Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
File: AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft (raw, json)
Hash identifier: BsZkiD1yE7/u61rhvy5YRlhugDvcmSLkKjGopCs+X20=
Subject key identifier: 12:35:8E:26:80:AB:2A:C2:ED:38:AD:E3:9C:E5:30:FB:C9:49:4A:93
Authority key identifier: 01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
Certificate issuer: /CN=01f10a032279133d6d64c82531435e5787d11d6b
Certificate serial: 01A0D200B6A01E664B6D8C289E726C37135A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
Manifest number: E6
Signing time: Thu 24 Sep 2026 06:00:57 +0000
Manifest this update: Thu 24 Sep 2026 06:00:57 +0000
Manifest next update: Fri 25 Sep 2026 06:00:57 +0000
Files and hashes: 1: AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl (hash: efxV31qHsMBhlWQhWCCJbLOyKmvq9+Dc/mollH0OTwQ=)
2: ZPzCvvAXDEp6OpHBb8rDqpV1VBA.roa (hash: wVo6gN+qFZsAuQseg3rAQsoqV8pB36JzHJHizR0u3Ok=)
3: n_bUUF63fJyO6RE2_6rFYsd7xOk.roa (hash: zlA1EVISGpvLZV/DjqWIFdyGMaWRDEbajyuByb/cvqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:b6:a0:1e:66:4b:6d:8c:28:9e:72:6c:37:13:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f10a032279133d6d64c82531435e5787d11d6b
Validity
Not Before: Sep 24 06:00:57 2026 GMT
Not After : Sep 25 06:00:57 2026 GMT
Subject: CN=12358e2680ab2ac2ed38ade39ce530fbc9494a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:11:bf:44:e6:a1:bd:14:c8:68:3f:c0:48:11:
3a:57:a1:87:c5:1d:b7:d0:c4:65:4b:80:eb:3f:15:
17:5d:f6:65:59:54:47:4b:56:86:5e:79:94:79:1f:
c6:39:72:b4:e3:67:0b:09:88:3e:3c:c4:a0:0f:4a:
70:55:a5:26:c9:4d:f3:2d:1f:a7:17:9b:3e:34:56:
e1:84:85:50:9e:73:67:c0:29:3e:1a:b6:93:a7:38:
6e:37:40:ec:a2:9a:7f:f2:e2:9b:41:20:f4:89:b1:
b5:76:80:78:2a:cf:50:2d:1e:87:02:9d:72:9d:a2:
dc:f9:06:a4:6c:17:62:e0:41:51:85:88:af:b3:28:
3f:77:c8:21:d4:36:12:87:5f:2a:1a:48:d3:8a:42:
94:a4:b0:59:b3:7f:8e:f5:20:4d:fa:15:47:5e:96:
38:e7:12:8c:8d:8f:0f:ed:39:99:04:07:1a:17:fd:
9d:20:bc:5a:7f:77:fc:53:84:d6:ef:87:0e:06:c1:
15:c6:0c:bf:d8:88:b9:ce:69:bf:2d:21:77:90:7d:
08:c8:01:a8:73:80:d2:c7:b2:42:d3:10:9e:b5:3b:
67:c6:b6:96:bb:3f:64:74:a7:f2:a1:1b:91:22:79:
5f:0d:4a:8b:53:a8:ab:1f:2c:6c:3f:49:54:7b:2e:
8a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:35:8E:26:80:AB:2A:C2:ED:38:AD:E3:9C:E5:30:FB:C9:49:4A:93
X509v3 Authority Key Identifier:
keyid:01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fb:be:57:99:dd:78:82:8d:1a:ef:c6:4b:26:d0:74:cc:74:
a7:69:c2:7f:12:af:bc:4c:9c:16:28:be:a5:1f:e2:73:7f:e9:
a3:0d:9b:3f:b7:c3:58:a2:c4:e1:9c:ad:a9:d6:2a:1b:5c:62:
58:0f:24:18:aa:b2:a6:39:56:37:80:da:24:af:9a:e4:ab:85:
d6:f9:b6:62:09:ca:a5:f5:be:36:cd:a0:79:2c:dc:f5:42:b7:
01:14:45:05:79:73:36:54:4c:5e:b5:a2:5d:a8:3e:5e:cd:c3:
2c:a2:23:17:ca:2d:86:c5:81:de:f8:81:75:0e:e6:88:16:d0:
37:97:74:84:6f:77:97:73:28:d8:03:60:6c:83:53:df:5f:08:
06:19:fc:0b:2f:3e:0b:2a:cb:69:1e:38:f2:76:da:e6:44:1d:
a0:0a:34:4f:c7:72:0e:ef:bc:1a:0d:e9:bd:70:aa:06:60:8a:
d3:27:9f:ce:d5:67:eb:6e:e9:bc:fb:52:b2:4a:ba:94:d0:bf:
37:94:35:38:1a:41:71:cd:6e:95:d6:3a:ef:d4:fd:5a:b7:55:
c1:ca:06:98:a2:e6:56:bb:19:79:2c:b5:3f:cd:1e:c1:bf:81:
6f:c1:f5:5b:a4:f3:83:37:25:3b:27:9e:a8:15:66:fc:de:cc:
1e:d6:af:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:24:35 2026 by rpki-client