Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
File: AF8NRLIh9LEcidtolp-Xw8cVSQY.mft (raw, json)
Hash identifier: LBcpV1ytBvMd+B3bAFXK2VcxPhQSzuaFWcbJd1Ukyg8=
Subject key identifier: DF:5B:88:3A:6D:59:E9:70:F8:97:24:4A:BC:BC:0B:61:55:1A:B1:6D
Authority key identifier: 00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
Certificate issuer: /CN=005f0d44b221f4b11c89db68969f97c3c7154906
Certificate serial: 01A0D1C96063D059DEDAE451F2A8FB8CB898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 05:00:30 +0000
Manifest this update: Thu 24 Sep 2026 05:00:30 +0000
Manifest next update: Fri 25 Sep 2026 05:00:30 +0000
Files and hashes: 1: AF8NRLIh9LEcidtolp-Xw8cVSQY.crl (hash: +jXOKyLmrELk4JodKQsNoX/rtuXphAxHJFl/ChHHPnM=)
2: kJQsI98iVa9ZD7yxoQppC6FP-XY.roa (hash: DqgDfqLMHMB6Ed3JqGpWQxjC4rt/X0IDDmE+DZGx1YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:60:63:d0:59:de:da:e4:51:f2:a8:fb:8c:b8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005f0d44b221f4b11c89db68969f97c3c7154906
Validity
Not Before: Sep 24 05:00:30 2026 GMT
Not After : Sep 25 05:00:30 2026 GMT
Subject: CN=df5b883a6d59e970f897244abcbc0b61551ab16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f4:a7:02:d9:4b:a0:ef:6f:eb:71:5e:7f:55:
ea:f0:96:d0:82:02:1b:78:48:b8:e0:13:6c:4c:4c:
b1:43:48:4c:5f:08:16:c5:f3:a1:4f:f1:33:aa:c8:
26:16:7e:85:e2:f7:ac:c6:f9:92:9d:9d:4b:64:12:
ef:d5:a1:7a:b6:13:98:05:4a:66:88:48:6e:d5:3f:
40:68:c1:1e:d7:6e:28:6d:bb:5e:e4:3d:d3:3c:98:
c4:e0:91:9e:dd:5d:53:3e:c0:e7:09:64:4f:73:0a:
cf:de:9e:06:f1:02:6e:05:69:e6:2c:ca:30:d3:7d:
a0:42:df:13:24:57:a1:25:52:37:4e:ab:bb:30:2b:
3b:26:ed:f5:f2:84:93:03:0e:b0:ad:0f:fb:4b:24:
3a:52:c3:e8:91:94:90:fa:46:34:ac:20:c3:ea:51:
41:4d:0f:24:9e:fb:d5:1e:8d:96:5f:f1:f5:29:8e:
f2:51:52:4e:ea:ad:bd:11:08:62:9a:00:f5:95:1c:
5a:4f:9f:c4:42:c8:41:2f:22:c7:47:72:1b:a0:7f:
0c:c3:97:3f:e1:6b:c1:b7:73:97:d4:51:a4:b1:32:
89:81:fd:a5:04:d5:f2:9b:1a:d4:03:b1:14:ce:a8:
09:9e:b8:8f:6a:ce:f7:2e:9c:ca:13:d4:93:56:c7:
7b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5B:88:3A:6D:59:E9:70:F8:97:24:4A:BC:BC:0B:61:55:1A:B1:6D
X509v3 Authority Key Identifier:
keyid:00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9a:96:34:2c:4a:84:b2:58:05:2d:17:bd:da:bc:19:d3:c1:
3f:57:26:bb:22:82:78:e4:43:8a:55:85:cd:dc:e4:3c:a5:7c:
