Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
File: AF8NRLIh9LEcidtolp-Xw8cVSQY.mft (raw, json)
Hash identifier: 2pdFdHoyFNho2q/uJ7yhkU1MGDUg7K/GNamIO6SfhkQ=
Subject key identifier: E2:AD:37:ED:3E:C0:0A:CA:DF:4F:E3:92:E2:8B:40:13:40:56:8E:74
Authority key identifier: 00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
Certificate issuer: /CN=005f0d44b221f4b11c89db68969f97c3c7154906
Certificate serial: 019D2929693C0257C1EFA2F3C4078DDC0D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 08:01:12 +0000
Manifest this update: Thu 26 Mar 2026 08:01:12 +0000
Manifest next update: Fri 27 Mar 2026 08:01:12 +0000
Files and hashes: 1: AF8NRLIh9LEcidtolp-Xw8cVSQY.crl (hash: bFAMJUNh9kSVjkvgdem3CAaiHIWzL0VIiruU8lIlR+o=)
2: kJQsI98iVa9ZD7yxoQppC6FP-XY.roa (hash: DqgDfqLMHMB6Ed3JqGpWQxjC4rt/X0IDDmE+DZGx1YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:69:3c:02:57:c1:ef:a2:f3:c4:07:8d:dc:0d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005f0d44b221f4b11c89db68969f97c3c7154906
Validity
Not Before: Mar 26 08:01:12 2026 GMT
Not After : Mar 27 08:01:12 2026 GMT
Subject: CN=e2ad37ed3ec00acadf4fe392e28b401340568e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:64:57:fd:ae:b4:0e:72:fb:06:d6:b2:bc:
89:fb:66:e5:32:24:c8:d2:10:ea:c6:a5:29:c0:e0:
01:8f:42:a9:7e:fe:24:db:27:06:58:2b:11:9e:45:
21:a7:75:a7:5d:00:82:46:b6:cb:0e:54:e3:0a:1b:
a3:e8:34:8c:88:11:40:f1:ae:0b:92:81:1e:ef:cd:
1b:f4:2b:35:db:e6:07:b6:7d:92:ec:b1:4d:eb:1a:
a4:a2:29:6c:cc:f6:4d:60:d0:0a:66:80:f6:9a:80:
ef:00:0b:19:37:d5:59:52:a6:c6:37:e5:01:e0:ed:
e4:ca:84:61:7d:3b:83:62:80:c1:e7:ce:81:a0:b8:
ea:a8:23:f4:7f:3a:a9:aa:31:d8:b3:9f:93:23:5f:
0e:86:c6:4d:b5:73:64:a1:ca:07:f7:4e:7c:23:00:
cb:0a:91:7f:cc:fc:21:e2:f8:ea:bc:ce:2e:9b:3c:
ef:57:8c:12:11:37:16:70:66:ed:2d:26:9e:1b:75:
e7:b6:b5:80:29:34:c3:d6:e7:a8:34:9d:3b:a1:76:
f3:2c:7d:57:99:43:42:80:67:d3:4f:f7:bb:71:19:
fd:d4:2c:ae:d0:86:5f:ea:ca:ce:5f:3b:63:16:dc:
1d:32:8e:05:c7:3a:0c:b1:7a:40:d5:20:69:5e:4b:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AD:37:ED:3E:C0:0A:CA:DF:4F:E3:92:E2:8B:40:13:40:56:8E:74
X509v3 Authority Key Identifier:
keyid:00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3c:35:5c:f2:cd:58:7b:e3:bb:22:4b:59:b1:dc:cc:f1:8a:
ab:a6:6e:80:eb:e9:10:a7:93:90:9f:ec:d8:27:97:e1:57:3e:
67:11:b4:55:9e:7b:d2:27:f0:37:38:8d:3c:ca:f0:c0:cd:d8:
d1:36:5f:38:d2:22:28:e2:d7:c0:8f:ad:9c:40:8a:4b:07:38:
60:db:59:29:0a:01:17:40:64:b9:6e:37:4a:c3:28:9d:8b:55:
77:83:2c:43:cb:07:61:da:39:42:25:11:33:94:23:bf:0c:3a:
29:a3:61:87:b1:ef:af:ae:a1:b0:68:63:c6:57:b1:09:47:29:
05:fa:3a:f5:7d:f1:71:49:ea:29:04:5e:c0:1a:c3:6b:83:91:
50:1e:fc:41:53:9f:f2:31:ac:e1:34:8b:72:8a:8d:fe:39:56:
0f:5d:04:d4:0d:24:53:37:7c:32:8c:db:fd:55:40:69:bc:74:
6e:23:17:f2:78:4d:96:07:7b:68:e4:5a:f6:9c:42:34:fc:f6:
e6:b9:0c:e0:a1:b6:b6:90:39:f9:4b:23:d6:59:2a:7b:b3:ad:
42:72:13:75:f5:54:70:14:a0:01:1c:6d:e7:d7:95:ed:46:e1:
3f:be:6c:58:c7:03:e8:95:54:95:d1:4c:36:a6:a3:09:5c:7c:
c9:47:04:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:54 2026 by rpki-client