Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
File: AF8NRLIh9LEcidtolp-Xw8cVSQY.mft (raw, json)
Hash identifier: jgjQwNf98my32DZEC5E/X4Hq7qTg/Jl5/zGm+jjNIIc=
Subject key identifier: E3:98:ED:64:CC:61:CD:4E:51:7E:0E:E3:F5:AF:C4:28:4D:52:9B:10
Authority key identifier: 00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
Certificate issuer: /CN=005f0d44b221f4b11c89db68969f97c3c7154906
Certificate serial: 019F91356D32203C33B90680CB9FE00D9FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 23:00:25 +0000
Manifest this update: Thu 23 Jul 2026 23:00:25 +0000
Manifest next update: Fri 24 Jul 2026 23:00:25 +0000
Files and hashes: 1: AF8NRLIh9LEcidtolp-Xw8cVSQY.crl (hash: 1+2FTbp/3Pmlg8qwm4vY01hc26Y+VOx5WSFgaFtytN4=)
2: kJQsI98iVa9ZD7yxoQppC6FP-XY.roa (hash: DqgDfqLMHMB6Ed3JqGpWQxjC4rt/X0IDDmE+DZGx1YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:6d:32:20:3c:33:b9:06:80:cb:9f:e0:0d:9f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005f0d44b221f4b11c89db68969f97c3c7154906
Validity
Not Before: Jul 23 23:00:25 2026 GMT
Not After : Jul 24 23:00:25 2026 GMT
Subject: CN=e398ed64cc61cd4e517e0ee3f5afc4284d529b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:ed:f4:98:5f:ee:be:f3:f8:d7:0a:1c:8b:
f4:fd:45:e0:8a:07:91:fd:e9:dc:d2:ca:e5:b9:47:
04:a1:83:f5:1c:a1:6a:9c:b5:2c:25:4c:38:be:a1:
91:3e:58:e4:9d:01:5b:dd:82:4b:29:02:a4:81:91:
4a:b6:79:1c:df:0b:60:21:2a:4d:cd:9a:6c:90:c7:
37:e6:1a:69:a8:f5:be:cd:7d:0d:66:f6:cc:30:a7:
43:60:bd:c5:6f:6a:dd:b3:ca:24:fa:ce:58:31:4e:
a9:9f:14:fa:41:c2:d2:4e:2e:06:99:24:60:82:88:
f7:5e:de:53:51:cd:27:9d:0c:16:ad:c9:0e:ad:28:
80:ad:4a:a6:11:8a:97:53:3f:51:c0:14:6d:f3:30:
bf:c6:aa:ce:67:77:cc:31:97:57:fd:a3:c8:4e:93:
d7:4d:2b:06:f4:c6:11:71:f1:20:67:93:5c:fe:87:
ee:73:8d:23:95:09:08:8a:62:9f:36:79:51:8a:e8:
2f:f0:f0:cb:4b:36:a9:7f:e7:aa:f3:14:b1:89:e5:
d9:56:0a:dd:77:9c:5c:eb:d3:ad:bb:fc:91:ad:76:
cf:5e:35:67:a0:3e:d8:0d:bd:e6:e1:f7:78:05:e1:
f1:0b:07:19:89:46:18:f0:c5:cb:d9:f4:81:f4:4f:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:98:ED:64:CC:61:CD:4E:51:7E:0E:E3:F5:AF:C4:28:4D:52:9B:10
X509v3 Authority Key Identifier:
keyid:00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:60:08:bb:ec:09:2e:a5:4b:d9:c5:e2:cc:d0:ba:ab:95:1d:
91:0a:d0:cb:9e:98:7b:d6:6b:22:27:b4:bf:11:a6:0c:79:f3:
81:4b:de:81:70:2f:30:9e:88:09:8c:39:4f:e2:f6:73:07:b5:
b5:8f:16:84:ae:b4:0e:b5:39:b2:0c:2b:b2:fa:37:e8:4b:48:
8a:66:7a:60:6b:a8:b7:0f:af:cf:4f:17:cc:60:6c:9c:5b:78:
8a:91:96:48:a7:4a:c6:f7:b4:db:86:10:3e:1e:7b:e6:15:41:
f3:b3:be:5e:f5:6d:10:f9:aa:19:06:88:af:a9:94:d2:cd:68:
92:ec:b9:e0:f6:34:88:fa:a5:8b:d0:cc:0a:85:fb:46:96:d7:
f3:20:e8:01:34:95:9c:7d:7c:e0:c4:59:cb:4f:62:2c:a8:10:
4c:e9:4b:ec:1a:41:23:f7:13:72:32:d3:5b:30:76:be:4a:6c:
69:d9:69:66:1b:1b:60:2c:03:bc:55:4b:e3:55:dd:7c:14:ab:
92:37:75:e1:d0:35:35:83:75:06:7f:01:f5:f0:0b:00:2f:eb:
3e:c2:27:49:e0:3c:15:c2:39:37:aa:e9:5f:87:bc:18:b8:b0:
9d:f3:56:27:fa:8e:2b:3c:3d:4b:91:37:2f:a7:50:b9:fa:7d:
cd:93:f1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:25:46 2026 by rpki-client