Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: J+XJDUN06LXcFDHCLYkFKDDjjE0i/Zj9NVWO/6zct/o=
Subject key identifier: 13:9D:A5:98:D4:0E:CA:02:4C:AB:BD:A1:ED:28:F1:71:76:7B:24:89
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 019F8F7F0D7DA9BE52ADBE9A28C7D4962151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 1380
Signing time: Thu 23 Jul 2026 15:01:36 +0000
Manifest this update: Thu 23 Jul 2026 15:01:36 +0000
Manifest next update: Fri 24 Jul 2026 15:01:36 +0000
Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: uDBg3sTegsk77AvolsCDjhrBm6kNRpzigdkMSZg007Q=)
3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:0d:7d:a9:be:52:ad:be:9a:28:c7:d4:96:21:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Jul 23 15:01:36 2026 GMT
Not After : Jul 24 15:01:36 2026 GMT
Subject: CN=139da598d40eca024cabbda1ed28f171767b2489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:99:a4:d8:ac:f3:53:95:d1:43:3b:1f:39:9d:
0c:0e:d2:c9:37:85:00:8d:85:5f:2e:79:8f:d6:ba:
54:a5:db:95:0e:56:23:cf:72:a9:20:6b:dc:c7:f1:
22:f6:7e:6d:d7:e3:37:f2:66:7e:bd:ad:d6:05:2a:
4c:a2:01:be:e1:fc:cc:ae:5c:99:80:bb:83:f4:68:
de:fc:41:0c:ae:3f:73:d3:36:95:a0:02:93:8f:f8:
20:37:61:9b:d2:b0:52:51:eb:09:f3:a2:49:c8:55:
b8:c2:93:04:2f:39:fb:51:5d:2d:84:6d:ac:29:b5:
3d:3d:33:66:0e:ce:7e:43:2c:a6:08:42:73:a8:56:
1e:6d:c7:5c:82:f2:54:d7:89:26:08:32:b3:40:90:
6f:7c:07:b0:56:7f:a3:90:ab:b2:87:25:ac:3b:41:
f5:b8:a0:08:45:a5:66:16:54:e8:8e:ac:2a:f5:2d:
9c:f6:53:b6:d7:6e:70:d2:c7:53:82:6c:40:34:4a:
af:7b:08:2a:c0:2d:b5:10:f0:8f:e5:64:03:10:7d:
a6:81:a4:14:22:67:08:e9:03:8f:ea:6c:a4:b8:83:
17:22:63:ee:30:45:cc:14:d0:32:ec:5b:1c:fa:18:
78:0b:ad:72:48:10:8d:2e:7c:f5:73:86:04:52:83:
6f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:9D:A5:98:D4:0E:CA:02:4C:AB:BD:A1:ED:28:F1:71:76:7B:24:89
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f2:18:a4:c1:af:29:f7:65:38:ca:bf:f2:86:f5:e1:01:6b:
ad:76:ea:5f:1d:f4:b6:d4:d2:ed:56:dc:7a:10:21:10:ca:8c:
3d:ad:78:30:60:27:63:2f:85:01:27:05:bd:43:bc:6e:c9:04:
ee:8b:6f:34:44:f9:20:ae:c4:0b:55:d4:14:01:02:50:e4:70:
aa:10:62:32:f7:c3:08:4f:93:24:92:42:7e:1e:fa:74:c9:0b:
1b:8b:93:4b:ac:57:a3:91:0f:a6:ab:cf:e5:62:53:b3:17:bf:
f2:50:38:1a:a7:28:07:97:fc:0d:e8:2b:05:8a:63:a8:60:5f:
84:de:fe:13:fc:56:7a:3a:17:46:35:5b:4b:de:ae:8e:22:c2:
15:4e:df:32:2e:4f:fa:40:60:60:66:cb:a7:72:42:47:b5:8f:
08:30:6e:41:14:fa:59:3e:9e:59:e4:4c:95:09:90:31:fd:e8:
b3:ea:fb:d1:45:3a:0a:10:25:f2:a8:cd:5d:4a:2e:1a:54:77:
4a:bf:f5:47:a9:7f:44:9e:37:bc:49:aa:be:27:85:74:97:83:
75:78:84:c1:e7:ae:c6:ac:b0:89:f1:f7:5c:de:99:36:41:87:
95:91:5b:2d:0d:73:0b:59:4c:35:31:31:8a:38:30:4d:f2:e7:
9f:3c:7e:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pfw19qb5Srb6aKMfUliFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMDdjNmI1NmVmMWYyMzliMDI4ZWY0MjM3NWEyYTE3NjVi
YzA4YjgwHhcNMjYwNzIzMTUwMTM2WhcNMjYwNzI0MTUwMTM2WjAzMTEwLwYDVQQD
EygxMzlkYTU5OGQ0MGVjYTAyNGNhYmJkYTFlZDI4ZjE3MTc2N2IyNDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9pmk2KzzU5XRQzsfOZ0MDtLJN4UA
jYVfLnmP1rpUpduVDlYjz3KpIGvcx/Ei9n5t1+M38mZ+va3WBSpMogG+4fzMrlyZ
gLuD9Gje/EEMrj9z0zaVoAKTj/ggN2Gb0rBSUesJ86JJyFW4wpMELzn7UV0thG2s
KbU9PTNmDs5+QyymCEJzqFYebcdcgvJU14kmCDKzQJBvfAewVn+jkKuyhyWsO0H1
uKAIRaVmFlTojqwq9S2c9lO2125w0sdTgmxANEqvewgqwC21EPCP5WQDEH2mgaQU
ImcI6QOP6mykuIMXImPuMEXMFNAy7Fsc+hh4C61ySBCNLnz1c4YEUoNvvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOdpZjUDsoCTKu9oe0o8XF2eySJMB8GA1UdIwQY
MBaAFPwHxrVu8fI5sCjvQjdaKhdlvAi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQt
Yzg3MDBhMTQ3NjFiLzEvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQtYzg3MDBhMTQ3NjFi
LzEvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfIYpMGv
KfdlOMq/8ob14QFrrXbqXx30ttTS7VbcehAhEMqMPa14MGAnYy+FAScFvUO8bskE
7otvNET5IK7EC1XUFAECUORwqhBiMvfDCE+TJJJCfh76dMkLG4uTS6xXo5EPpqvP
5WJTsxe/8lA4GqcoB5f8DegrBYpjqGBfhN7+E/xWejoXRjVbS96ujiLCFU7fMi5P
+kBgYGbLp3JCR7WPCDBuQRT6WT6eWeRMlQmQMf3os+r70UU6ChAl8qjNXUouGlR3
Sr/1R6l/RJ43vEmqvieFdJeDdXiEweeuxqywifH3XN6ZNkGHlZFbLQ1zC1lMNTEx
ijgwTfLnnzx+Jw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:23 2026 by rpki-client