Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: A0Ks9aLK/Qt7w7gSQZXfmh5y8pLtgwu7oKbaGDvMD+s=
Subject key identifier: CC:8C:84:07:51:EE:99:64:22:35:81:A6:5D:D3:83:1F:D4:B4:4F:48
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 019E1EA3A8F350692D0FE913D209BE762E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 12C1
Signing time: Wed 13 May 2026 00:01:42 +0000
Manifest this update: Wed 13 May 2026 00:01:42 +0000
Manifest next update: Thu 14 May 2026 00:01:42 +0000
Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: CpBRguPWQQ6lfoovxvPlnIJrZOaL3mip/jHQJTDcF1I=)
3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:a8:f3:50:69:2d:0f:e9:13:d2:09:be:76:2e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: May 13 00:01:42 2026 GMT
Not After : May 14 00:01:42 2026 GMT
Subject: CN=cc8c840751ee9964223581a65dd3831fd4b44f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:46:e4:2a:40:25:ae:2c:ee:48:46:51:e7:98:
42:e1:34:1c:09:81:50:2d:97:3c:ce:47:1c:dd:86:
6e:79:d5:a1:40:c3:1e:2b:05:91:f2:ae:57:ec:51:
2c:4d:a0:0a:13:bb:42:bb:8c:a4:7b:34:08:04:ee:
78:e1:8a:f6:ee:c2:f7:8c:b1:8f:2b:b3:a1:78:94:
b3:7a:d3:68:c2:5b:eb:46:43:8e:e4:36:83:9b:30:
71:98:b4:af:23:86:68:8e:bd:f5:ba:9a:06:bf:40:
fd:7c:7e:e2:f0:c8:da:9e:95:23:e7:84:f6:1d:bc:
ef:c1:91:e7:40:0c:7f:94:2f:05:01:18:60:e4:27:
91:bb:00:c9:fb:6f:7b:e4:07:14:aa:8d:c8:10:13:
e4:6d:26:81:71:ff:e6:14:90:3c:4c:de:51:89:eb:
78:16:3d:97:bf:5c:6b:ce:bd:9a:4f:ac:40:06:f1:
5d:8c:17:4c:1b:3f:da:64:85:c3:7c:f6:a4:24:82:
8e:9b:95:bc:b8:82:b5:42:22:68:b5:4e:00:a8:16:
5a:a7:8e:3f:71:fd:22:88:f4:b3:79:20:32:e0:5b:
c9:1f:29:da:cc:9b:be:4e:95:71:9a:2f:ad:83:56:
0d:4c:9e:45:5b:7f:ec:23:6d:35:4a:77:d4:c1:28:
17:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8C:84:07:51:EE:99:64:22:35:81:A6:5D:D3:83:1F:D4:B4:4F:48
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6f:8f:7f:ab:52:39:10:3b:6b:e6:49:8b:87:10:65:22:ff:
8b:f7:65:76:65:7d:17:2f:03:23:8d:ad:77:0a:d8:28:57:fd:
e7:ac:8b:5c:ad:04:51:95:98:ae:21:a6:ab:33:2c:58:ac:ab:
89:ae:c7:07:b1:5e:66:4c:da:ff:d6:f6:79:b4:eb:61:82:49:
07:42:13:59:f0:95:af:6a:3a:07:5a:26:f4:bd:6b:6e:8f:2b:
31:2e:28:92:f5:e8:a5:74:30:8a:e4:eb:31:95:98:1b:7f:d4:
09:f2:85:ca:e1:65:5a:19:72:8e:3e:3d:e1:c3:87:83:fa:a0:
43:89:dc:71:44:e3:f7:1c:fb:a9:e8:a5:e0:e9:03:3a:28:b4:
38:2b:54:cd:5a:d9:4e:45:0c:1a:65:9f:56:71:a3:d7:2b:cd:
84:5c:c8:de:8a:e2:16:92:a1:c0:d6:e6:fc:20:0d:7b:e6:e7:
0f:e6:43:cd:e5:db:e1:24:71:6c:d8:9a:1e:fe:ff:b7:46:02:
50:52:cc:37:22:d6:62:ec:a2:f8:ff:0e:4e:c3:f8:14:bb:fb:
a3:6e:86:af:d5:28:fe:e3:e3:2c:e4:cf:ea:84:77:30:d5:f5:
a5:38:6c:06:95:d2:34:5b:69:f7:61:a9:9a:58:7c:62:a7:a7:
24:74:32:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:39 2026 by rpki-client