
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
File: Afq489H7PSo1xPZ6SPb2CD6rpXU.mft (raw, json)
Hash identifier: ApEFq1RNGZgesop67KPo8CkNjgtuXFOk91+eqtIcMHI=
Subject key identifier: 84:BC:44:A4:60:CB:6A:50:1D:9C:DF:99:D4:65:4B:D4:39:47:33:FB
Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Certificate issuer: /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Certificate serial: 019E1CEB6144C6E66868D92D75C20061EF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
Manifest number: 08E7
Signing time: Tue 12 May 2026 16:00:48 +0000
Manifest this update: Tue 12 May 2026 16:00:48 +0000
Manifest next update: Wed 13 May 2026 16:00:48 +0000
Files and hashes: 1: Afq489H7PSo1xPZ6SPb2CD6rpXU.crl (hash: OtKXSGmz3vgRhB05+gtIg/OGKQCobtGbnUiw8aJhnqY=)
2: WwxUIgZQzTDxG7ybBsjkioJXz8E.roa (hash: MbjGJ2NlvdJnsdm83ackK73GTkTFyLBuLVC/1DFPquA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:61:44:c6:e6:68:68:d9:2d:75:c2:00:61:ef:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Validity
Not Before: May 12 16:00:48 2026 GMT
Not After : May 13 16:00:48 2026 GMT
Subject: CN=84bc44a460cb6a501d9cdf99d4654bd4394733fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:5b:27:8c:52:ed:f9:0f:6a:bb:1a:0e:fd:
76:e5:85:39:d7:2d:90:44:70:92:5b:4d:d6:af:29:
0a:c0:fa:02:4b:6e:18:a4:eb:ce:7b:85:3f:27:10:
45:46:ad:d9:ea:d7:1f:8f:33:29:04:0d:77:86:c1:
c2:aa:4e:05:3d:5d:b1:97:80:f6:e5:2b:9a:39:e4:
8d:38:31:24:10:9d:4a:2c:e2:bd:8d:48:33:d1:16:
12:3a:dd:aa:ec:7b:d6:20:ff:2f:f7:06:82:47:a9:
85:6b:00:32:de:cf:f9:da:d7:b6:a7:60:6b:47:1b:
13:c7:d5:b6:a4:25:26:8c:65:fd:a3:8c:70:86:8f:
0c:07:9e:89:f2:8c:ac:a8:51:a6:c2:eb:39:45:17:
67:fa:81:a6:02:91:08:92:99:d1:a4:9f:0b:a2:19:
d8:9c:6b:fb:ee:6a:40:84:a4:81:19:9d:36:c8:d2:
b9:2b:f8:a2:2c:f0:2b:02:57:14:81:d6:42:35:d9:
7a:4a:ed:63:54:b6:7c:33:d3:53:0a:50:eb:ec:4d:
d0:19:95:63:71:21:10:ad:46:37:55:1c:7f:eb:0f:
45:e5:c2:c2:82:69:98:60:b7:c4:35:a4:0e:17:05:
1e:12:c8:9d:fe:02:12:4f:4c:26:d9:01:4c:8c:45:
1f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:BC:44:A4:60:CB:6A:50:1D:9C:DF:99:D4:65:4B:D4:39:47:33:FB
X509v3 Authority Key Identifier:
keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:74:5e:e4:92:8f:cb:b2:22:58:14:80:bc:81:5e:f6:51:59:
32:72:28:d3:84:e9:05:ba:fa:31:3a:79:3f:11:f5:29:f8:33:
94:d4:89:15:89:f6:11:1f:cc:a3:0d:58:1a:ea:d7:cd:e2:c5:
