Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
File: afjrNm_GyKCb-xQPFQX57GddQuQ.mft (raw, json)
Hash identifier: 15LFdSbDY6AaIxFjOjHs8u9dj9/Fw611F4aOaY5yqUQ=
Subject key identifier: 10:A1:09:EA:CA:53:71:F4:AA:B1:55:41:E4:CE:C3:A2:E1:FD:57:A3
Authority key identifier: 69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
Certificate issuer: /CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Certificate serial: 019D28F2FBBF2FD0089E01905C1277A690FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
Manifest number: 0B5B
Signing time: Thu 26 Mar 2026 07:01:45 +0000
Manifest this update: Thu 26 Mar 2026 07:01:45 +0000
Manifest next update: Fri 27 Mar 2026 07:01:45 +0000
Files and hashes: 1: afjrNm_GyKCb-xQPFQX57GddQuQ.crl (hash: rrJZbUBzjZteX0SoRhba6Dzy+e99hNzJmMFZBuUMk+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:fb:bf:2f:d0:08:9e:01:90:5c:12:77:a6:90:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Validity
Not Before: Mar 26 07:01:45 2026 GMT
Not After : Mar 27 07:01:45 2026 GMT
Subject: CN=10a109eaca5371f4aab15541e4cec3a2e1fd57a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:18:8f:cb:87:49:aa:97:cf:da:fa:4f:d9:
8b:5d:b3:b6:f4:c6:04:45:c2:98:67:44:20:db:58:
aa:0a:0e:35:7d:d3:9a:bf:3c:b2:c2:b4:f4:d6:20:
fc:68:05:79:13:95:e8:33:20:65:34:5f:e4:7e:a8:
8d:26:c1:9c:94:79:6c:f5:f9:ad:96:07:24:b7:4d:
b1:be:5b:66:75:29:33:e4:d7:bf:bf:d0:fa:54:36:
74:dd:33:4d:1e:ab:4b:65:db:37:2a:d0:99:88:cf:
2c:93:3d:1f:f6:f8:4b:a6:37:27:4d:86:9a:b2:98:
7f:01:67:34:fa:cb:90:75:eb:97:73:c0:07:27:f7:
f4:9b:08:9f:91:1e:23:8a:8c:a9:b7:d5:89:1c:91:
45:33:23:0a:a6:d8:a5:ef:3d:5d:a7:65:0b:af:81:
9a:3e:48:58:31:ec:8b:ed:c5:92:b4:f2:9f:f7:cf:
92:78:1b:e5:be:76:68:1e:2a:f5:66:fc:1c:17:b7:
fe:24:86:e6:b1:10:8b:04:13:66:6a:16:f1:e7:e2:
bf:11:75:d7:08:8e:5b:fd:a3:48:3c:dd:9d:06:fe:
74:ae:ce:d1:42:0c:69:b6:c7:ab:4b:33:51:3e:7a:
f6:24:e0:91:3f:80:5c:5c:b5:43:74:24:90:4e:4a:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A1:09:EA:CA:53:71:F4:AA:B1:55:41:E4:CE:C3:A2:E1:FD:57:A3
X509v3 Authority Key Identifier:
keyid:69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ea:9b:87:33:f6:65:e5:8d:1e:cb:02:68:1a:bb:7e:21:88:
f7:ce:b7:21:70:e9:12:b2:81:1f:bb:ca:fa:82:cb:56:90:a6:
8e:ab:62:e0:75:93:3b:21:08:b7:c0:64:2a:76:77:3b:bd:2d:
d3:7c:62:d9:6b:af:73:f0:8c:15:68:46:91:85:eb:50:63:b0:
5b:fc:fb:00:b4:8b:a2:b1:25:ed:bb:7d:60:d0:08:7a:c4:81:
8a:00:2c:3f:46:fc:31:87:5f:34:b9:a0:ee:d9:78:12:77:28:
13:d1:bc:a8:6a:46:41:97:7f:01:f9:6e:16:c2:fd:c5:05:00:
59:e3:e2:72:be:44:b2:c4:33:e5:4e:47:a8:1a:80:64:c7:3b:
68:f2:70:5f:ba:aa:3c:bf:79:a5:5a:df:c8:b8:f7:ea:12:e8:
fd:1d:a9:55:06:ee:ef:ea:6f:e0:55:d9:73:fc:0e:0e:44:e9:
ec:30:71:b6:6e:1e:14:14:0a:70:84:a0:82:ae:27:86:24:c2:
4b:66:8a:c6:7b:c7:34:fa:66:d7:37:bf:ca:1e:6b:81:96:a6:
36:e6:b3:aa:79:8e:3b:81:e9:2d:90:6f:f7:5b:36:59:0b:d4:
af:65:35:96:cb:4b:52:c0:c9:f5:e8:3a:9f:fb:71:e9:f5:0a:
37:9a:9d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:30 2026 by rpki-client