjNbtwAqZQDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/AfI_WRb7Anvfv7BGjNbtwAqZQDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfI_WRb7Anvfv7BGjNbtwAqZQDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:bb:eb:07:4b:34:d2:2e:ca:0b:25:f4:59:79:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f23f5916fb027bdfbfb0468cd6edc00a994035
Validity
Not Before: Sep 23 08:00:25 2026 GMT
Not After : Sep 24 08:00:25 2026 GMT
Subject: CN=c3302d4886dc9a88cc085b263b9141e1837027ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:e6:55:14:90:f9:a8:d3:46:c1:aa:ca:2b:
9d:da:4a:7f:03:7e:d8:06:56:0c:d8:00:74:84:df:
59:a3:26:4d:b3:bf:3c:3a:c4:71:8c:94:4d:bd:c2:
ac:b3:3a:a9:e5:70:5a:a6:98:14:8f:ef:df:2b:83:
68:b1:96:51:24:30:96:f1:24:a8:69:74:dc:62:0b:
e0:8f:dd:74:d8:1d:97:54:39:82:4c:2b:e0:04:2a:
63:4c:a8:c5:c3:d8:5d:f7:c2:44:09:1e:57:36:5e:
85:a1:b4:80:a6:9a:da:ae:99:9e:c9:c3:5f:d4:49:
70:7b:5f:22:98:2a:d7:36:47:50:e5:c5:bc:ee:18:
63:b5:38:d8:9d:05:0c:ea:73:af:f5:7e:b9:d6:df:
9f:f3:7f:77:53:1b:4e:8e:06:f4:5b:f4:c7:08:db:
d2:04:11:5b:b0:8b:6f:8e:53:95:89:af:e5:15:6d:
9d:1d:d1:2e:66:32:b3:7c:3d:33:c6:2f:9d:6f:17:
20:a5:a3:ed:f5:d5:7d:13:da:9b:a6:09:5f:d0:ca:
59:a9:4d:70:19:1a:ad:fd:63:d3:d2:c5:e3:97:d4:
7c:e4:88:af:02:51:a5:fb:d4:e0:be:b5:92:2d:79:
b9:d8:f1:ab:46:79:50:82:03:e8:31:25:9c:a5:00:
5b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:30:2D:48:86:DC:9A:88:CC:08:5B:26:3B:91:41:E1:83:70:27:AB
X509v3 Authority Key Identifier:
keyid:01:F2:3F:59:16:FB:02:7B:DF:BF:B0:46:8C:D6:ED:C0:0A:99:40:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfI_WRb7Anvfv7BGjNbtwAqZQDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/AfI_WRb7Anvfv7BGjNbtwAqZQDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/AfI_WRb7Anvfv7BGjNbtwAqZQDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a6:b8:12:0b:56:d3:a4:77:7c:fc:08:e0:c3:e8:67:93:75:
b0:e6:c2:a8:71:c0:78:17:06:5c:fc:e5:88:3d:c0:ea:02:d3:
e3:bc:5a:56:00:61:d7:e3:02:11:5b:a8:a6:0d:ac:61:05:c6:
8a:8e:61:a1:b2:3d:bb:7a:27:8c:77:11:f2:0e:15:d2:1c:7d:
f5:15:ba:cd:c3:2b:c6:4c:61:05:f2:09:81:39:fc:1d:ac:cd:
f3:d5:db:fb:83:a0:69:65:71:65:9d:44:26:02:ba:8a:e0:25:
66:77:8f:5e:ed:25:0e:14:c8:ad:ae:c7:7c:d0:11:66:58:6a:
fb:fe:be:73:2d:b4:85:91:ae:60:2f:94:3e:9c:64:4b:f4:24:
4b:f7:0f:1a:7f:15:eb:e3:d2:0e:84:29:25:6c:e2:5e:3a:61:
18:8f:60:e8:13:fa:80:c3:4d:39:78:86:0e:cb:0b:7b:6e:c2:
69:60:f9:90:8b:68:7c:ce:89:97:7e:e7:88:ea:e3:38:b2:bf:
b3:46:92:c7:32:19:bf:37:4e:36:d2:24:f5:b4:d9:75:d7:93:
f0:af:b9:c7:f5:3c:06:77:63:2c:ee:12:0c:07:da:8d:41:89:
30:d6:8c:de:ad:7e:94:6d:7a:61:aa:fa:9a:9c:cb:99:58:96:
9f:88:90:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:33:50 2026 by rpki-client