Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
File: afAHCvh31rmGswe5vATvGcRAQz0.mft (raw, json)
Hash identifier: ue95o7hk0AlUYvtImudJt0EVk6OJSBQDs389+PPutpg=
Subject key identifier: 08:53:BE:04:A7:2D:EF:EC:66:B0:56:74:D1:E1:6D:FB:46:E4:2C:E8
Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d
Certificate serial: 019F93C9A6828DAEA3CE0672DBB719A4FADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
Manifest number: 0BFC
Signing time: Fri 24 Jul 2026 11:01:33 +0000
Manifest this update: Fri 24 Jul 2026 11:01:33 +0000
Manifest next update: Sat 25 Jul 2026 11:01:33 +0000
Files and hashes: 1: afAHCvh31rmGswe5vATvGcRAQz0.crl (hash: F8umZz+afDp6Kkrb4Q8QD9pbaKzqjJcxRemOG+EDa+c=)
2: dkw8BE0MteDejxs-2qVpeffd5cE.roa (hash: OLIzwrtSctTD4rRGWSFchziybsw/DjSgiuUvhAPMb0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:a6:82:8d:ae:a3:ce:06:72:db:b7:19:a4:fa:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d
Validity
Not Before: Jul 24 11:01:33 2026 GMT
Not After : Jul 25 11:01:33 2026 GMT
Subject: CN=0853be04a72defec66b05674d1e16dfb46e42ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:59:f9:74:51:60:75:72:39:b5:22:ff:8f:
d4:1b:05:ef:c1:1c:f3:14:76:2f:41:8e:4c:a5:9f:
8e:8f:af:21:67:e0:b3:41:50:ff:8e:3a:c9:79:54:
c6:2f:36:ca:28:df:41:01:de:62:04:d5:e5:96:e0:
87:47:c9:10:b9:df:fe:a6:6d:46:af:67:44:be:35:
82:3d:fb:42:0c:5e:ae:c5:9a:68:b5:6c:5d:f4:98:
41:58:19:e6:d8:58:08:a8:8d:9c:b8:e0:e6:9b:fe:
9f:84:60:43:c9:b5:34:4b:ab:37:58:40:2c:1c:1c:
a3:fb:2d:7e:19:c2:0a:a4:58:6e:1f:cd:ea:e3:3c:
96:10:79:8b:4a:80:74:8c:4f:87:4a:04:04:ef:48:
4a:81:e5:de:c0:66:3e:4e:78:9f:4e:a0:15:85:43:
5a:0a:eb:5e:ee:49:d0:fa:36:ad:6b:b8:81:08:59:
bd:f0:fa:e3:58:62:c5:c3:ba:69:11:34:73:88:89:
3f:6c:18:7d:8d:d8:fe:5d:f9:87:c7:e9:58:c2:f5:
7c:9e:0a:37:16:5d:fb:1b:30:8d:fa:2d:45:4a:8a:
95:7c:18:b4:cd:23:17:e5:a1:1e:f8:63:a5:51:48:
68:83:d9:55:40:d6:18:8f:0f:c5:0e:39:5c:90:f5:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:53:BE:04:A7:2D:EF:EC:66:B0:56:74:D1:E1:6D:FB:46:E4:2C:E8
X509v3 Authority Key Identifier:
keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:52:0b:b6:1d:e2:a8:db:22:18:3f:77:f7:2c:cc:c6:aa:92:
a8:43:33:ae:d2:ab:09:b6:ab:8e:33:52:0f:24:dd:db:7b:0e:
78:03:ef:65:4d:44:da:07:a5:ea:a8:45:07:3f:5e:0f:1f:21:
94:8d:82:3e:5e:eb:f9:bc:8b:68:ae:42:c4:05:0c:fd:9e:ca:
67:24:28:aa:ab:96:3a:e0:c1:59:27:c1:7a:04:fe:53:60:a3:
dc:3b:79:52:58:51:cf:b9:4e:7a:91:36:15:19:7a:31:00:5f:
68:83:70:67:94:3b:e8:6c:31:c8:31:7a:f0:f7:bb:b5:f6:2a:
77:6b:84:1b:64:69:0c:54:24:40:fd:03:0c:d0:cb:91:5e:b7:
ce:57:5c:52:e9:01:b5:f5:78:09:39:7a:08:f2:54:b5:af:b7:
c5:5c:9a:b2:14:d3:be:b6:4f:83:05:03:16:bd:6e:8f:c2:59:
31:c9:c4:7c:4d:c7:ce:e8:c8:5e:b3:a5:47:88:0b:00:0f:7f:
39:27:01:0e:ec:1f:00:bb:19:e7:d3:a6:3e:5d:1d:00:68:de:
00:8b:a1:81:44:6b:7b:7d:bb:31:0c:3f:31:3a:02:cc:91:62:
83:1c:5c:1f:05:0e:7f:ea:63:aa:a8:52:34:8a:e9:2b:7d:65:
7b:cd:9b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:25 2026 by rpki-client