Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
File: Afq489H7PSo1xPZ6SPb2CD6rpXU.mft (raw, json)
Hash identifier: tZqIdKTBW5PLroY5A3IcBemyyDIrKvJTbRiyDA7XGjQ=
Subject key identifier: 41:54:DA:F6:B9:D7:73:49:D3:BA:BD:EF:F0:81:9A:9E:30:08:FA:66
Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Certificate issuer: /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Certificate serial: 019D27A87D2FB5BAA39C28960A26C7DAA5E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
Manifest number: 0868
Signing time: Thu 26 Mar 2026 01:00:46 +0000
Manifest this update: Thu 26 Mar 2026 01:00:46 +0000
Manifest next update: Fri 27 Mar 2026 01:00:46 +0000
Files and hashes: 1: Afq489H7PSo1xPZ6SPb2CD6rpXU.crl (hash: SA4TWy8gkWGhrqAmiOeScm10t2GFo2xBBwOOb+IzDmE=)
2: WwxUIgZQzTDxG7ybBsjkioJXz8E.roa (hash: MbjGJ2NlvdJnsdm83ackK73GTkTFyLBuLVC/1DFPquA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:7d:2f:b5:ba:a3:9c:28:96:0a:26:c7:da:a5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Validity
Not Before: Mar 26 01:00:46 2026 GMT
Not After : Mar 27 01:00:46 2026 GMT
Subject: CN=4154daf6b9d77349d3babdeff0819a9e3008fa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:30:5f:1e:01:ae:18:5b:84:df:2f:6f:73:
b4:2b:46:b0:88:e7:ee:df:7d:e0:5f:f6:96:86:65:
fb:8c:0f:9a:fc:1d:97:9b:e7:d2:29:12:e4:c7:1a:
1e:bb:ef:8f:1e:c1:bd:df:d6:59:18:37:b7:9e:05:
76:45:0a:b2:49:44:aa:5f:72:b1:e1:8f:35:1e:ce:
01:f8:a6:9d:75:e1:e0:d6:e4:30:b9:22:58:65:64:
56:c3:81:11:bb:55:cc:36:5d:41:bd:c9:17:1a:fe:
71:81:6e:de:95:a6:aa:5f:60:dc:57:c3:31:c7:2e:
77:07:b1:ff:94:51:86:eb:e6:80:bb:41:15:8b:ff:
d2:49:38:ed:08:e5:5c:08:8e:be:88:27:e0:e3:8b:
d6:d0:04:07:30:57:47:a9:95:6d:15:f9:52:0c:68:
c5:a0:04:59:cd:61:e0:e3:29:ac:be:c1:f6:39:55:
27:82:66:f5:a0:14:41:c8:42:5b:ae:1c:1d:d8:ea:
56:5a:10:df:f3:66:c1:3d:ec:5e:1f:ba:95:21:07:
85:ba:5a:bd:6e:ec:99:a7:b9:e5:51:3c:a0:c6:3f:
cd:f7:99:d6:a9:ca:eb:f8:82:8e:b6:67:6b:bd:23:
45:74:02:0c:88:63:82:ec:f6:0a:13:79:89:9a:7e:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:54:DA:F6:B9:D7:73:49:D3:BA:BD:EF:F0:81:9A:9E:30:08:FA:66
X509v3 Authority Key Identifier:
keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:8a:cc:66:59:e6:9c:a0:87:94:3f:f8:c4:07:9a:26:a4:89:
63:91:aa:d4:e8:c9:c1:c4:cb:a9:12:d3:4e:21:fb:fb:88:3f:
0e:c4:79:56:b1:8f:e0:c2:1d:53:b1:08:de:9b:07:ad:42:19:
fb:20:4b:9d:1c:e3:53:a3:8d:4d:fe:0e:26:33:8d:b8:11:ab:
95:2a:6d:d3:b8:b4:64:f1:1f:b9:5d:05:0e:5f:cf:90:77:d4:
63:0a:27:42:19:22:d0:b8:30:87:8d:c0:e1:57:98:67:91:6c:
bb:80:a2:3f:8b:09:6d:42:40:a1:dc:a2:0e:b9:34:20:21:82:
e7:66:dd:81:fa:4d:d7:5e:2d:02:46:de:8d:13:6c:24:a6:d9:
fd:7b:56:d3:e2:cd:18:6f:91:e8:6d:fc:64:00:c0:dc:ca:28:
4f:fc:5e:a4:58:10:d7:13:0f:31:78:23:f5:79:41:58:07:ad:
b3:7d:74:79:c1:91:53:2b:c8:b1:60:e1:e9:fa:a1:37:25:1a:
31:42:72:84:a7:29:d4:d2:d7:9a:f6:dc:42:8b:b0:ff:e1:6e:
66:92:90:45:25:c0:30:3b:8a:f8:cb:43:eb:48:4c:74:06:50:
a7:c4:61:3b:2f:65:62:44:a5:0c:0f:f5:61:2e:a6:3e:da:6e:
81:f8:3d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:39:40 2026 by rpki-client