Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: 5X9u0709H7Cyxw4LRT+FJP717GSNuiEz88ZF3lu3zMA=
Subject key identifier: 03:40:37:06:7B:82:75:0F:CE:1C:52:CA:41:C8:A9:8E:4D:A9:B1:8D
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 019D265F96B8BCF7C96D380DF705977FBA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 1819
Signing time: Wed 25 Mar 2026 19:01:31 +0000
Manifest this update: Wed 25 Mar 2026 19:01:31 +0000
Manifest next update: Thu 26 Mar 2026 19:01:31 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: 7mLecHuTIkblszQ9SzFR6r05D9aU1SxMOfFd49dondU=)
2: xIyRvynsJDfonhuzRYt1ty9sqMY.roa (hash: EoXBFExcfd/L36PfBZw/K0nrCLVb7q9unxVkiCC6TIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:96:b8:bc:f7:c9:6d:38:0d:f7:05:97:7f:ba:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Mar 25 19:01:31 2026 GMT
Not After : Mar 26 19:01:31 2026 GMT
Subject: CN=034037067b82750fce1c52ca41c8a98e4da9b18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:54:ed:f6:78:89:c8:3b:fb:1c:ad:ce:5a:
25:1e:a8:b9:6e:0a:a1:a4:c7:b9:45:64:b6:cc:54:
9a:fc:d7:c8:5a:aa:16:1a:f1:a1:7c:15:8a:3d:86:
90:89:a5:03:76:0b:a0:d1:7e:f8:95:fa:1d:08:6c:
2a:df:f1:0e:74:7d:47:21:59:23:7d:7c:ea:d2:48:
12:f7:e6:95:4e:95:07:d6:02:ef:0e:f7:54:51:a0:
ca:f1:ec:99:fe:84:28:da:ef:25:df:d0:10:31:d0:
07:c1:00:ca:a7:f1:3f:9a:ce:a9:2c:e3:88:03:db:
bf:59:8c:41:69:ba:7d:9d:ce:32:b8:29:10:f6:7d:
6f:17:d3:db:c5:8f:07:15:b6:da:03:90:0a:1c:f3:
2c:01:48:fb:58:c5:26:3f:f9:fc:e9:18:5d:95:8e:
8b:8c:1a:3c:1e:87:cb:0e:3b:79:52:3a:a9:47:b1:
9d:64:0f:b9:0d:77:84:3d:13:84:dd:db:67:58:4e:
e0:78:b5:74:30:e7:51:7a:3c:4c:27:22:6a:9f:7d:
f4:97:13:4e:10:ef:d9:46:14:41:c4:11:79:44:22:
b6:e3:5b:a9:3b:c9:ac:38:b5:e1:8e:3a:58:3b:14:
62:c7:4d:9b:ea:be:da:71:85:70:bd:34:37:43:a8:
2a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:40:37:06:7B:82:75:0F:CE:1C:52:CA:41:C8:A9:8E:4D:A9:B1:8D
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:16:5f:13:00:91:c8:ee:18:32:9c:3a:2e:ba:78:e2:d1:bb:
12:bc:0a:d9:df:74:6a:61:a0:e8:73:34:b9:e2:e8:65:95:8f:
33:28:f4:88:36:5b:86:59:c2:b2:30:18:7e:ce:72:92:84:f2:
a2:41:b4:3a:ee:4c:e8:7d:fb:b6:81:b3:7f:3b:eb:77:08:ce:
04:b1:78:f8:f6:f5:a7:97:f3:1a:24:33:b9:3a:17:df:8a:83:
37:b6:b9:aa:c2:3f:db:cc:15:b7:a0:1e:e8:c8:19:39:05:96:
f5:e9:05:02:c2:80:f8:d2:b9:55:e8:95:93:f3:0c:35:75:13:
59:bb:e6:dd:82:cf:82:c1:da:d3:bc:e1:5a:98:50:60:e7:57:
db:b9:bc:df:5b:c9:59:95:81:a8:71:98:c3:a0:18:94:f1:d2:
fb:d4:81:46:56:9d:2a:b5:ba:0f:cb:86:8f:c2:9b:bf:be:02:
c2:54:af:b2:ea:c7:dd:ce:21:db:a6:21:90:57:cb:ea:54:f8:
61:a6:5a:d4:53:5d:77:26:e3:3a:0e:9d:3c:d7:4e:eb:65:83:
54:48:49:0a:8b:34:85:fb:77:4a:85:1f:fb:48:f5:2f:a9:50:
37:9c:d2:4c:78:39:3b:f3:6a:70:3c:65:f0:29:62:68:5a:8a:
2f:85:42:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:00 2026 by rpki-client