Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: 1Ixpmhxwic5orIUIFZzEDbZySDEnoS6o3CBy3W5wADA=
Subject key identifier: AD:E7:06:B8:93:14:F9:34:0D:1D:9B:9B:96:81:48:31:A0:81:57:CD
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 01A0CE249208EC7E4867515DFAD90C7BF6CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 1425
Signing time: Wed 23 Sep 2026 12:01:38 +0000
Manifest this update: Wed 23 Sep 2026 12:01:38 +0000
Manifest next update: Thu 24 Sep 2026 12:01:38 +0000
Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: 8hTwlIPspNzhPcOrYwTPlP571GrnM6Sd7TdA74rDrTY=)
3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:92:08:ec:7e:48:67:51:5d:fa:d9:0c:7b:f6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Sep 23 12:01:38 2026 GMT
Not After : Sep 24 12:01:38 2026 GMT
Subject: CN=ade706b89314f9340d1d9b9b96814831a08157cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:15:b2:59:9f:f0:f8:4f:20:6c:c6:4e:09:
90:8d:ca:da:c1:23:ab:76:97:86:f2:e0:b2:d3:c6:
78:7c:b2:7c:7c:29:c6:46:6a:24:81:54:c1:38:45:
68:fd:67:86:03:f5:1f:b0:43:fb:0f:e9:0c:fe:cf:
e2:12:b6:de:ff:24:96:ea:ed:b0:9f:c7:af:94:3d:
2f:08:d5:48:68:c0:a3:17:b3:35:28:3d:8e:91:a9:
cc:71:4c:94:16:16:1e:74:90:1d:02:bc:17:5d:0e:
78:02:e8:fd:c8:88:27:0b:93:1d:f1:60:bf:a3:b4:
42:72:f6:d6:78:c9:4f:1b:1c:8a:af:3c:83:7b:f4:
c3:ca:52:2e:ba:15:47:e2:e1:78:b1:86:7f:d3:fe:
03:01:5b:b5:b0:a2:19:74:e2:10:b5:cc:5f:27:89:
e4:59:26:b1:bd:a6:c9:0a:5d:e1:60:7c:81:17:32:
bd:cc:53:ae:45:53:5a:64:a7:75:b5:cc:fe:48:df:
c3:6e:ef:b3:d3:06:c2:40:bc:99:3f:18:37:e0:c0:
d7:ea:65:0e:7c:b0:da:e6:79:4b:c6:82:fd:d8:c7:
bc:b7:4d:60:ad:0a:b6:3b:5a:79:c3:18:fd:e1:bc:
10:6b:6c:66:6a:c0:46:53:99:b0:c0:58:1b:35:6c:
1d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E7:06:B8:93:14:F9:34:0D:1D:9B:9B:96:81:48:31:A0:81:57:CD
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ea:20:0c:58:ee:07:40:7b:19:15:64:b6:45:f0:00:73:fa:
f1:77:e8:42:ae:70:b8:64:d3:87:78:5b:78:75:7a:3a:5c:22:
7b:e5:cc:56:d3:d2:47:21:35:a7:b6:8a:d0:0e:62:98:1f:13:
80:09:f1:62:30:72:ef:34:2c:0e:87:cc:d8:71:b5:5d:59:69:
4f:8e:50:61:f4:fb:7a:a6:8f:54:60:db:96:a4:a2:59:bd:38:
54:9a:0c:94:07:bb:d0:d7:fc:3c:86:32:5a:18:5a:8d:de:18:
6d:dc:d5:24:b2:1a:90:be:74:6f:dc:26:6d:c4:62:a8:99:f3:
3a:8d:9b:3f:db:48:43:14:d3:c5:8d:3b:10:2a:4b:b7:12:74:
e5:84:9e:80:d5:2c:f0:2e:6c:f0:6b:8f:5d:c2:2a:42:de:ff:
62:0a:87:8d:85:3b:9a:c5:7e:c2:00:78:a0:0f:2c:bd:af:2b:
b6:5e:07:15:13:83:45:33:b3:ea:58:ca:2d:68:5e:d0:e0:0e:
6d:5b:72:65:42:43:26:39:38:ba:6a:a5:01:09:80:db:d7:b7:
53:5e:2b:01:b8:ca:e8:fb:f0:30:c4:4e:3c:ae:52:e4:c1:2b:
de:2a:2f:5e:38:c5:25:a8:b0:84:14:45:14:0b:df:51:8b:42:
61:99:d7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:28:39 2026 by rpki-client