b2:28:eb:d1:85:84:d1:f6:b7:b4:ac:42:6c:9e:f4:4a:22:92:
d1:68:dc:12:60:ad:fe:22:68:2a:a3:6c:f6:59:64:dd:06:08:
98:cb:96:a6:b2:2a:18:a9:26:96:5a:15:38:cd:b5:97:85:ed:
00:d9:f1:3f:84:ae:72:1b:ff:3c:dd:5b:5b:4c:d6:0a:13:2d:
83:a2:f6:f2:d0:4b:31:58:ff:3a:31:c0:85:e3:a7:a8:42:5f:
01:17:26:2a:d4:43:47:1a:aa:eb:90:db:18:34:25:18:41:c9:
fd:d7:0f:f2:ed:10:10:5f:26:51:1b:3e:3f:7a:16:6d:31:43:
60:f4:f1:e8:eb:55:ec:2e:1c:3c:3b:6a:4d:17:c1:19:91:18:
02:35:4d:5c:0b:8e:19:22:65:e3:9a:2e:69:0e:83:7c:c0:55:
77:90:4f:2c:ae:47:8d:9b:fb:db:10:03:d4:a5:1f:57:89:d7:
8b:0e:0d:41:d4:98:ad:3a:7d:b9:52:39:20:64:80:d3:2e:f2:
48:be:c8:fc:74:cc:04:ba:4b:01:b1:59:17:11:a9:2b:4a:a5:
49:0b:84:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRyWBj0Fne2uRR8qj7jLiYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNWYwZDQ0YjIyMWY0YjExYzg5ZGI2ODk2OWY5N2MzYzcx
NTQ5MDYwHhcNMjYwOTI0MDUwMDMwWhcNMjYwOTI1MDUwMDMwWjAzMTEwLwYDVQQD
EyhkZjViODgzYTZkNTllOTcwZjg5NzI0NGFiY2JjMGI2MTU1MWFiMTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fSnAtlLoO9v63Fef1Xq8JbQggIb
eEi44BNsTEyxQ0hMXwgWxfOhT/EzqsgmFn6F4vesxvmSnZ1LZBLv1aF6thOYBUpm
iEhu1T9AaMEe124obbte5D3TPJjE4JGe3V1TPsDnCWRPcwrP3p4G8QJuBWnmLMow
032gQt8TJFehJVI3Tqu7MCs7Ju318oSTAw6wrQ/7SyQ6UsPokZSQ+kY0rCDD6lFB
TQ8knvvVHo2WX/H1KY7yUVJO6q29EQhimgD1lRxaT5/EQshBLyLHR3IboH8Mw5c/
4WvBt3OX1FGksTKJgf2lBNXymxrUA7EUzqgJnriPas73LpzKE9STVsd70wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9biDptWelw+JckSry8C2FVGrFtMB8GA1UdIwQY
MBaAFABfDUSyIfSxHInbaJafl8PHFUkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUY4TlJMSWg5TEVjaWR0b2xwLVh3OGNWU1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82ODIzOWYtMDlhMy00MTA4LTg5YmEt
ZWVlNTBkZDkxOTNjLzEvQUY4TlJMSWg5TEVjaWR0b2xwLVh3OGNWU1FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82ODIzOWYtMDlhMy00MTA4LTg5YmEtZWVlNTBkZDkxOTNj
LzEvQUY4TlJMSWg5TEVjaWR0b2xwLVh3OGNWU1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpqWNCxK
hLJYBS0Xvdq8GdPBP1cmuyKCeORDilWFzdzkPKV8sijr0YWE0fa3tKxCbJ70SiKS
0WjcEmCt/iJoKqNs9llk3QYImMuWprIqGKkmlloVOM21l4XtANnxP4Suchv/PN1b
W0zWChMtg6L28tBLMVj/OjHAheOnqEJfARcmKtRDRxqq65DbGDQlGEHJ/dcP8u0Q
EF8mURs+P3oWbTFDYPTx6OtV7C4cPDtqTRfBGZEYAjVNXAuOGSJl45ouaQ6DfMBV
d5BPLK5HjZv72xAD1KUfV4nXiw4NQdSYrTp9uVI5IGSA0y7ySL7I/HTMBLpLAbFZ
FxGpK0qlSQuEnw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:28:08 2026 by rpki-client