Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: O6k6rIdx5vjq62fMW6bSSZe1/VXrj1kaiXPuVAqo1M4=
Subject key identifier: DE:F9:D6:6C:B0:3B:35:BB:C9:34:72:0B:C0:B8:8D:9B:13:E8:0F:CD
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 019E1D90F99BFB06D17D05CD7B25A80D61AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 1899
Signing time: Tue 12 May 2026 19:01:40 +0000
Manifest this update: Tue 12 May 2026 19:01:40 +0000
Manifest next update: Wed 13 May 2026 19:01:40 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: wugjzauvN7It9KYtDIySaRZ7myMi7AEZUA10N+jEqm0=)
2: xIyRvynsJDfonhuzRYt1ty9sqMY.roa (hash: EoXBFExcfd/L36PfBZw/K0nrCLVb7q9unxVkiCC6TIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:f9:9b:fb:06:d1:7d:05:cd:7b:25:a8:0d:61:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: May 12 19:01:40 2026 GMT
Not After : May 13 19:01:40 2026 GMT
Subject: CN=def9d66cb03b35bbc934720bc0b88d9b13e80fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:33:25:23:9c:52:4c:fa:81:b6:8b:99:7f:
1e:9f:10:81:09:05:ef:c9:8d:82:fe:9d:8b:eb:a4:
62:04:8b:67:6a:cb:03:bf:8c:ec:db:45:81:fd:f8:
e9:f1:7e:97:4e:a3:b4:1d:ff:4c:e9:e4:e3:f2:d6:
ed:d0:f7:9b:62:87:5f:93:4e:61:41:62:ae:c4:fd:
8b:71:09:db:74:86:06:32:b8:1d:58:74:e1:b0:3d:
94:c5:d2:18:6f:da:24:7e:2b:aa:b6:fd:79:f1:d5:
3b:76:97:d0:cd:e0:89:18:be:5e:cf:9a:99:c1:d7:
6c:36:dc:cf:c7:4f:44:a6:44:f1:f7:e0:56:67:cf:
dc:26:1a:2d:09:d7:70:34:05:db:95:24:a3:56:d0:
cf:6e:db:a4:cc:cb:8b:14:23:e5:99:b4:ba:db:ed:
74:bb:1c:6e:4c:a5:8a:dc:25:7a:43:bc:e0:3d:ac:
76:d4:92:15:ba:04:22:fe:3f:32:2a:af:4b:15:12:
17:43:c9:de:47:42:70:d1:65:f4:5f:c8:66:63:6a:
2d:13:2a:c3:9c:20:35:61:60:fb:45:39:90:86:d3:
12:08:21:c7:1a:1c:bf:2e:07:53:31:fc:c4:4a:5a:
8f:59:e1:d1:93:f0:c9:61:85:6e:82:43:35:84:00:
3f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F9:D6:6C:B0:3B:35:BB:C9:34:72:0B:C0:B8:8D:9B:13:E8:0F:CD
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fd:69:66:13:36:dc:a4:03:d1:50:92:26:23:80:72:33:14:
12:53:89:90:67:64:be:98:6b:ea:3b:fb:eb:1a:13:f9:a9:8c:
93:6a:95:7e:56:a2:7c:97:fd:ad:cf:09:06:e5:66:66:fe:a4:
62:15:c8:85:05:7a:1a:38:db:07:4a:a8:17:76:e5:4d:8a:45:
a5:8a:91:e9:b8:67:5a:b2:76:c6:cd:c4:d4:ba:78:28:7f:5d:
35:3e:bf:e5:b1:46:6e:24:02:d2:69:82:bf:9b:5e:93:9c:ea:
89:16:b1:73:f9:27:25:41:ad:33:0b:57:89:ea:9a:38:48:7d:
69:62:df:84:df:18:bd:a5:4c:5b:26:27:84:e5:2b:de:04:1a:
be:9c:16:b3:54:18:6a:a1:d3:fb:c5:f1:ce:a6:f0:95:bf:d8:
ca:bc:5d:42:31:7f:a9:c9:a1:80:d4:dc:db:bf:dc:cf:51:9f:
9e:fa:16:73:40:07:6d:1a:fa:de:fd:98:c3:fc:c7:1e:0d:64:
eb:5e:69:c4:93:75:31:c6:49:48:a4:a3:88:5b:d0:03:a3:92:
5b:29:a8:75:8c:4b:8f:b1:ee:da:62:80:0e:7b:7f:37:13:76:
2b:07:01:e1:b2:28:0c:c7:80:31:81:3f:df:86:a9:07:b8:58:
15:54:c8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:52:17 2026 by rpki-client