Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: TcUFJm45SkxcnaPQeoemqdbXAJR5QKAz3eglHzrUKOU=
Subject key identifier: DE:A6:0B:77:27:49:D8:7A:58:27:80:9C:40:D4:DC:02:4A:84:37:2D
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 01A1DA93B6270032F453B9FB3DE4CED7AD0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 14B0
Signing time: Sat 14 Nov 2026 15:01:15 +0000
Manifest this update: Sat 14 Nov 2026 15:01:15 +0000
Manifest next update: Sun 15 Nov 2026 15:01:15 +0000
Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: bdEta2nYheVDXcbGvJJ1htwb4hrDuX3x6CahvZCXo/0=)
3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:93:b6:27:00:32:f4:53:b9:fb:3d:e4:ce:d7:ad:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Nov 14 15:01:15 2026 GMT
Not After : Nov 15 15:01:15 2026 GMT
Subject: CN=dea60b772749d87a5827809c40d4dc024a84372d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e9:b3:6f:a4:f3:c1:98:8a:7b:1e:34:d5:0e:
98:bf:37:13:5f:16:69:ac:3f:f1:7d:7a:42:6e:78:
7e:de:ca:f5:45:ce:b2:51:c0:05:45:53:d1:04:c4:
99:aa:86:75:89:11:c0:93:e4:45:39:a4:39:5b:5e:
21:da:7b:f8:7e:70:5a:d3:a9:2f:00:24:1f:8a:35:
93:48:3c:71:ee:00:47:6c:d0:e5:0a:f2:8a:a2:a3:
85:cd:f6:69:15:1b:8e:03:6f:df:45:af:fc:31:94:
d6:6b:ba:0b:3b:d6:82:05:83:6b:32:1b:21:7a:ce:
ab:ec:44:32:09:1d:14:66:26:8c:4a:24:07:ed:45:
35:a5:cc:97:c0:80:0f:dc:b9:5b:14:01:46:a0:4e:
00:9d:73:79:c2:bd:c0:fb:56:71:c4:21:40:36:1f:
ea:34:4c:53:b9:94:6e:63:04:d3:1d:b8:35:c1:a4:
90:6c:ab:78:72:bb:38:45:29:c9:7b:8b:7f:34:49:
bb:9f:ed:73:3d:f0:39:ce:76:67:b8:3d:77:bf:c7:
78:4c:bd:6d:a7:87:93:77:bc:93:f7:18:90:11:fa:
4c:1b:ea:87:20:78:4f:ba:17:0e:d3:26:41:ab:e0:
bc:2f:3a:a2:e2:b4:ec:79:b7:b5:b1:d2:ae:a2:4c:
16:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A6:0B:77:27:49:D8:7A:58:27:80:9C:40:D4:DC:02:4A:84:37:2D
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:95:d0:b7:6d:5f:37:28:5a:7a:69:6b:73:6c:bd:87:f2:f3:
d2:8c:d4:ce:92:a8:8e:9b:a9:ba:96:5c:06:d1:22:2e:12:29:
17:9a:31:bc:fa:16:2b:75:e9:90:9b:02:d7:53:ad:b4:62:d2:
2c:85:b0:4e:98:40:50:7e:eb:ab:f7:ae:64:24:67:f1:b7:ae:
47:38:4a:a8:fd:65:05:f8:cd:1b:5e:c8:35:00:49:ce:04:f7:
83:69:5f:1f:56:9f:d8:d0:89:55:8e:6f:45:60:a3:39:92:33:
83:5b:16:be:5e:f6:92:7a:16:b6:45:ed:81:4b:c1:35:94:20:
11:53:6d:f5:8c:13:7c:c9:ae:41:1e:13:53:e5:33:9f:a0:96:
e9:85:e3:d7:21:37:6a:a5:e7:4b:1e:d1:5a:dc:2b:4f:57:00:
22:66:5f:d2:da:b3:28:ea:29:f3:1f:79:86:4a:e2:48:3f:91:
d5:78:31:38:89:ae:93:c4:40:d4:e8:ab:20:99:fb:78:5f:31:
50:0b:9f:b0:d9:e7:d7:99:8e:3b:e7:c3:b3:0c:c2:55:a6:03:
ed:ac:ef:cb:9b:29:87:fe:8c:90:ff:ed:34:6d:0d:f1:83:60:
ea:9c:a4:d1:f2:35:8b:41:29:26:b7:dd:ba:a9:21:11:ee:f5:
2b:84:64:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:36:48 2026 by rpki-client