Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
File: AfZJudBUYiex1GJsIIHk09qFDv4.mft (raw, json)
Hash identifier: BMgxQBZHkdxzG8z2/wlFFp1eMQVH/WWM8viL6moliTA=
Subject key identifier: F3:55:DB:DE:94:E5:37:5E:91:0B:4E:69:AA:E8:62:66:27:1C:B3:D5
Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
Certificate issuer: /CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Certificate serial: 01A0D1FFF7CEC9798B25013C8D5F074024B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
Manifest number: 1756
Signing time: Thu 24 Sep 2026 06:00:08 +0000
Manifest this update: Thu 24 Sep 2026 06:00:08 +0000
Manifest next update: Fri 25 Sep 2026 06:00:08 +0000
Files and hashes: 1: 2FF_JdmMPpNnVhjdAwhZJqXRuRA.roa (hash: w0hjY14/3MT2uCVE6s9mvHq0OBPlplAq8WkEPk3Bsz8=)
2: AfZJudBUYiex1GJsIIHk09qFDv4.crl (hash: dQJ3G9LAYclfUUBz4reWuMHM+eUk6KHfffKxK7GKlMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:ff:f7:ce:c9:79:8b:25:01:3c:8d:5f:07:40:24:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Validity
Not Before: Sep 24 06:00:08 2026 GMT
Not After : Sep 25 06:00:08 2026 GMT
Subject: CN=f355dbde94e5375e910b4e69aae86266271cb3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:bf:02:d9:7d:17:2a:91:67:30:4d:3f:f9:
54:d3:c6:90:73:68:9c:6d:96:ae:d9:98:ba:f8:96:
17:78:e3:38:e9:42:04:e9:85:88:a1:7c:a3:5f:c8:
33:ac:99:14:54:81:8e:9a:8a:52:b9:c8:e5:13:0d:
68:a0:8f:5d:40:46:f0:24:59:39:fa:87:27:05:11:
87:59:e0:f4:9c:98:f6:7c:9b:47:9b:ed:c5:7a:bb:
bd:52:cc:9c:64:c7:dc:15:b7:4a:82:22:75:a3:f9:
28:97:31:d9:63:5e:43:ad:77:e7:ac:af:4b:06:f6:
0a:a5:57:f0:c3:e8:1e:76:43:f8:4c:b1:ad:19:fc:
59:fd:f5:91:ae:54:a5:39:fb:59:72:db:23:6c:ab:
02:0f:81:75:36:5a:d2:aa:b3:f9:c1:b6:30:e3:ba:
82:b3:b6:6b:a2:52:e0:7e:c9:b3:2a:ba:40:03:3c:
72:9a:ea:c3:ad:20:17:7b:a4:32:d3:ef:7d:c1:6d:
c1:b2:25:3a:bd:a3:93:ff:a5:44:c0:20:df:66:03:
d4:67:8a:e4:e2:1b:de:7a:01:87:cf:bf:5d:79:d5:
e7:00:07:2a:b0:ef:dd:9b:45:b0:bb:e5:33:4b:af:
b6:94:2b:99:d4:bd:11:de:7a:f8:89:e6:ad:ce:50:
2c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:55:DB:DE:94:E5:37:5E:91:0B:4E:69:AA:E8:62:66:27:1C:B3:D5
X509v3 Authority Key Identifier:
keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6f:02:da:44:b9:c3:df:76:4a:d5:e8:4d:e5:93:99:be:0e:
b5:5a:c6:b7:8e:50:90:d0:fa:4b:3b:d1:fe:0d:c0:be:c3:d7:
8e:d7:0f:4b:31:ac:11:46:ba:e2:17:9e:87:9e:57:1c:59:d0:
d9:f0:29:d3:7c:c6:c2:67:f0:d9:11:8e:4f:7a:0b:8d:58:ee:
39:a1:c2:01:ea:de:49:9e:29:08:bd:24:5f:0d:b0:d0:e1:b1:
12:01:ae:e5:a9:32:de:b5:6b:58:b3:21:4d:1c:e5:b4:6a:7a:
34:15:ea:15:99:11:3b:02:47:06:1c:50:ce:ed:12:91:9b:ab:
0b:7a:ae:f8:c7:60:01:75:a1:34:85:08:5c:6c:93:f8:05:26:
fc:8b:a0:4e:f8:ca:d1:ab:13:49:8c:85:53:46:21:1d:df:a2:
7b:4c:b4:98:b2:0d:1a:d4:b3:f0:ba:b6:f1:19:4f:90:1c:c4:
8e:80:73:c6:3c:84:65:47:6f:60:ea:54:a8:c1:53:78:53:69:
15:01:da:23:fe:13:52:b3:d0:51:d5:f3:ef:96:c8:6b:87:eb:
70:50:1d:66:7d:0f:60:5c:68:c6:73:f0:c4:b9:be:91:9a:07:
bd:b3:82:a4:45:97:21:23:63:a7:ad:85:b0:63:5a:88:ba:89:
2e:ba:1f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:20:11 2026 by rpki-client