Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
File: afAHCvh31rmGswe5vATvGcRAQz0.mft (raw, json)
Hash identifier: R75SSYE9IwRwpdfe+SLg9fphOeV9Auvqqn3DDVNCWzs=
Subject key identifier: 5E:68:CF:D8:82:FB:88:C8:80:D5:DF:FE:EE:8A:A2:2D:D2:C9:D2:67
Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d
Certificate serial: 01A0E1E2112B702DE185D7B2DB8CD87A8CCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
Manifest number: 0CA9
Signing time: Sun 27 Sep 2026 08:01:24 +0000
Manifest this update: Sun 27 Sep 2026 08:01:24 +0000
Manifest next update: Mon 28 Sep 2026 08:01:24 +0000
Files and hashes: 1: afAHCvh31rmGswe5vATvGcRAQz0.crl (hash: 9pfWCE/ou908AF3T3go7lI9yV0/MU2Ky8jZOTLRjdAE=)
2: dkw8BE0MteDejxs-2qVpeffd5cE.roa (hash: OLIzwrtSctTD4rRGWSFchziybsw/DjSgiuUvhAPMb0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:11:2b:70:2d:e1:85:d7:b2:db:8c:d8:7a:8c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d
Validity
Not Before: Sep 27 08:01:24 2026 GMT
Not After : Sep 28 08:01:24 2026 GMT
Subject: CN=5e68cfd882fb88c880d5dffeee8aa22dd2c9d267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:b5:c0:5a:d2:7e:7e:46:f1:06:53:c3:14:
75:2c:83:12:41:43:bf:2d:4f:5f:fd:ee:39:09:d5:
b5:7f:c3:3d:39:6f:95:8c:0a:5b:e7:e1:24:4b:76:
d9:e8:09:65:50:e6:95:b1:61:14:e3:05:25:0a:3d:
68:6b:ab:32:0f:80:6a:e1:c3:c2:c9:80:56:60:3e:
97:b3:d9:9d:ff:37:3a:c9:e2:b8:30:f2:75:0c:5a:
52:e9:85:61:dd:90:fa:ba:f9:f7:7e:d6:43:e3:85:
3b:9a:29:2a:1f:81:e3:41:31:fa:9c:b3:a2:2d:ae:
8a:ed:62:78:e7:51:57:b8:fa:c3:c2:28:13:8c:bc:
b9:5b:ab:c6:02:45:46:32:f7:7e:2f:1c:1c:3c:58:
8f:cc:5f:21:da:26:94:f7:05:77:22:a1:5e:56:2f:
29:e7:d6:f3:d4:15:76:e5:b4:8f:44:dd:89:92:8a:
5b:9e:88:22:5d:f0:3f:3d:66:df:dc:2d:24:82:53:
c9:ce:8b:5d:58:58:53:2c:8f:b6:c9:06:4b:27:c1:
0a:1c:13:60:a7:5d:21:5e:47:bb:d2:9d:ce:4c:54:
6b:75:a8:7f:60:4f:b2:2c:ee:19:f5:bd:72:75:96:
84:f6:e8:40:45:3a:83:d9:76:36:f1:d0:ca:4e:76:
e0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:68:CF:D8:82:FB:88:C8:80:D5:DF:FE:EE:8A:A2:2D:D2:C9:D2:67
X509v3 Authority Key Identifier:
keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4e:aa:c7:af:89:4f:2a:8b:fd:4a:de:2a:ff:15:25:60:22:
e5:3c:b7:e9:cc:0d:82:7c:64:c2:ba:0a:c0:96:4b:54:28:b4:
27:5b:dc:ff:10:24:6d:c5:27:e0:52:ff:32:23:8f:ef:ce:40:
ab:a3:c8:c8:8f:7b:d0:ae:a7:33:78:9b:ec:c6:c0:02:89:34:
c7:25:d5:16:9a:3e:30:26:35:03:1f:d7:f6:72:02:e4:de:d3:
9f:35:2e:3a:fb:0d:f0:38:63:2e:d8:fd:19:82:c5:23:a8:b5:
d1:6a:b4:21:95:11:97:8e:4e:69:85:6a:97:f1:bd:72:30:77:
53:ae:ef:2d:45:4c:ce:ea:33:71:eb:61:c8:fe:2e:36:68:dc:
ab:9a:38:18:06:19:b7:8a:59:8d:c5:15:93:37:3d:73:76:d3:
18:b8:47:c9:fc:0f:8f:95:c1:6a:14:5c:7f:27:8c:70:c8:0a:
df:06:47:8e:53:c6:fc:47:1b:5c:57:cb:d9:b4:a7:f1:ef:8f:
56:f4:a5:47:10:b6:9e:9d:df:c0:b4:5f:3b:cf:9f:c8:b1:fe:
ba:5d:5e:54:76:a7:9d:b4:b0:21:86:56:27:70:4a:e4:d5:89:
b3:ae:79:86:26:9f:b4:db:66:7e:02:1a:2c:bc:02:73:4a:9b:
b3:cc:9d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:37:41 2026 by rpki-client