Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
File: AFA0jPYGQvVOyQck3niqoD3NOOE.mft (raw, json)
Hash identifier: WeBGTDdHQWnbpbdakRwjORlxT7lS6dfGC1dX2kWGV7c=
Subject key identifier: C8:ED:77:2D:E9:16:73:F9:CC:B7:CF:C2:26:4A:2B:95:54:6E:8B:75
Authority key identifier: 00:50:34:8C:F6:06:42:F5:4E:C9:07:24:DE:78:AA:A0:3D:CD:38:E1
Certificate issuer: /CN=0050348cf60642f54ec90724de78aaa03dcd38e1
Certificate serial: 01A0F4564EECEF41E64B7534062C8F15075F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFA0jPYGQvVOyQck3niqoD3NOOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
Manifest number: 1229
Signing time: Wed 30 Sep 2026 22:01:31 +0000
Manifest this update: Wed 30 Sep 2026 22:01:31 +0000
Manifest next update: Thu 01 Oct 2026 22:01:31 +0000
Files and hashes: 1: AFA0jPYGQvVOyQck3niqoD3NOOE.crl (hash: Iaehgl7pgpNtLXm7Je3NmnR0hBaAnUlk3J02yjH1J6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFA0jPYGQvVOyQck3niqoD3NOOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:56:4e:ec:ef:41:e6:4b:75:34:06:2c:8f:15:07:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0050348cf60642f54ec90724de78aaa03dcd38e1
Validity
Not Before: Sep 30 22:01:31 2026 GMT
Not After : Oct 1 22:01:31 2026 GMT
Subject: CN=c8ed772de91673f9ccb7cfc2264a2b95546e8b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:c3:34:c0:20:16:12:e2:d6:32:0b:e7:e3:
d3:fa:cb:d5:47:25:b7:c1:52:33:9d:c9:66:e2:a5:
c1:23:a4:b7:b0:fb:ab:81:f9:94:af:dd:a4:96:77:
31:ed:48:9c:80:c3:44:cf:b5:ba:7f:18:17:b1:af:
d6:8e:51:5e:85:dc:a9:93:4f:99:3b:6a:a4:d5:54:
0e:09:76:dd:b7:b4:7b:0e:9a:80:df:4a:bf:b7:c7:
98:50:a6:b8:f9:82:1a:21:35:5b:07:e2:85:8d:c4:
b0:9a:d4:ca:74:39:fd:43:f7:63:96:97:2c:90:14:
8b:69:5f:a5:a3:33:2a:a4:4b:1f:ca:e2:6b:1d:71:
8c:6c:ea:0a:a3:19:85:37:a5:dd:7d:87:98:59:5a:
20:d8:1d:39:92:53:4e:4b:be:f3:15:13:ad:d9:49:
4b:2e:18:8e:11:ed:63:eb:6d:10:c5:78:19:0a:f4:
d7:50:45:00:b4:0a:c4:bb:38:97:7c:67:f5:ae:25:
ba:a8:5c:e3:f9:a0:81:71:2c:da:89:57:35:69:b2:
25:2d:a5:72:88:fd:9e:44:53:72:a7:5c:d6:ae:63:
65:f0:e2:67:df:f4:50:9b:3d:34:6a:d9:3a:f6:0b:
8d:6a:e9:45:aa:56:2f:5f:7f:08:ec:f7:40:b7:d9:
7f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:ED:77:2D:E9:16:73:F9:CC:B7:CF:C2:26:4A:2B:95:54:6E:8B:75
X509v3 Authority Key Identifier:
keyid:00:50:34:8C:F6:06:42:F5:4E:C9:07:24:DE:78:AA:A0:3D:CD:38:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFA0jPYGQvVOyQck3niqoD3NOOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:da:84:ba:88:57:5e:82:ed:32:8b:20:d9:69:5f:8f:51:55:
40:23:2c:f2:52:6c:7b:63:04:64:a3:10:13:3e:ea:cf:8d:b0:
dc:a2:18:ae:05:40:a2:42:91:d0:41:9a:3c:0d:38:ed:26:ed:
e9:78:68:e4:63:07:d7:f4:ae:e6:33:e6:aa:28:7f:13:c4:bc:
c3:98:b2:4c:a4:a1:60:61:27:5d:f4:52:58:32:55:a9:a3:4a:
80:b2:d4:75:4a:e5:70:13:8c:85:9f:cb:b2:e5:89:0f:bb:1f:
3d:41:44:c9:20:9b:a2:b4:90:2f:68:29:3e:54:58:d3:d0:bd:
11:ee:d3:d5:55:8f:86:cf:f6:05:a1:23:f8:f6:8b:b6:85:19:
72:47:4a:27:19:27:97:d3:38:b7:85:9f:e4:33:c7:2a:cc:ac:
c1:45:a1:27:53:60:5f:d7:08:ec:47:de:1e:5f:31:49:78:89:
d0:ed:5c:d3:46:5c:fb:85:93:ec:90:d7:37:95:3b:41:3d:16:
7e:7f:e4:00:21:6e:ab:9e:fb:2a:b4:d0:62:d2:2a:4e:a3:ae:
d2:c3:26:91:99:9d:41:57:1f:ba:97:ca:b3:34:4f:be:58:03:
26:8d:df:78:ca:94:27:7e:52:81:55:82:87:6a:7a:28:0e:ac:
15:e3:a0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 07:16:06 2026 by rpki-client