Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
File: aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json)
Hash identifier: OChVoRC3njq7IGlCmkg9i1lUwydoR3ehmQYN9x6XDf4=
Subject key identifier: 4B:12:75:41:68:D4:2D:F5:1A:1C:9C:86:B0:87:97:9F:77:9C:33:76
Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
Certificate issuer: /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Certificate serial: 01A0DCBB71CD4D22ACDA689A7350A3BA0B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 08:01:06 +0000
Manifest this update: Sat 26 Sep 2026 08:01:06 +0000
Manifest next update: Sun 27 Sep 2026 08:01:06 +0000
Files and hashes: 1: MFYkRU3grNRPvLbyPaISwxG8sRc.roa (hash: Kn7dq6VQMBUK2el7CpBxhmeZzkXVRbxFBsXov0HWD6Q=)
2: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: aXt+853UguxSPjTDafWtgQUpzGnMcJ/63kCaYrkgFx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:71:cd:4d:22:ac:da:68:9a:73:50:a3:ba:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Validity
Not Before: Sep 26 08:01:06 2026 GMT
Not After : Sep 27 08:01:06 2026 GMT
Subject: CN=4b12754168d42df51a1c9c86b087979f779c3376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:04:2e:e1:a7:a4:89:22:9a:5c:66:99:e7:a7:
d0:44:0a:ae:58:5b:37:6d:6f:54:c3:4f:a5:df:9f:
1e:18:7b:8e:b5:3b:52:3a:8c:f7:92:be:ba:8c:11:
00:0d:7e:7a:89:81:41:51:d5:9e:01:96:56:11:41:
dd:06:99:e9:37:74:13:be:53:cd:f8:cb:24:0a:d6:
b7:5d:72:2d:b8:9d:95:a6:6c:92:93:e3:a3:ad:7f:
a6:88:4c:8d:47:4b:76:a5:28:db:b0:ac:4b:a4:57:
6c:a9:2f:ce:cd:ba:53:c5:6c:23:87:2c:9b:21:69:
87:54:c0:51:84:2d:ee:5a:03:3a:09:9b:47:bf:d7:
97:91:99:b1:a4:4e:cc:71:c9:73:c7:d9:97:1a:0a:
31:40:e9:12:56:8f:f3:ad:4c:2b:8e:20:77:fd:9d:
8c:73:98:fc:95:90:e9:83:24:82:3c:e7:b8:ab:dc:
a2:11:f9:00:22:57:50:12:93:9f:31:9e:40:9e:20:
03:0c:e9:a4:a7:d7:90:41:1d:af:b9:b1:95:e1:ba:
d8:20:1c:54:da:f0:2a:7e:7a:3f:37:04:91:10:56:
26:72:ce:ed:3c:17:e7:ab:e4:6f:7a:bc:0e:3f:e8:
ab:49:75:90:1c:ff:3e:7e:d5:f9:5e:1f:58:8a:d6:
ae:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:12:75:41:68:D4:2D:F5:1A:1C:9C:86:B0:87:97:9F:77:9C:33:76
X509v3 Authority Key Identifier:
keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ea:ad:41:c3:c3:16:a7:f8:06:a6:d1:77:09:50:5a:dc:22:
85:22:4c:05:07:90:df:2e:6d:e4:14:82:48:16:8a:4c:8d:41:
81:6b:43:07:fd:80:c8:eb:63:4e:2a:61:a4:a9:46:6b:03:04:
a8:19:12:e9:a6:25:15:69:7e:78:0b:8d:3b:d3:4a:57:5f:05:
ea:b4:84:2a:40:a7:8c:f2:79:30:f1:9f:10:cb:e7:c4:e3:90:
d1:07:48:b3:12:a6:3c:54:02:c7:e6:39:98:3d:10:9d:e8:24:
01:fa:01:fe:29:ed:bf:3d:d8:6f:69:7b:9a:42:cf:b1:73:b7:
c0:28:ad:4c:79:dd:20:c1:de:83:cb:0d:4b:79:1c:3e:d2:38:
84:38:f0:3d:36:1e:28:bf:f0:8a:f6:bb:75:6b:14:c9:9f:ca:
31:a2:b8:e6:57:91:40:0a:43:ff:32:6f:a0:a5:32:ea:e8:c0:
e4:1f:41:62:d5:61:1f:4d:85:32:4b:bd:9e:92:6b:79:9e:a1:
55:59:93:19:c6:a2:f2:85:67:d8:c2:00:2c:92:d1:37:91:1d:
be:3b:d6:1f:fe:5d:aa:c0:6b:a6:30:c4:b2:52:0b:7b:b5:55:
8f:b4:38:63:a4:3a:7c:d6:fe:e1:65:cf:a7:0e:7a:d9:3a:aa:
f5:74:34:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcu3HNTSKs2miac1CjugtAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NTdhOWJiMjk3ZjBiM2M0NDRhYjBhZjY3M2E1Mjc1MGU5
NzliNGUwHhcNMjYwOTI2MDgwMTA2WhcNMjYwOTI3MDgwMTA2WjAzMTEwLwYDVQQD
Eyg0YjEyNzU0MTY4ZDQyZGY1MWExYzljODZiMDg3OTc5Zjc3OWMzMzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAQu4aekiSKaXGaZ56fQRAquWFs3
bW9Uw0+l358eGHuOtTtSOoz3kr66jBEADX56iYFBUdWeAZZWEUHdBpnpN3QTvlPN
+MskCta3XXItuJ2VpmySk+OjrX+miEyNR0t2pSjbsKxLpFdsqS/OzbpTxWwjhyyb
IWmHVMBRhC3uWgM6CZtHv9eXkZmxpE7Mcclzx9mXGgoxQOkSVo/zrUwrjiB3/Z2M
c5j8lZDpgySCPOe4q9yiEfkAIldQEpOfMZ5AniADDOmkp9eQQR2vubGV4brYIBxU
2vAqfno/NwSREFYmcs7tPBfnq+RverwOP+irSXWQHP8+ftX5Xh9YitauRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsSdUFo1C31GhychrCHl593nDN2MB8GA1UdIwQY
MBaAFGhXqbspfws8REqwr2c6UnUOl5tOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUZlcHV5bF9DenhFU3JDdlp6cFNkUTZYbTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85ZDBhMTUtZDU0Ni00OTcwLTlhODEt
ODU5NmMyYWY5ZGNjLzEvYUZlcHV5bF9DenhFU3JDdlp6cFNkUTZYbTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85ZDBhMTUtZDU0Ni00OTcwLTlhODEtODU5NmMyYWY5ZGNj
LzEvYUZlcHV5bF9DenhFU3JDdlp6cFNkUTZYbTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAveqtQcPD
Fqf4BqbRdwlQWtwihSJMBQeQ3y5t5BSCSBaKTI1BgWtDB/2AyOtjTiphpKlGawME
qBkS6aYlFWl+eAuNO9NKV18F6rSEKkCnjPJ5MPGfEMvnxOOQ0QdIsxKmPFQCx+Y5
mD0QnegkAfoB/intvz3Yb2l7mkLPsXO3wCitTHndIMHeg8sNS3kcPtI4hDjwPTYe
KL/wiva7dWsUyZ/KMaK45leRQApD/zJvoKUy6ujA5B9BYtVhH02FMku9npJreZ6h
VVmTGcai8oVn2MIALJLRN5EdvjvWH/5dqsBrpjDEslILe7VVj7Q4Y6Q6fNb+4WXP
pw562Tqq9XQ04w==
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:44:19 2026 by rpki-client