
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
File: AfZJudBUYiex1GJsIIHk09qFDv4.mft (raw, json)
Hash identifier: h95D7yb3wBZ3aBWBBdcJtIqI5TZHT0EV36ZMnx9HROM=
Subject key identifier: 93:2A:F7:68:B2:81:93:91:EA:63:B5:F7:92:6A:57:97:99:FC:29:54
Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
Certificate issuer: /CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Certificate serial: 019F8F7F66B3B7D2F78039909EDFBB2E9786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
Manifest number: 16AF
Signing time: Thu 23 Jul 2026 15:01:58 +0000
Manifest this update: Thu 23 Jul 2026 15:01:58 +0000
Manifest next update: Fri 24 Jul 2026 15:01:58 +0000
Files and hashes: 1: 2FF_JdmMPpNnVhjdAwhZJqXRuRA.roa (hash: w0hjY14/3MT2uCVE6s9mvHq0OBPlplAq8WkEPk3Bsz8=)
2: AfZJudBUYiex1GJsIIHk09qFDv4.crl (hash: 0WWEfosd6TEL3pAt6iPDYEOXSn3yV86vK39X6rQh+Ic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:66:b3:b7:d2:f7:80:39:90:9e:df:bb:2e:97:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe
Validity
Not Before: Jul 23 15:01:58 2026 GMT
Not After : Jul 24 15:01:58 2026 GMT
Subject: CN=932af768b2819391ea63b5f7926a579799fc2954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b8:64:87:bd:d6:62:b3:79:67:21:ce:33:50:
f8:bc:7c:c9:9b:68:3e:3e:c1:2e:fe:b4:49:ea:93:
b7:cd:af:28:99:18:80:23:f3:b0:44:2c:ca:13:15:
c5:e9:29:a0:18:6e:71:a5:81:36:02:4e:2a:5a:23:
fb:5b:ad:14:b5:ae:be:b7:c0:8b:98:63:0a:b7:fb:
7e:90:5c:22:b3:3c:eb:98:b9:4c:aa:d2:00:be:b6:
f7:39:71:7c:7b:24:fd:f6:ad:2d:2e:38:d8:dc:ab:
e9:3c:a9:51:b5:95:2d:9a:4c:56:82:8c:10:81:dd:
71:4e:9a:5e:aa:0f:7e:f7:a3:50:49:19:5b:ba:f7:
b4:02:bf:84:66:46:51:b5:84:3e:e5:ed:10:b3:7a:
30:a9:68:8f:21:d9:21:68:fc:1b:28:12:a7:40:32:
f6:5b:23:8d:68:e3:fd:75:05:f5:50:10:ea:c8:cf:
75:33:88:7c:72:f4:1d:90:05:1c:e1:aa:de:0c:ab:
be:b3:5e:6e:fc:86:2a:76:db:64:3a:eb:c9:8b:10:
7c:5e:91:6f:7c:be:9f:f5:a2:3f:4e:d5:a5:f9:04:
a3:b7:5e:15:48:18:08:3a:2d:e6:0e:4e:82:10:b4:
fa:47:d5:5b:b7:a6:37:59:2d:47:ff:64:d3:f4:96:
11:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2A:F7:68:B2:81:93:91:EA:63:B5:F7:92:6A:57:97:99:FC:29:54
X509v3 Authority Key Identifier:
keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ad:2b:92:fd:a1:eb:da:ab:8f:c6:ce:58:f7:e1:4e:aa:9f:
94:d0:68:93:c6:4e:13:09:b2:00:6c:ae:9a:46:45:a0:32:53:
0e:c0:e7:82:3f:13:4b:63:3a:19:48:5e:a9:85:08:f9:80:d0:
59:96:74:2a:42:55:82:14:eb:e5:4a:7e:7b:5a:62:8f:c6:ab:
9f:ab:8b:d7:7b:7b:a4:d1:d4:de:0a:00:fa:b5:58:76:f7:ea:
be:e6:76:ca:7d:d8:2f:63:75:0b:9d:a9:b3:62:e6:d4:2a:85:
51:ae:a1:c7:0c:69:04:f9:2c:00:ef:dd:8d:56:5d:b0:be:53:
2e:3c:98:b9:e1:b0:e0:52:04:2c:53:55:9a:57:0d:7f:a9:a9:
3e:41:2f:18:cf:b7:ee:31:1e:88:cd:49:0b:df:3f:92:d3:1a:
36:c7:47:1b:39:db:e7:88:4e:f7:15:14:c2:cf:39:7c:46:11:
c1:1b:4c:99:a2:88:0b:65:f3:f8:ec:3e:1b:7e:77:c4:70:80:
c0:4d:f5:5a:33:15:48:8a:0b:a8:d9:2c:66:7c:31:03:79:23:
b3:c5:2e:97:59:73:86:20:4b:e3:27:2f:b2:59:fb:94:0c:c6:
ff:d1:72:bf:58:45:31:f2:65:2f:1a:39:60:87:b7:18:de:af:
90:0c:11:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:10 2026 by rpki-client