Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0d141a-0b0f-457d-84a8-a4da86ebe754/1/afPnxEbboL_qWF309R7dGMrnd_8.mft
File: afPnxEbboL_qWF309R7dGMrnd_8.mft (raw, json)
Hash identifier: NH+Zc7hSBIop1jyMfjUhv7qs9H1/lHElaezum5peCnI=
Subject key identifier: 44:47:73:98:53:07:0E:DA:1A:05:09:BA:A9:86:D0:1B:23:9C:B6:A1
Authority key identifier: 69:F3:E7:C4:46:DB:A0:BF:EA:58:5D:F4:F5:1E:DD:18:CA:E7:77:FF
Certificate issuer: /CN=69f3e7c446dba0bfea585df4f51edd18cae777ff
Certificate serial: 01A0EEC24DDB108771A4644CCE53B9560433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afPnxEbboL_qWF309R7dGMrnd_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0d141a-0b0f-457d-84a8-a4da86ebe754/1/afPnxEbboL_qWF309R7dGMrnd_8.mft
Manifest number: E1
Signing time: Tue 29 Sep 2026 20:01:46 +0000
Manifest this update: Tue 29 Sep 2026 20:01:46 +0000
Manifest next update: Wed 30 Sep 2026 20:01:46 +0000
Files and hashes: 1: IrMQj7cF9CiqVm0U--Fy5SvKKvE.roa (hash: 1ce0pD+evqFh35XoBomBWsmnhVvly1uAW9sCNipvSV8=)
2: T9Q1U4gsLW2MJNJXalO8FYxPIAs.roa (hash: RvWj5s+kvgGqQFgauQrT/DyW0aU4L6MIPpuGM/DciOs=)
3: afPnxEbboL_qWF309R7dGMrnd_8.crl (hash: HKB8kBG9feuqiH3ilg1khwRoZof8BpuvHp/vmNmiUdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0d141a-0b0f-457d-84a8-a4da86ebe754/1/afPnxEbboL_qWF309R7dGMrnd_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0d141a-0b0f-457d-84a8-a4da86ebe754/1/afPnxEbboL_qWF309R7dGMrnd_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/afPnxEbboL_qWF309R7dGMrnd_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:c2:4d:db:10:87:71:a4:64:4c:ce:53:b9:56:04:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f3e7c446dba0bfea585df4f51edd18cae777ff
Validity
Not Before: Sep 29 20:01:46 2026 GMT
Not After : Sep 30 20:01:46 2026 GMT
Subject: CN=4447739853070eda1a0509baa986d01b239cb6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1a:5d:2e:c2:04:86:a5:70:2c:50:39:57:a3:
4d:f4:95:eb:27:bb:94:18:4d:ea:20:f7:86:bc:15:
b6:a3:6e:42:dd:31:52:bb:c9:12:ce:68:87:95:24:
e4:9c:5c:85:05:66:b0:4f:e3:43:ff:09:2b:84:ad:
2e:76:5a:7f:6f:6e:aa:7a:f2:ad:0f:55:df:e3:32:
52:ae:59:e6:29:ac:1d:2a:0e:23:cd:fa:e4:c8:88:
2f:af:2c:ec:50:15:75:67:88:97:7c:b9:51:e3:aa:
8a:d1:39:10:cc:eb:9d:92:8e:4b:6a:db:de:3a:26:
50:32:34:11:d7:36:6d:f4:35:a1:70:ce:c7:a9:ec:
c5:10:0c:77:65:3f:c3:85:a9:4f:c6:1c:b1:af:ea:
34:23:5d:60:29:ab:66:a7:e6:8a:f3:df:f0:fa:1a:
10:df:a1:17:ca:6e:47:19:86:53:e6:dc:8e:5f:ed:
bf:7c:1b:da:d4:76:d5:fd:c3:be:02:55:61:87:d1:
03:57:d4:58:f9:bc:a1:1e:dc:8b:a7:a7:f6:d8:fd:
39:86:73:2a:d6:29:d0:55:79:56:2d:35:79:e0:8c:
99:53:f9:40:63:09:0d:84:6a:58:72:25:fb:30:5a:
1c:83:e3:5e:91:dd:53:39:d5:fb:41:ce:cf:b8:59:
9b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:47:73:98:53:07:0E:DA:1A:05:09:BA:A9:86:D0:1B:23:9C:B6:A1
X509v3 Authority Key Identifier:
keyid:69:F3:E7:C4:46:DB:A0:BF:EA:58:5D:F4:F5:1E:DD:18:CA:E7:77:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afPnxEbboL_qWF309R7dGMrnd_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0d141a-0b0f-457d-84a8-a4da86ebe754/1/afPnxEbboL_qWF309R7dGMrnd_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0d141a-0b0f-457d-84a8-a4da86ebe754/1/afPnxEbboL_qWF309R7dGMrnd_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f3:e6:a9:59:90:7f:cf:12:14:49:ab:f0:7b:83:de:35:b5:
fc:3b:37:7c:6f:a3:fa:8e:e4:13:55:c6:5b:6f:63:eb:90:7c:
d3:8f:ce:ec:6c:b4:96:b0:71:3e:10:8b:58:cc:8f:d1:1d:fe:
08:fc:2e:f2:3f:57:0e:42:99:6b:92:d0:1c:5e:13:2e:ee:09:
d2:f4:4b:34:94:9f:f5:fe:ed:17:1e:14:1b:5f:f2:6c:b4:8c:
8a:b5:79:26:2e:c3:6d:2d:f4:43:3e:4f:38:a6:ed:e7:f8:a8:
72:27:9e:28:8b:89:40:55:f1:99:dd:f6:93:57:3a:3e:c1:fe:
8c:16:56:d2:fc:1d:53:ea:0b:fd:02:5e:c0:20:60:9c:fa:9a:
bb:52:23:7e:40:e8:c3:d6:bb:dd:64:8c:36:85:18:b3:8e:9c:
cc:1f:d3:8e:be:a4:42:a3:ff:91:fa:ac:43:d2:2b:c9:f6:ba:
74:40:6c:be:9e:c0:0d:0b:72:a9:bb:3d:6d:b0:3d:06:85:93:
16:db:ef:0c:d1:a6:34:c7:e5:11:4a:04:0b:ea:5e:f0:fc:b4:
51:84:43:68:43:7a:c6:2d:41:19:3c:2b:06:c2:3a:51:64:bf:
a7:f5:bb:aa:f7:04:f4:4e:54:a1:20:2f:91:9e:1b:8d:b1:b5:
bf:45:14:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 07:31:39 2026 by rpki-client