Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: XODojLPFGwt+TCcr9f+efJkukF0pQhhoydVmv2/BrO8=
Subject key identifier: D0:03:F6:DC:75:5B:64:B7:0A:74:A8:70:56:4F:C0:19:5D:4F:4B:BB
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 019D27720C732DD365BCACA6EF6A6C7461D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 1241
Signing time: Thu 26 Mar 2026 00:01:18 +0000
Manifest this update: Thu 26 Mar 2026 00:01:18 +0000
Manifest next update: Fri 27 Mar 2026 00:01:18 +0000
Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: BVERao2WbVjUgq3GJJeA8TbjJgdeMFzZSBWPlq2aNpM=)
3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:0c:73:2d:d3:65:bc:ac:a6:ef:6a:6c:74:61:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Mar 26 00:01:18 2026 GMT
Not After : Mar 27 00:01:18 2026 GMT
Subject: CN=d003f6dc755b64b70a74a870564fc0195d4f4bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:0d:07:e4:47:15:26:87:44:73:8f:6a:7e:
aa:8f:70:41:ed:a5:b5:be:8a:2d:73:d3:a5:ce:c6:
57:a0:47:a4:ff:62:76:d7:08:77:7c:0a:a3:09:76:
9b:ed:42:cd:cf:2f:1f:1b:36:74:86:63:8e:4a:a8:
87:90:29:13:29:3b:ea:30:ec:25:21:11:13:d2:28:
73:b6:99:11:9b:41:d5:de:86:a5:43:b0:d7:03:04:
b3:4f:5b:77:65:ed:d5:3a:5c:b3:07:8e:67:72:8e:
41:70:47:e3:cd:64:07:b9:25:7a:e4:19:51:2b:8e:
20:0d:09:7d:80:51:08:02:84:70:5d:de:30:9b:de:
49:58:55:24:ca:f9:7f:20:79:6f:fe:e8:a5:bf:51:
12:e4:a0:1e:e4:c2:55:03:ad:d9:c9:ba:43:e9:4e:
23:2f:d5:ae:c4:78:e7:fa:91:03:44:86:5f:47:82:
79:b7:43:29:d1:8e:54:58:4a:4d:2e:2c:86:8c:5a:
92:08:ad:92:da:f7:39:fe:0a:77:76:ba:85:61:71:
92:7a:78:2e:98:be:55:56:ab:8b:cf:46:47:38:a5:
75:79:be:c6:16:5c:06:78:43:3c:a0:d1:44:62:72:
9f:d4:0f:ee:a0:86:4f:34:cc:84:55:9b:a4:b4:b9:
ab:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:03:F6:DC:75:5B:64:B7:0A:74:A8:70:56:4F:C0:19:5D:4F:4B:BB
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ae:3a:10:6c:95:36:a2:5f:77:02:fb:d6:00:ab:31:dc:26:
bc:fc:fe:7e:f8:57:89:f2:96:7f:e3:98:11:33:cf:e2:e0:4d:
72:5d:ff:2b:e8:ae:e9:80:1d:47:a4:10:fc:a3:16:8d:df:30:
5f:d2:6b:ec:6f:b2:a1:bf:c8:40:88:55:79:92:b6:79:97:69:
e9:4e:ef:31:5f:6e:b3:ac:f6:1a:dd:f4:e3:09:ec:16:0c:63:
8e:e8:10:37:ff:3e:58:03:9f:2f:9c:13:03:86:cc:01:1e:60:
26:2d:ea:cd:09:96:22:e8:4b:b6:3f:21:6e:a6:f8:a8:b3:43:
98:5c:d9:2b:ee:9e:0f:50:7e:58:e4:67:1b:18:ee:13:9d:31:
ed:f5:ce:51:b8:33:5a:25:ba:c5:e6:e0:f9:7f:39:fb:e9:d8:
a4:ba:10:77:70:b9:9f:ac:15:48:f9:ed:63:bc:2b:5b:1f:8b:
16:e0:38:f7:30:e0:a4:df:72:a7:06:c5:7b:aa:ab:43:79:2e:
aa:19:16:dd:22:d7:98:0c:c7:60:00:20:d4:c8:ed:05:97:53:
54:b2:83:0b:15:66:47:98:89:83:57:dd:97:1b:85:50:e4:2b:
dc:b0:9a:b0:42:09:8e:20:f6:87:65:4a:d8:fa:58:76:3e:ff:
95:d9:9e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:19:33 2026 by rpki-client