
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier: Pxk5Ums6JkgxOirL+lgO7e9H94mbT9wD/EJla4YZ834=
Subject key identifier: E6:8C:F5:24:68:55:EC:C6:F9:C3:D4:5C:7D:8A:35:6E:4D:D4:75:2F
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 019E1CB5283D179B55504109598271C543C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 15:01:34 +0000
Manifest this update: Tue 12 May 2026 15:01:34 +0000
Manifest next update: Wed 13 May 2026 15:01:34 +0000
Files and hashes: 1: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: 0H4XD4zzmoyuxbcLHyorT01v9dYt/CD4Si8S9YWUd4Y=)
2: NcBIwWrVfFqKGC-Ejlu0skUAVME.roa (hash: QpyQXhGs4Yf3p6aesaO1I7bW/lGukmfPe/wqoZKA1Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:28:3d:17:9b:55:50:41:09:59:82:71:c5:43:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: May 12 15:01:34 2026 GMT
Not After : May 13 15:01:34 2026 GMT
Subject: CN=e68cf5246855ecc6f9c3d45c7d8a356e4dd4752f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:06:4e:8a:a2:36:d6:8f:c9:3c:cb:59:02:
c4:0e:59:fa:65:95:64:db:b6:96:55:b5:6a:42:5b:
dd:58:e3:27:1a:7a:32:13:39:c1:b2:47:21:f0:90:
3f:41:75:1c:7e:59:80:ee:e4:c3:02:77:07:6b:6a:
7a:dd:b1:0e:b1:2a:6a:66:cb:8d:e3:33:c1:76:31:
b4:9b:0d:6d:09:42:29:67:8d:7c:b3:91:55:3e:36:
5b:8d:2a:7d:65:29:d9:d5:f0:15:83:77:fa:57:9b:
c8:cc:48:53:e3:b4:5e:d9:d2:9a:60:9d:5e:d6:d5:
c5:dd:c5:22:52:0a:f9:55:54:fa:80:b7:b6:c6:d3:
f7:32:06:90:e0:35:c2:53:a1:13:ab:8e:17:c8:ce:
af:90:bf:51:43:60:cc:b2:ba:1b:51:5d:df:95:5d:
2e:1a:c7:59:7f:bf:75:15:d7:00:75:a8:6e:ee:f8:
5c:7d:dc:48:73:fd:77:04:0c:f2:2d:36:b9:d3:5d:
7a:88:dd:ec:53:2e:82:ed:3d:43:e8:9a:bc:4d:cb:
5e:34:78:46:18:20:d7:e2:c5:20:48:61:10:be:4d:
2f:8a:e8:c2:86:39:bc:f8:0a:60:c6:5a:ca:cf:3a:
8e:19:37:14:e3:d2:a4:61:16:06:b9:e9:02:03:58:
f2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8C:F5:24:68:55:EC:C6:F9:C3:D4:5C:7D:8A:35:6E:4D:D4:75:2F
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:47:a4:01:72:68:d8:f8:d1:e5:61:04:8a:fd:af:0d:e6:d8:
97:af:25:79:91:7d:38:dd:c2:b7:e1:54:ae:6e:6b:6f:ef:f8:
44:53:e7:1b:96:84:aa:73:ea:ad:79:f6:93:ea:bc:81:2c:67:
04:a8:c7:cb:43:00:4f:ac:fc:52:74:c4:01:e0:8c:b3:dc:54:
a7:6d:e0:74:f2:65:4f:67:84:3c:1f:57:bc:44:38:2d:49:f6:
5e:59:17:16:14:37:b0:0f:5a:04:96:0c:86:f3:b9:7d:ea:e7:
e4:c9:8c:68:64:09:64:a8:da:53:ac:dc:fb:28:68:aa:3f:75:
76:df:a9:10:f6:49:a1:31:e8:34:94:ce:90:a1:11:d3:5c:7f:
c8:9d:83:4a:55:6e:ca:dc:1e:46:aa:69:e3:ed:97:0f:46:61:
05:39:34:46:59:a5:de:d1:ee:34:9d:71:31:81:0a:33:1e:22:
16:dc:26:af:b8:05:01:2c:46:fc:ee:50:44:df:6f:5d:46:1c:
6c:f2:e9:55:0f:99:b2:76:21:2d:bb:35:b8:70:d2:99:65:ca:
fb:6b:57:7c:66:19:fc:e6:91:58:02:19:8e:7e:eb:d5:fa:a3:
07:ae:6d:2a:aa:11:78:3e:56:bf:ec:6c:08:a5:bc:49:88:b1:
28:65:1b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:10 2026 by rpki-client