7d:8f:c4:6c:e6:5a:43:43:41:8b:62:df:73:ab:de:79:57:6c:
e7:51:23:ae:20:bd:67:2d:8e:fc:a6:0a:60:0d:0a:cd:73:b6:
b5:ed:cb:9e:6e:fd:35:b7:c1:40:ee:d9:52:d0:a1:4e:8e:58:
3e:ab:26:cf:b1:92:e9:a7:55:0a:d3:28:89:e9:88:a4:36:f6:
ed:8f:e4:44:f8:76:09:69:c5:89:7f:c3:33:88:e6:44:51:76:
59:34:f2:ef:42:04:a2:5b:3a:63:46:4e:82:de:1e:f1:f1:ad:
87:5b:e8:90:23:11:96:a1:fa:a6:19:47:34:2f:4b:14:0c:69:
d7:8e:51:ba:8f:84:36:35:2a:d2:b7:b4:8c:4f:84:2d:01:7f:
be:2f:b5:bc:cf:ad:52:ab:64:de:86:9e:fa:57:bb:5a:4e:b6:
bf:6b:b4:61:51:75:ff:ea:88:45:f7:dd:05:6c:a1:28:12:21:
85:e7:e3:bd:ce:d8:4a:c1:26:ad:d1:e7:e8:10:57:2d:7a:61:
f0:34:44:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c62FExuZoaNktdcIAYe8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZmFiOGYzZDFmYjNkMmEzNWM0ZjY3YTQ4ZjZmNjA4M2Vh
YmE1NzUwHhcNMjYwNTEyMTYwMDQ4WhcNMjYwNTEzMTYwMDQ4WjAzMTEwLwYDVQQD
Eyg4NGJjNDRhNDYwY2I2YTUwMWQ5Y2RmOTlkNDY1NGJkNDM5NDczM2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOlbJ4xS7fkParsaDv125YU51y2Q
RHCSW03WrykKwPoCS24YpOvOe4U/JxBFRq3Z6tcfjzMpBA13hsHCqk4FPV2xl4D2
5SuaOeSNODEkEJ1KLOK9jUgz0RYSOt2q7HvWIP8v9waCR6mFawAy3s/52te2p2Br
RxsTx9W2pCUmjGX9o4xwho8MB56J8oysqFGmwus5RRdn+oGmApEIkpnRpJ8LohnY
nGv77mpAhKSBGZ02yNK5K/iiLPArAlcUgdZCNdl6Su1jVLZ8M9NTClDr7E3QGZVj
cSEQrUY3VRx/6w9F5cLCgmmYYLfENaQOFwUeEsid/gIST0wm2QFMjEUfTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIS8RKRgy2pQHZzfmdRlS9Q5RzP7MB8GA1UdIwQY
MBaAFAH6uPPR+z0qNcT2ekj29gg+q6V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWZxNDg5SDdQU28xeFBaNlNQYjJDRDZycFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy85N2Y5MTctOTNmOC00MDVjLTlkNTUt
YTNjMDYxZDhiZTkxLzEvQWZxNDg5SDdQU28xeFBaNlNQYjJDRDZycFhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy85N2Y5MTctOTNmOC00MDVjLTlkNTUtYTNjMDYxZDhiZTkx
LzEvQWZxNDg5SDdQU28xeFBaNlNQYjJDRDZycFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHRe5JKP
y7IiWBSAvIFe9lFZMnIo04TpBbr6MTp5PxH1KfgzlNSJFYn2ER/Mow1YGurXzeLF
fY/EbOZaQ0NBi2Lfc6veeVds51EjriC9Zy2O/KYKYA0KzXO2te3Lnm79NbfBQO7Z
UtChTo5YPqsmz7GS6adVCtMoiemIpDb27Y/kRPh2CWnFiX/DM4jmRFF2WTTy70IE
ols6Y0ZOgt4e8fGth1vokCMRlqH6phlHNC9LFAxp145Ruo+ENjUq0re0jE+ELQF/
vi+1vM+tUqtk3oae+le7Wk62v2u0YVF1/+qIRffdBWyhKBIhhefjvc7YSsEmrdHn
6BBXLXph8DREGQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:03 2026 by rpki-client