Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
File: Afp6rPiShM693j1MEkYvxE3rw4Q.mft (raw, json)
Hash identifier: i4/jWGaEbyKfMmIw5gRcz6oLiLnL6VXW9DV3tAHOn1w=
Subject key identifier: 25:A4:7B:C1:72:D6:FD:0C:10:26:50:62:08:41:1A:E2:4F:99:3C:7E
Authority key identifier: 01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
Certificate issuer: /CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Certificate serial: 019F8FEC6D309E6F910F7AF0219587FFEE74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
Manifest number: 0F61
Signing time: Thu 23 Jul 2026 17:01:04 +0000
Manifest this update: Thu 23 Jul 2026 17:01:04 +0000
Manifest next update: Fri 24 Jul 2026 17:01:04 +0000
Files and hashes: 1: Afp6rPiShM693j1MEkYvxE3rw4Q.crl (hash: MoLXt4c9knqnEfADgrsEBp77RkDM11rreMYtDdcHF+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:6d:30:9e:6f:91:0f:7a:f0:21:95:87:ff:ee:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Validity
Not Before: Jul 23 17:01:04 2026 GMT
Not After : Jul 24 17:01:04 2026 GMT
Subject: CN=25a47bc172d6fd0c1026506208411ae24f993c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:7b:3a:b5:43:c9:b8:b2:15:30:f6:8e:f8:
07:f6:63:ce:55:e6:dd:8a:56:97:01:51:cd:a8:1b:
c4:e7:cf:d7:2c:8b:42:ec:cd:2c:2f:c9:49:5e:1e:
9f:14:27:8d:c4:a1:ae:d0:79:ad:63:48:ce:34:d2:
15:2f:93:ae:e3:02:4d:00:e5:e2:38:c8:12:99:76:
f1:99:ab:36:57:fb:a1:4a:1b:e4:24:7b:d2:56:03:
f8:32:c6:a8:45:74:a0:a9:60:e8:ee:6c:01:92:3a:
3e:d0:41:fe:55:76:67:6b:fa:ed:a3:23:eb:be:78:
00:df:98:a8:22:7d:31:1b:30:c8:88:e5:67:28:9b:
3a:3a:32:eb:2b:e3:0a:fd:6d:42:17:ed:bb:47:12:
a5:7d:81:86:f0:61:0d:b6:c7:c3:f0:36:f0:64:f6:
d9:a9:b2:f1:c3:e7:4e:0d:79:f2:10:f9:e7:b6:75:
c8:df:9f:d8:2e:bd:12:f9:87:d4:51:a7:2a:0d:d5:
57:a5:f5:f1:cd:4f:ec:99:82:87:f4:39:4a:f2:b8:
a0:72:2d:88:da:27:51:0e:76:4f:73:ab:00:22:2a:
95:94:e7:9e:b2:e7:4a:06:7f:4f:2b:4b:b2:09:55:
fc:8c:3c:e1:69:49:e8:d0:5b:65:2f:ff:58:85:e7:
1e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A4:7B:C1:72:D6:FD:0C:10:26:50:62:08:41:1A:E2:4F:99:3C:7E
X509v3 Authority Key Identifier:
keyid:01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f9:cc:fe:2e:d7:5e:c5:ee:f4:7e:6c:fd:d0:ae:ad:e3:8d:
f0:a3:18:1d:ff:13:20:26:25:36:2e:1f:04:28:87:36:59:da:
96:79:41:93:fa:23:c5:c0:59:35:cf:31:df:33:88:6f:4e:2a:
fe:78:58:1b:39:ab:3a:ab:fa:40:77:6b:fb:a7:68:b8:bb:f5:
db:49:c9:88:e3:b6:79:d0:a3:49:8c:0f:37:24:c0:a7:39:76:
67:b4:22:8b:86:79:50:82:22:5a:7c:77:bb:ae:55:18:94:24:
c6:6d:ce:7f:44:d6:69:ce:d1:48:8b:18:2c:92:c8:70:25:90:
d1:6a:d1:75:45:f6:39:1a:d5:07:2b:b2:2b:f0:67:9c:35:16:
5f:53:5a:de:ff:b2:ec:e8:0c:0d:43:ae:71:d4:e4:5a:e8:9b:
1b:14:60:67:b1:42:38:9e:ea:90:0b:ba:1f:2f:c0:b6:03:b4:
f3:88:57:0c:0c:d8:40:6b:c1:b3:45:20:63:5f:c0:1e:c1:e0:
59:35:23:a9:f4:55:11:56:70:e5:4c:4b:f0:a8:da:28:87:84:
ec:a8:b6:4f:a5:60:41:e3:a1:5e:a9:ea:aa:59:da:52:7c:8d:
22:f0:36:67:50:55:8c:33:88:0e:27:bb:da:15:f0:07:44:21:
1d:22:2c:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7G0wnm+RD3rwIZWH/+50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZmE3YWFjZjg5Mjg0Y2ViZGRlM2Q0YzEyNDYyZmM0NGRl
YmMzODQwHhcNMjYwNzIzMTcwMTA0WhcNMjYwNzI0MTcwMTA0WjAzMTEwLwYDVQQD
EygyNWE0N2JjMTcyZDZmZDBjMTAyNjUwNjIwODQxMWFlMjRmOTkzYzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PZ7OrVDybiyFTD2jvgH9mPOVebd
ilaXAVHNqBvE58/XLItC7M0sL8lJXh6fFCeNxKGu0HmtY0jONNIVL5Ou4wJNAOXi
OMgSmXbxmas2V/uhShvkJHvSVgP4MsaoRXSgqWDo7mwBkjo+0EH+VXZna/rtoyPr
vngA35ioIn0xGzDIiOVnKJs6OjLrK+MK/W1CF+27RxKlfYGG8GENtsfD8DbwZPbZ
qbLxw+dODXnyEPnntnXI35/YLr0S+YfUUacqDdVXpfXxzU/smYKH9DlK8rigci2I
2idRDnZPc6sAIiqVlOeesudKBn9PK0uyCVX8jDzhaUno0FtlL/9YheceFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWke8Fy1v0MECZQYghBGuJPmTx+MB8GA1UdIwQY
MBaAFAH6eqz4koTOvd49TBJGL8RN68OEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWZwNnJQaVNoTTY5M2oxTUVrWXZ4RTNydzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy82NDVlMWEtZWY3Mi00OTIyLWFhOWEt
N2JlNDNlZGRmMmNhLzEvQWZwNnJQaVNoTTY5M2oxTUVrWXZ4RTNydzRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy82NDVlMWEtZWY3Mi00OTIyLWFhOWEtN2JlNDNlZGRmMmNh
LzEvQWZwNnJQaVNoTTY5M2oxTUVrWXZ4RTNydzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPnM/i7X
XsXu9H5s/dCureON8KMYHf8TICYlNi4fBCiHNlnalnlBk/ojxcBZNc8x3zOIb04q
/nhYGzmrOqv6QHdr+6douLv120nJiOO2edCjSYwPNyTApzl2Z7Qii4Z5UIIiWnx3
u65VGJQkxm3Of0TWac7RSIsYLJLIcCWQ0WrRdUX2ORrVByuyK/BnnDUWX1Na3v+y
7OgMDUOucdTkWuibGxRgZ7FCOJ7qkAu6Hy/AtgO084hXDAzYQGvBs0UgY1/AHsHg
WTUjqfRVEVZw5UxL8KjaKIeE7Ki2T6VgQeOhXqnqqlnaUnyNIvA2Z1BVjDOIDie7
2hXwB0QhHSIs/Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:48:39 2026 by rpki-client