Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: JAwEqoeP1ffgSbFPpoO8ejCSe21mGG9ggkE6sGLQBPU=
Subject key identifier: 8D:29:1E:F0:51:9D:98:48:9C:39:B8:CF:5C:4E:E7:AA:6A:55:5D:1A
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 01A0E0621D814A237BFADD88605F431678B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 1A07
Signing time: Sun 27 Sep 2026 01:02:01 +0000
Manifest this update: Sun 27 Sep 2026 01:02:01 +0000
Manifest next update: Mon 28 Sep 2026 01:02:01 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: DwZyO0xNyl1iXQfeKn4Q3ALG+oxAb5l63Jj89Ve0ufM=)
2: xIyRvynsJDfonhuzRYt1ty9sqMY.roa (hash: EoXBFExcfd/L36PfBZw/K0nrCLVb7q9unxVkiCC6TIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:62:1d:81:4a:23:7b:fa:dd:88:60:5f:43:16:78:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Sep 27 01:02:01 2026 GMT
Not After : Sep 28 01:02:01 2026 GMT
Subject: CN=8d291ef0519d98489c39b8cf5c4ee7aa6a555d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:0f:e0:83:97:60:ef:b8:d9:3a:0d:b0:d5:
b3:b3:20:0f:ec:41:2c:7a:32:07:e4:71:61:a9:3d:
65:c0:96:10:04:98:3c:00:9b:05:33:8f:e9:f8:5f:
b3:44:25:cc:f6:e9:a6:97:73:63:69:87:62:39:a6:
ba:64:a5:11:f2:b3:1d:44:3e:df:32:96:25:58:13:
0c:07:d2:c7:d6:db:12:47:93:77:7f:14:31:5e:d6:
6c:4b:3d:66:78:fc:ba:a7:6d:99:1f:e3:74:5e:b0:
f3:0e:c3:20:a1:47:4b:91:1c:37:94:e9:47:41:fa:
04:90:ee:9d:ee:f7:be:34:9f:47:85:ac:ce:00:bc:
da:a8:b1:d3:ee:b7:8a:9b:44:4d:54:83:54:fe:f7:
fd:a9:af:ca:0e:d3:2e:0d:ea:93:cd:3b:3f:a9:87:
f2:5f:6e:b3:94:ac:e1:89:ac:6a:bc:9b:69:0f:40:
c3:ac:92:bb:7e:67:e8:0c:76:64:b4:0f:24:4e:91:
68:ed:4e:03:5b:d5:09:99:aa:1f:71:ea:a4:0d:ba:
10:5c:fd:99:ff:91:ed:31:b4:a3:f6:d4:e6:ff:dd:
bb:3b:cc:3f:e6:63:c6:4d:08:bb:3b:19:70:57:70:
98:5e:96:d7:7a:26:86:c7:82:14:6e:19:e6:24:0f:
30:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:29:1E:F0:51:9D:98:48:9C:39:B8:CF:5C:4E:E7:AA:6A:55:5D:1A
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:84:54:17:47:1f:f4:62:55:ce:1d:95:cb:3c:7c:de:d8:48:
4a:26:31:ce:6e:8f:63:bd:52:45:59:e9:45:b0:91:b0:10:79:
f8:13:bd:b8:73:28:aa:61:34:a9:a7:6f:a5:69:ea:48:51:eb:
24:76:45:a6:bb:2d:7d:89:84:fd:13:48:39:e3:3f:6b:99:04:
f1:82:58:5e:89:6b:1f:80:9b:e2:13:19:cc:cd:35:c9:b0:05:
49:53:99:c2:39:d9:c5:46:90:07:a7:16:94:73:ba:1f:8d:6e:
70:93:b3:31:3a:5c:f3:1d:3b:9e:bb:dd:5c:c5:b7:7e:a1:67:
a3:6d:8d:f7:ee:eb:9c:4e:21:46:f5:cc:7c:a8:8e:e8:3e:2a:
68:e0:85:0d:04:8e:fb:84:ea:02:c9:b6:a3:20:c6:83:27:3d:
d0:cd:c1:77:fe:8f:d2:d8:7e:93:1d:1e:d3:1b:a7:ca:d3:45:
f1:9b:d3:0b:d4:a3:bd:1f:d1:02:f9:cb:d7:95:7a:f7:39:1e:
68:d0:66:1b:78:a8:2a:ae:1f:39:3a:44:4b:a1:43:72:ba:60:
10:8b:10:ae:b8:ff:30:cd:c3:7b:c1:2f:76:90:ce:68:3b:7b:
c6:58:31:0a:50:7f:a9:e5:af:29:28:17:e0:3b:5c:5b:7c:a1:
63:fc:4e:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgYh2BSiN7+t2IYF9DFni2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NTFhM2ZlZTc3ZTkyNDE0NjE3NzEyM2RkNjc1M2IwNmZk
ZTI0NTIwHhcNMjYwOTI3MDEwMjAxWhcNMjYwOTI4MDEwMjAxWjAzMTEwLwYDVQQD
Eyg4ZDI5MWVmMDUxOWQ5ODQ4OWMzOWI4Y2Y1YzRlZTdhYTZhNTU1ZDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCIP4IOXYO+42ToNsNWzsyAP7EEs
ejIH5HFhqT1lwJYQBJg8AJsFM4/p+F+zRCXM9umml3NjaYdiOaa6ZKUR8rMdRD7f
MpYlWBMMB9LH1tsSR5N3fxQxXtZsSz1mePy6p22ZH+N0XrDzDsMgoUdLkRw3lOlH
QfoEkO6d7ve+NJ9HhazOALzaqLHT7reKm0RNVINU/vf9qa/KDtMuDeqTzTs/qYfy
X26zlKzhiaxqvJtpD0DDrJK7fmfoDHZktA8kTpFo7U4DW9UJmaofceqkDboQXP2Z
/5HtMbSj9tTm/927O8w/5mPGTQi7OxlwV3CYXpbXeiaGx4IUbhnmJA8wcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0pHvBRnZhInDm4z1xO56pqVV0aMB8GA1UdIwQY
MBaAFGhRo/7nfpJBRhdxI91nU7Bv3iRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQt
YTNiNTg2MjgwNjBkLzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQtYTNiNTg2MjgwNjBk
LzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvIRUF0cf
9GJVzh2Vyzx83thISiYxzm6PY71SRVnpRbCRsBB5+BO9uHMoqmE0qadvpWnqSFHr
JHZFprstfYmE/RNIOeM/a5kE8YJYXolrH4Cb4hMZzM01ybAFSVOZwjnZxUaQB6cW
lHO6H41ucJOzMTpc8x07nrvdXMW3fqFno22N9+7rnE4hRvXMfKiO6D4qaOCFDQSO
+4TqAsm2oyDGgyc90M3Bd/6P0th+kx0e0xunytNF8ZvTC9SjvR/RAvnL15V69zke
aNBmG3ioKq4fOTpES6FDcrpgEIsQrrj/MM3De8EvdpDOaDt7xlgxClB/qeWvKSgX
4DtcW3yhY/xOdA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 09:07:36 2026 by rpki-client