Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
File: AF8NRLIh9LEcidtolp-Xw8cVSQY.mft (raw, json)
Hash identifier: CnNnBVDVb2l6AruhRUCsSaGUlzyp9aL6vjDUSo4RPFw=
Subject key identifier: 46:3A:38:23:8E:42:AF:D8:D2:2D:77:32:0B:36:42:B9:90:F3:AE:4E
Authority key identifier: 00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
Certificate issuer: /CN=005f0d44b221f4b11c89db68969f97c3c7154906
Certificate serial: 019E1C7DEB7F1EF2CFACE54D15D9D5113363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 14:01:14 +0000
Manifest this update: Tue 12 May 2026 14:01:14 +0000
Manifest next update: Wed 13 May 2026 14:01:14 +0000
Files and hashes: 1: AF8NRLIh9LEcidtolp-Xw8cVSQY.crl (hash: Sk/3rh6CNYbQzL0s2742PYVVSJp0Q8WWbNFJ2+KNKWQ=)
2: kJQsI98iVa9ZD7yxoQppC6FP-XY.roa (hash: DqgDfqLMHMB6Ed3JqGpWQxjC4rt/X0IDDmE+DZGx1YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:eb:7f:1e:f2:cf:ac:e5:4d:15:d9:d5:11:33:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005f0d44b221f4b11c89db68969f97c3c7154906
Validity
Not Before: May 12 14:01:14 2026 GMT
Not After : May 13 14:01:14 2026 GMT
Subject: CN=463a38238e42afd8d22d77320b3642b990f3ae4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:07:ce:bb:dc:a3:c8:1c:97:f4:f4:91:6b:01:
9d:b9:a2:bb:00:52:02:2e:dd:48:e1:8d:c8:5d:d2:
8b:05:bd:28:a1:78:7d:55:ec:2a:9d:4f:72:1e:a3:
16:6f:18:4e:c7:11:bd:6d:ba:cd:c3:1d:c7:7b:68:
29:34:f4:62:d7:fd:ce:af:35:a4:a0:f4:97:d7:33:
cb:6a:12:52:b0:4c:3b:27:dc:29:ce:79:6b:de:45:
ee:da:42:e7:17:67:04:ff:5c:56:51:74:3d:ae:21:
92:29:ee:3a:10:65:53:d8:00:14:bf:8c:df:aa:36:
7f:01:4f:ab:3e:97:8a:56:52:e3:1f:34:15:71:fd:
02:8b:85:c2:34:67:02:d8:67:f9:3f:09:18:ec:51:
a2:64:6a:5f:fe:f4:b7:0e:25:1c:5d:73:94:8b:f1:
d3:df:19:26:39:52:94:c3:06:ec:2c:0c:5b:2a:11:
a0:ec:65:9d:d2:c2:80:65:49:70:b4:46:5e:a3:37:
9b:1e:0c:89:12:9a:59:57:dc:f3:00:29:72:d8:62:
96:6e:89:71:ae:bd:e9:57:ba:a4:7f:4e:08:b9:ba:
fd:4a:98:13:00:93:c6:29:63:32:1a:c0:f1:ed:93:
59:9e:d8:59:42:50:c5:45:4a:53:48:5c:38:bb:ff:
49:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3A:38:23:8E:42:AF:D8:D2:2D:77:32:0B:36:42:B9:90:F3:AE:4E
X509v3 Authority Key Identifier:
keyid:00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:56:17:f5:6c:b6:b8:98:2a:92:5d:a2:a8:47:7f:07:71:a2:
0b:9b:1d:1f:04:43:1c:85:c8:b2:32:30:78:4d:ce:04:3f:62:
7a:8e:2b:d9:45:85:91:9a:be:16:74:e8:2a:b2:e6:4a:7f:99:
a9:f2:6b:e8:b2:73:99:21:fc:ae:04:7c:5d:6d:f9:73:11:59:
e6:d5:f7:b7:64:e2:71:46:ff:3a:db:98:89:55:2c:47:b8:1a:
c4:22:88:6d:93:1f:a9:35:83:16:a9:b3:ae:58:e8:86:21:ce:
23:55:84:19:4e:00:6c:52:6c:c7:19:74:2b:d6:5c:52:4f:43:
74:8d:43:4d:a5:ec:a8:5a:d3:0a:95:0f:74:8e:c2:db:9b:e8:
e7:10:b1:de:5e:ab:ea:76:fc:98:38:72:0e:e3:e9:e5:49:a9:
df:a0:5e:2d:8d:a8:3d:9c:cd:51:76:76:14:d8:e7:2a:11:27:
b0:5a:fb:82:80:ab:a3:4b:cc:3c:7c:24:c9:95:70:2d:ab:50:
8d:c9:c0:cd:77:7a:68:4e:95:ae:1a:32:e6:61:0f:bd:fb:7d:
df:4c:d4:66:da:2d:88:ab:34:a8:2c:a2:95:ea:18:ca:b1:2e:
ef:91:ad:55:8c:9e:1a:dc:6f:99:20:8a:72:57:4c:d5:95:bf:
c5:c0:a2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:26:20 2026 by rpki-client