Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
File: Afp6rPiShM693j1MEkYvxE3rw4Q.mft (raw, json)
Hash identifier: VxTNYMrp/aIpOa04LHQVEecas8kT7jmCNHYemqeoQgk=
Subject key identifier: 89:74:1B:3E:3D:38:6C:58:EC:23:E6:6A:86:C3:C2:86:AF:A6:F0:C9
Authority key identifier: 01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
Certificate issuer: /CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Certificate serial: 01A0CE9175EA22E1F9797A431048EC3244F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
Manifest number: 1006
Signing time: Wed 23 Sep 2026 14:00:34 +0000
Manifest this update: Wed 23 Sep 2026 14:00:34 +0000
Manifest next update: Thu 24 Sep 2026 14:00:34 +0000
Files and hashes: 1: Afp6rPiShM693j1MEkYvxE3rw4Q.crl (hash: FUUmIR7d5KWJffC4f1Div+uOakbv9/ObHXQTMyWhqtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:75:ea:22:e1:f9:79:7a:43:10:48:ec:32:44:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Validity
Not Before: Sep 23 14:00:34 2026 GMT
Not After : Sep 24 14:00:34 2026 GMT
Subject: CN=89741b3e3d386c58ec23e66a86c3c286afa6f0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:6d:8f:d2:41:0e:7c:09:9f:fe:1f:2e:9b:
29:1d:26:f0:4c:ac:b3:12:99:09:bc:4b:04:3b:e3:
1e:2e:7b:22:35:27:98:bd:55:4a:6e:a2:af:0f:a9:
f7:a3:91:2a:a4:b6:6f:ca:78:8b:6e:8d:28:70:78:
90:8f:02:7b:59:e2:25:0e:dd:a2:e9:82:21:8e:9d:
c4:67:48:92:47:38:8d:39:e8:37:0b:34:34:bf:9c:
73:e6:2f:39:cc:79:3d:1f:e7:40:9f:7d:36:dd:78:
bd:c0:fc:e5:16:16:42:5a:2a:8a:70:29:31:1e:98:
a0:37:89:73:b0:c4:f4:45:a9:54:84:19:29:a2:b1:
7f:5b:10:fc:5c:6f:57:c7:b9:45:48:fe:69:ae:14:
bf:48:db:47:3a:ef:e5:c9:62:5b:eb:a5:7e:8b:67:
8f:ac:e7:2d:3e:9f:ba:cb:1a:79:f3:08:ee:43:ae:
d1:4d:88:d1:f7:5c:9c:a7:db:17:34:46:19:09:b7:
1c:2d:85:dc:c4:e6:b1:21:2d:a5:b6:1c:30:46:0a:
92:be:5a:e9:32:32:b7:09:98:46:f7:fc:fe:b8:2a:
9c:1e:18:61:dd:71:7b:f9:88:75:e0:2b:6c:21:8f:
0c:60:bc:24:c8:e2:37:a0:bc:c7:64:17:12:df:d2:
0f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:74:1B:3E:3D:38:6C:58:EC:23:E6:6A:86:C3:C2:86:AF:A6:F0:C9
X509v3 Authority Key Identifier:
keyid:01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:0f:54:f9:8e:49:d3:d6:d3:63:bf:42:e5:42:03:8e:ac:7a:
e0:b5:36:bb:b0:23:2c:c1:4d:37:03:87:83:e1:19:88:02:7f:
4b:c9:fa:08:93:15:78:6f:00:c0:74:ce:16:3b:8d:05:d8:37:
ef:f7:73:83:af:6e:ef:27:24:3a:fc:86:12:d9:c9:51:3a:25:
a8:96:92:9e:84:c8:14:ee:d0:c7:f4:c7:04:b2:37:d3:f0:04:
1f:22:57:fd:35:ea:be:06:51:66:5c:f6:8c:2a:5d:5f:85:be:
10:e2:d3:d7:7d:6a:1c:11:7a:d9:c6:eb:5f:32:8f:49:42:b4:
25:3c:75:b1:98:ab:df:11:e6:55:14:6a:9c:de:bf:0a:5b:f0:
80:34:42:55:4a:bf:23:d4:5a:be:84:60:f6:f9:63:26:b9:7d:
a3:ad:8c:bd:73:f5:22:ed:44:02:c4:fa:8b:30:d7:f4:61:fb:
1c:5a:c8:b4:a7:ef:c5:56:4d:60:a5:10:e2:a7:4d:30:7d:24:
fb:d3:a8:29:f6:07:82:2e:f5:04:b5:80:e6:ef:68:87:44:7d:
10:9e:f1:94:53:35:4f:b6:d1:75:ee:f5:76:97:a8:12:2f:22:
22:fb:9c:7a:86:96:87:cf:dc:ff:c6:e3:da:a1:13:99:c3:fc:
0d:4f:79:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:19:44 2026 by rpki-client