Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
File: AfZJudBUYiex1GJsIIHk09qFDv4.mft (raw, json)
Hash identifier: XBPCFD6a8VQADxRccU7RNOWnZNgNzKyPlEe+9+I+SzI=
Subject key identifier: 0E:42:F3:54:58:4A:2F:12:D8:12:EF:84:C6:E8:6B:6D:8E:0E:F8:59
Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
Certificate issuer: /CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Certificate serial: 019D2771F9ECEA1384967C6964F819A774AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
Manifest number: 1570
Signing time: Thu 26 Mar 2026 00:01:14 +0000
Manifest this update: Thu 26 Mar 2026 00:01:14 +0000
Manifest next update: Fri 27 Mar 2026 00:01:14 +0000
Files and hashes: 1: 2FF_JdmMPpNnVhjdAwhZJqXRuRA.roa (hash: w0hjY14/3MT2uCVE6s9mvHq0OBPlplAq8WkEPk3Bsz8=)
2: AfZJudBUYiex1GJsIIHk09qFDv4.crl (hash: Q5903S3CBkTsWp7XEVinwpW8JqJzzEmnZTum9xagIak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:f9:ec:ea:13:84:96:7c:69:64:f8:19:a7:74:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Validity
Not Before: Mar 26 00:01:14 2026 GMT
Not After : Mar 27 00:01:14 2026 GMT
Subject: CN=0e42f354584a2f12d812ef84c6e86b6d8e0ef859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:14:76:64:5a:eb:a2:81:2a:6a:80:60:cf:e2:
87:2e:ca:7a:ac:44:aa:95:ae:76:31:dc:c9:e4:01:
a8:cb:c7:3f:84:b0:87:78:65:96:a1:61:ff:e3:0b:
75:fc:11:16:0b:d6:99:db:d7:9e:92:bd:bd:3a:00:
b0:bc:3f:c3:8d:10:5a:c8:b6:7d:7f:4c:22:09:0e:
75:67:28:ec:16:dc:cb:fd:e0:11:ef:b5:ae:9b:ee:
dc:e9:57:40:34:26:09:3b:14:75:81:f2:0a:15:8a:
38:20:b4:e2:c5:70:d4:02:48:46:d9:5f:52:9f:5d:
20:3f:eb:ee:47:f5:2a:7d:b8:dd:71:03:e2:1f:2b:
1d:cf:58:8b:a1:8d:59:87:f8:ff:de:c6:f7:11:9c:
57:a7:04:6d:0f:38:42:80:91:6a:9e:14:02:6e:61:
f7:2c:a4:c4:4f:22:77:8b:ec:01:31:09:b2:3f:fc:
0b:32:22:b7:cf:e3:b1:b9:04:09:80:a7:2b:a4:84:
fd:f8:f7:5d:fe:48:12:1e:ba:74:95:28:48:6b:96:
2d:65:c3:4d:30:ed:33:53:a9:b9:0d:75:b2:a5:9e:
7e:4d:4b:fd:1b:ee:87:57:f0:18:cd:12:d6:8e:1e:
cc:64:74:b9:eb:c5:dd:a5:ab:30:7d:a6:2b:2c:e3:
6b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:42:F3:54:58:4A:2F:12:D8:12:EF:84:C6:E8:6B:6D:8E:0E:F8:59
X509v3 Authority Key Identifier:
keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:23:57:ba:8f:8d:ce:1a:dc:0a:56:55:bb:ec:d5:78:2f:da:
8a:26:89:22:a1:c9:c5:db:a1:bf:46:52:5d:47:2c:5b:e5:d2:
5c:39:54:22:f7:58:70:71:1b:55:c0:22:39:1a:c1:4a:d8:92:
0e:4a:83:8b:60:3f:3e:39:76:95:08:72:af:14:40:a0:3f:da:
ea:30:38:f1:21:75:84:7f:19:e8:fa:6b:a8:e9:e5:fe:34:c9:
ed:c8:95:20:76:5a:d1:ed:7a:57:82:8e:bb:53:15:72:e4:d6:
45:8d:42:00:ff:ba:84:84:0a:06:b3:52:ab:49:e8:eb:fa:56:
59:d0:e5:06:4e:87:b1:a3:f1:8f:66:40:b3:06:8a:7d:48:cd:
1a:cb:4d:0b:98:f8:70:c4:2a:56:c3:c0:72:af:31:67:bb:74:
fc:ff:d3:f0:dc:82:ec:e9:d9:94:c5:57:8f:f9:c0:11:4c:d1:
1b:49:a1:ba:9e:a6:53:04:41:20:97:28:c5:c7:59:4e:5a:80:
f9:65:4c:4d:7f:1a:a8:5c:70:7e:c1:f7:7d:1c:69:22:73:80:
2b:45:44:e4:68:13:b9:ad:ca:fc:3c:48:4b:bd:98:85:e0:f2:
df:85:0a:6f:62:9f:c8:a4:a0:6b:c0:ac:ff:50:35:b2:3b:e9:
43:f7:c6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:28:51 2026 by rpki-client