Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier: /ypGwiYiXZKsOqytYqISluMMytWtNgJ/ih6JdvebGyQ=
Subject key identifier: 6F:4E:32:12:4B:31:67:1D:4E:D5:4B:D2:4B:00:6A:84:52:B9:7F:7C
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 01A104DBDDCFF4CAD12740EF52A229DD2902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number: 1A8A
Signing time: Sun 04 Oct 2026 03:01:20 +0000
Manifest this update: Sun 04 Oct 2026 03:01:20 +0000
Manifest next update: Mon 05 Oct 2026 03:01:20 +0000
Files and hashes: 1: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: YAsMUX7R58xhigPdtMD5R6rHQIYu+QSjE/pLOitzIr0=)
2: NcBIwWrVfFqKGC-Ejlu0skUAVME.roa (hash: QpyQXhGs4Yf3p6aesaO1I7bW/lGukmfPe/wqoZKA1Vg=)
3: qQKt-ttEupn050lQM3ueiMM5O7U.roa (hash: IWUAiIiA8+zMFHrxZAZM+ZSZwvnir/Y+CFeS9iJbSKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:db:dd:cf:f4:ca:d1:27:40:ef:52:a2:29:dd:29:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: Oct 4 03:01:20 2026 GMT
Not After : Oct 5 03:01:20 2026 GMT
Subject: CN=6f4e32124b31671d4ed54bd24b006a8452b97f7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:60:0e:29:6d:3e:ff:6e:fa:5f:90:b7:6c:47:
6c:5d:fe:a8:b6:45:48:d7:04:67:a0:14:9d:de:7b:
f1:b8:3f:8a:ce:b5:44:31:bb:04:72:46:a2:ba:eb:
6e:19:85:56:4d:78:ae:a7:32:7b:f6:99:41:30:46:
b5:a5:0f:dd:cc:36:54:f4:e2:7c:d3:c1:74:6f:99:
e1:11:90:87:3f:b6:44:1a:d7:b8:a9:75:09:8c:6f:
9a:66:08:6e:60:bd:8e:7a:b5:4d:5e:d6:64:1b:e5:
ae:59:6f:2f:e7:06:3c:6f:cc:3e:25:99:3f:f1:2c:
db:e1:fe:e8:eb:7e:9d:ea:8f:9d:84:2a:75:3b:9c:
30:38:a1:83:52:32:a4:3e:c1:89:e8:3f:62:da:c5:
a2:40:f4:26:35:2a:72:b8:be:0b:47:9c:14:59:8b:
e4:10:1c:7a:f9:ee:ab:85:df:b5:75:84:9b:72:5f:
40:33:0a:ae:c5:7d:e7:d7:af:99:df:c0:be:3b:db:
0d:56:6e:c5:15:c0:fd:8b:ed:c5:b4:87:77:d7:dc:
07:8a:81:d6:14:f4:66:96:60:71:21:f7:d7:fc:34:
80:2f:07:4e:f4:5c:58:82:9b:e9:08:d5:2a:c6:fa:
8e:d2:06:d0:d5:2d:ed:e0:ed:07:cd:e2:38:2b:a3:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4E:32:12:4B:31:67:1D:4E:D5:4B:D2:4B:00:6A:84:52:B9:7F:7C
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:45:19:2d:da:77:e5:d3:64:22:1e:65:6e:90:f8:bf:44:7a:
d5:ea:73:62:58:b1:f6:89:2c:6a:d7:e4:c4:7b:dc:21:9f:7f:
43:dc:09:54:94:ae:93:9a:c9:ec:52:05:69:47:c2:46:1a:f5:
1e:8a:40:1f:ad:f7:8e:9e:c1:43:c7:64:80:54:aa:d1:f5:fc:
72:dc:31:da:6f:36:e1:54:93:da:e5:87:c1:5d:7d:f7:79:2b:
25:0c:47:46:01:32:6b:45:71:c4:30:15:3f:e0:a4:2a:fe:cd:
04:63:35:a0:51:ba:c7:56:3b:d0:4f:bf:6a:11:c5:0d:0e:e9:
07:3b:e8:f2:08:ce:a3:6a:be:bb:2a:8a:ad:ec:f9:ed:cc:7f:
f9:cc:9d:43:9d:63:ed:c6:e7:5a:47:9f:a6:2a:92:16:77:c4:
3e:8d:be:16:3e:1d:54:6a:a1:2d:20:72:07:85:54:49:3d:2b:
b7:d6:38:bc:72:c6:b5:08:6e:43:c6:c7:44:c0:6d:f5:8c:84:
26:be:c5:35:4c:c1:17:f6:f5:6f:fe:1a:a9:5e:f8:a0:a4:56:
3d:a9:37:40:d8:e5:40:51:8b:92:d8:63:80:bd:b4:8a:72:98:
15:44:9d:84:3e:fc:b6:fd:b6:4a:39:7c:61:8e:95:6c:50:e8:
bd:0b:68:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:32:49 2026 by rpki-client