Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
File: afY2pbazoordg_l0Rtewg7lMPa4.mft (raw, json)
Hash identifier: MMfHTeLQm2QC5/7GrkHsbheFu98fNgoJTs0C/rena4U=
Subject key identifier: 04:0E:2C:4A:EC:1F:4C:90:D1:F8:F4:47:25:7B:AE:28:45:22:CD:E4
Authority key identifier: 69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
Certificate issuer: /CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Certificate serial: 019D292917E8F780719ACB4757EF551696F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
Manifest number: 0857
Signing time: Thu 26 Mar 2026 08:00:52 +0000
Manifest this update: Thu 26 Mar 2026 08:00:52 +0000
Manifest next update: Fri 27 Mar 2026 08:00:52 +0000
Files and hashes: 1: afY2pbazoordg_l0Rtewg7lMPa4.crl (hash: UKZ2bu7ydmlKUKuPsNAHT6+bR5AkEeJiogpau9ul5L0=)
2: yVIh76xTZ4QX7LFk-xKKVayLUYw.roa (hash: QHMxu1cY+b4CW+lhAzUzhzJoH+xpmKyHhi16mUYw9vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:17:e8:f7:80:71:9a:cb:47:57:ef:55:16:96:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Validity
Not Before: Mar 26 08:00:52 2026 GMT
Not After : Mar 27 08:00:52 2026 GMT
Subject: CN=040e2c4aec1f4c90d1f8f447257bae284522cde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:a2:6d:22:b5:23:61:0b:01:82:de:01:62:
29:2c:2e:27:50:ab:91:a4:dd:01:2f:f9:30:77:91:
0f:fc:5e:ad:e2:a3:d8:11:aa:f2:ca:a8:db:91:a5:
db:17:17:8d:5b:27:6d:28:b5:da:57:bf:17:e4:e4:
84:10:9c:01:3c:b7:b0:1e:8d:97:c0:03:c6:96:ea:
a9:16:70:7f:20:c6:18:53:97:74:29:5a:9c:aa:d4:
68:f8:1a:e0:9f:20:bd:6c:91:73:50:24:ce:90:79:
ee:25:33:56:89:c6:10:81:6c:d0:c6:b4:42:02:f8:
32:f5:a0:af:44:25:83:8a:45:cd:62:19:d1:15:91:
ef:8e:9f:90:04:13:98:55:3d:0c:22:93:5c:a0:41:
ea:79:e2:7b:b6:3d:ba:62:a9:ee:bc:8c:b3:fb:84:
9a:ae:bf:3e:ce:83:37:f4:40:f4:3c:79:ff:cb:28:
5d:7b:d4:a7:b1:22:ba:08:d4:60:83:92:2e:56:2a:
14:ec:99:c5:6a:f5:0b:bc:38:f6:4b:2b:e5:4c:d2:
4a:c9:35:4c:90:5e:ec:ca:6c:9e:41:82:5b:66:12:
53:73:6a:bc:98:f9:8b:3c:8f:6c:51:ec:f9:2e:3d:
be:60:4c:b1:a8:fa:1e:4c:82:d8:5c:42:7c:d3:79:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0E:2C:4A:EC:1F:4C:90:D1:F8:F4:47:25:7B:AE:28:45:22:CD:E4
X509v3 Authority Key Identifier:
keyid:69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:d0:9e:e8:5a:99:69:25:fd:c2:f2:da:49:02:16:df:8f:46:
36:63:f0:70:80:a7:34:ee:f8:98:6c:5a:bd:3f:e4:bd:f2:52:
19:8c:08:f3:d4:c2:67:c8:27:dc:44:67:d7:de:87:01:dd:1c:
ac:ee:13:79:b2:0e:33:b5:ff:96:f4:f3:52:35:07:4a:14:87:
c4:3d:e8:2b:2e:b4:0c:85:7c:62:87:d2:06:54:2b:73:07:8a:
41:cf:bc:64:53:61:0f:09:cb:8c:0a:9d:0a:ae:98:cd:79:b9:
4b:00:84:0d:6d:58:9e:0b:d4:cf:55:40:a2:d6:b8:36:e9:a0:
04:6c:43:c1:2d:58:cf:46:52:43:04:e5:af:c8:1d:bb:92:5c:
ec:c5:a3:8b:f6:ef:0b:6b:ab:bd:e8:52:66:28:01:03:bb:8d:
bb:27:d7:18:a0:10:48:f0:69:eb:e2:46:51:d5:e4:c3:de:ee:
82:7b:fc:9f:f7:2a:e5:cd:99:85:f5:87:15:79:3c:84:ae:2e:
89:e6:76:e7:25:94:21:c6:0f:fa:95:b2:89:ba:3a:e6:24:46:
78:76:14:cd:2f:5c:c9:54:fb:00:c9:3a:9d:e0:46:e3:4b:30:
4a:b2:10:09:dd:f0:31:19:21:ab:15:29:5d:e1:92:6c:00:69:
41:18:3c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:40:32 2026 by rpki-client