Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier: fiwzo8S7JcAVls/n9H9SVnOvztnG4Cvg4gYIUQ3Ffaw=
Subject key identifier: 0F:04:4D:07:0C:FE:BA:1D:63:46:7E:BC:C2:E7:04:BC:17:D4:0C:A6
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 019D258405BE77996D013301892987C8F589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 15:01:42 +0000
Manifest this update: Wed 25 Mar 2026 15:01:42 +0000
Manifest next update: Thu 26 Mar 2026 15:01:42 +0000
Files and hashes: 1: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: 9hC44kHcrmo10CerFclCvn58Q9Woerb4bZ5qoujZrW8=)
2: NcBIwWrVfFqKGC-Ejlu0skUAVME.roa (hash: QpyQXhGs4Yf3p6aesaO1I7bW/lGukmfPe/wqoZKA1Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:05:be:77:99:6d:01:33:01:89:29:87:c8:f5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: Mar 25 15:01:42 2026 GMT
Not After : Mar 26 15:01:42 2026 GMT
Subject: CN=0f044d070cfeba1d63467ebcc2e704bc17d40ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:17:e2:ba:91:ff:f3:7e:51:0f:9d:d9:6a:a5:
bd:fc:6c:12:a1:25:c2:90:a3:96:ef:b8:d3:4e:a6:
c4:da:b7:f9:ef:58:31:88:47:fc:0b:f5:b7:b5:45:
73:5a:47:0b:73:7e:31:fa:2f:de:39:a2:b4:22:79:
60:61:1d:f8:d0:e4:65:05:43:42:06:87:8a:33:94:
74:25:38:98:00:81:3b:93:97:a9:9c:bf:71:8a:c4:
1e:a0:b1:55:b4:fe:5d:49:d6:61:73:97:51:82:9a:
91:9d:d5:c0:ef:53:74:da:93:38:79:a0:b6:d6:c7:
41:d1:0c:98:85:c9:8c:c8:f7:ca:32:a2:f3:f7:81:
52:87:24:32:28:ef:42:12:ca:88:78:f0:e8:26:63:
16:52:c3:f0:12:3c:77:77:6b:11:30:c9:20:34:d4:
ee:1b:a6:14:e5:b5:9f:30:bc:5e:48:ed:2d:90:77:
22:f7:78:e4:2f:6f:a2:e7:5f:b8:48:ee:16:02:96:
8a:49:c2:5e:8a:18:8d:69:a0:a4:46:3e:0a:2c:09:
b6:e6:a9:79:6e:76:d1:0d:b8:37:3b:21:66:61:63:
e3:dc:c0:72:1a:f5:0f:32:05:3e:79:46:fa:37:0a:
23:82:0c:85:06:e7:03:2f:c9:26:36:fb:af:e7:d8:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:04:4D:07:0C:FE:BA:1D:63:46:7E:BC:C2:E7:04:BC:17:D4:0C:A6
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a9:1c:b2:23:83:39:63:12:8d:3b:e8:1a:f8:bc:fa:4b:37:
f6:9b:16:6b:7a:5a:d0:83:b6:44:15:61:f5:31:4a:37:f1:36:
7f:0e:b4:15:84:eb:c8:1c:60:30:3a:5c:05:ca:37:02:fe:7f:
b1:71:d2:c1:21:6f:1a:ff:99:6d:32:f2:5f:63:af:74:b3:b2:
12:f9:e8:e3:1b:50:60:5b:9c:c5:49:22:87:11:77:a5:61:fc:
94:96:d1:b1:6f:70:89:d8:bc:59:d3:ed:fc:64:3a:4d:c6:d1:
76:ac:9a:db:bb:b8:59:a9:d6:6e:dd:fa:d1:47:34:af:a9:a7:
19:97:f3:53:45:c9:b7:c9:64:b1:a3:a2:42:12:d2:63:19:84:
00:02:76:e8:6a:4c:68:f1:e3:8a:75:63:28:51:e5:5d:04:44:
24:fb:9a:b8:63:a9:58:af:cf:cb:55:eb:90:54:39:f7:e2:db:
d8:d5:f3:3f:8c:a9:a2:c2:83:89:7a:21:02:07:01:de:9a:59:
dd:5a:59:d5:59:7e:8f:54:c5:e1:40:bc:5f:eb:0f:ff:83:b5:
43:90:f3:57:4c:ed:2a:d8:2e:7a:d8:ad:da:33:9c:37:19:79:
f7:6f:60:03:ac:4a:8f:43:19:a3:fe:e2:90:6d:46:ec:96:91:
f1:a4:96:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:27 2026 by rpki-client