Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/AfI_WRb7Anvfv7BGjNbtwAqZQDU.mft
File: AfI_WRb7Anvfv7BGjNbtwAqZQDU.mft (raw, json)
Hash identifier: MJrtGiesiZmBUjRkaefZUxjhpj1XHQteLDFjA7w55a4=
Subject key identifier: 00:E4:52:D5:D3:3A:D7:94:88:86:CA:91:BC:98:30:96:5B:71:E6:93
Authority key identifier: 01:F2:3F:59:16:FB:02:7B:DF:BF:B0:46:8C:D6:ED:C0:0A:99:40:35
Certificate issuer: /CN=01f23f5916fb027bdfbfb0468cd6edc00a994035
Certificate serial: 01A1DF835048CDF82C5789D3379B4B4E937A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfI_WRb7Anvfv7BGjNbtwAqZQDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/AfI_WRb7Anvfv7BGjNbtwAqZQDU.mft
Manifest number: DA
Signing time: Sun 15 Nov 2026 14:01:27 +0000
Manifest this update: Sun 15 Nov 2026 14:01:27 +0000
Manifest next update: Mon 16 Nov 2026 14:01:27 +0000
Files and hashes: 1: AfI_WRb7Anvfv7BGjNbtwAqZQDU.crl (hash: xkXQGw1KCt2z+wM3Px8lfgKubgie5Hfnsu961AOYm04=)
2: FfOPMY7mii2Cm6kOOlKnObrAFlk.roa (hash: +7ly5U6D6BJx7M0g52gce1GzJrj9+P8diN5kHhF4NhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/AfI_WRb7Anvfv7BGjNbtwAqZQDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/AfI_WRb7Anvfv7BGjNbtwAqZQDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfI_WRb7Anvfv7BGjNbtwAqZQDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:50:48:cd:f8:2c:57:89:d3:37:9b:4b:4e:93:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f23f5916fb027bdfbfb0468cd6edc00a994035
Validity
Not Before: Nov 15 14:01:27 2026 GMT
Not After : Nov 16 14:01:27 2026 GMT
Subject: CN=00e452d5d33ad7948886ca91bc9830965b71e693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:e8:2f:b7:f9:c1:87:3d:60:12:99:98:02:
cb:cc:77:f2:ea:ea:0f:f2:9c:31:17:0c:30:0b:36:
f0:ed:4f:b0:94:73:73:43:08:8c:0e:14:59:79:b4:
13:8b:80:44:06:a7:3e:7c:c8:13:d1:af:91:66:1a:
7a:79:ee:0c:22:be:ce:98:cb:d7:e5:39:83:3b:b2:
49:3d:11:fc:5a:48:ba:73:e5:1e:8c:64:a8:8b:0d:
ba:35:0c:0c:e3:28:f8:68:26:df:5f:84:43:61:c6:
03:0b:29:83:fc:d6:30:76:49:d3:06:b4:e0:1c:e8:
ea:17:8d:28:8c:d1:49:b7:d7:87:a0:55:0f:c1:1b:
d4:dc:b6:97:be:c2:0b:b1:b7:06:0a:61:70:54:b5:
76:4d:1f:6c:fc:54:da:3a:c7:8c:c7:14:42:5d:21:
6f:3b:51:e3:52:18:b5:38:a0:f1:da:ed:74:d8:b8:
95:4f:42:b4:87:75:5c:63:6a:b1:d7:b8:0b:90:ca:
b4:62:12:c3:6d:6b:fb:2c:55:cf:23:98:64:4d:8a:
bf:d1:39:81:d4:5e:b6:9c:80:da:5f:33:5b:17:14:
05:93:cb:31:13:82:97:7c:39:18:b9:2b:d1:bd:3f:
16:41:ac:a9:2a:93:22:41:8e:88:be:79:e1:44:da:
fd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E4:52:D5:D3:3A:D7:94:88:86:CA:91:BC:98:30:96:5B:71:E6:93
X509v3 Authority Key Identifier:
keyid:01:F2:3F:59:16:FB:02:7B:DF:BF:B0:46:8C:D6:ED:C0:0A:99:40:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfI_WRb7Anvfv7BGjNbtwAqZQDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/AfI_WRb7Anvfv7BGjNbtwAqZQDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/3c26c1-97ad-4256-82dc-97128a72bf07/1/AfI_WRb7Anvfv7BGjNbtwAqZQDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ca:f2:77:47:58:97:c7:f0:e9:31:48:00:98:5d:89:aa:68:
73:dd:95:21:74:bb:1f:c4:6a:4b:88:6d:1e:f7:20:08:7e:17:
f1:8d:ee:4e:27:8c:ae:f4:0e:9b:fb:f2:dc:97:5e:2b:e0:55:
94:64:21:c4:a9:aa:16:54:9c:da:81:4c:8d:a4:cc:0b:42:dd:
81:76:de:03:39:1b:6d:10:b4:19:19:44:76:83:7d:d8:4a:d0:
47:c5:b4:45:c0:07:c9:98:61:c6:1d:62:f5:23:53:fe:fa:de:
ff:9f:7f:05:fd:86:95:f1:a4:7f:95:dc:b4:cd:f4:02:89:e3:
1b:97:2a:ee:68:48:e7:1e:a7:f7:4a:02:29:4f:ba:8d:d2:26:
87:d8:b9:e4:6a:22:f8:2e:d9:a0:87:72:b0:bb:47:68:72:d1:
72:f2:29:95:87:02:6e:f8:29:bb:23:bc:33:1f:fe:80:0b:11:
b8:a0:14:44:31:40:7e:90:57:b7:86:e8:c3:f6:ee:20:e2:1d:
ba:56:52:6e:6a:19:da:60:23:82:91:49:a5:1b:64:54:da:7a:
f0:4a:90:c8:16:dd:c6:7a:35:23:e2:36:07:f5:91:1b:04:86:
19:d3:8a:29:66:f1:ee:3a:25:00:f6:c2:35:80:8d:4a:24:2f:
89:22:4a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:08:21 2026 by rpki-client