
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
File: afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json)
Hash identifier: 7AcKh9tgt2xDBHSgOmde0XHlpRBffUDNRdxI+gFihiI=
Subject key identifier: 16:1D:B6:D2:5B:B7:55:E1:88:F5:16:EE:83:C2:91:75:8E:CE:C9:E9
Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
Certificate issuer: /CN=69f1a6b4804bb6a3854a44e1069f257267417805
Certificate serial: 01A0E1AB1C449CDD9A50FDCEC79591063664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
Manifest number: 084B
Signing time: Sun 27 Sep 2026 07:01:22 +0000
Manifest this update: Sun 27 Sep 2026 07:01:22 +0000
Manifest next update: Mon 28 Sep 2026 07:01:22 +0000
Files and hashes: 1: EWm46AI1rMUSMZthGRFJLKzdg5w.roa (hash: VkQfmMtNp47GhBpBHPy5YMBbYpA58g2YnMi7hmT4lRU=)
2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: O+QcCGDQiWxTS6sAMtbnNT9sBemtHWd8J3GBbqLTKC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ab:1c:44:9c:dd:9a:50:fd:ce:c7:95:91:06:36:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805
Validity
Not Before: Sep 27 07:01:22 2026 GMT
Not After : Sep 28 07:01:22 2026 GMT
Subject: CN=161db6d25bb755e188f516ee83c291758ecec9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:69:94:b5:02:e3:f4:1a:24:38:eb:f9:96:d3:
d1:2c:c1:d4:51:cb:24:b4:b1:b3:53:34:53:d6:f3:
f1:7f:c7:fd:71:26:50:2d:40:d6:70:4e:ad:27:4a:
6f:28:58:87:6f:33:89:92:6f:c7:e3:33:f0:8f:78:
dc:d3:d5:72:b6:7c:1c:23:68:8a:18:10:55:04:a3:
ba:ed:05:1e:cd:09:4f:d3:b6:c6:c1:c3:f4:09:bd:
fa:1a:57:7a:36:e0:a6:49:01:e8:0d:82:2e:29:74:
29:8c:59:2e:2d:91:6a:04:e7:aa:51:31:88:97:2c:
b5:58:fd:66:2d:50:f1:61:84:3a:8d:65:59:e4:d8:
3c:0e:5d:be:04:de:21:2e:87:d5:7e:83:3f:9c:01:
d0:7b:7b:06:5b:ea:95:a3:dc:7e:43:c2:7d:20:3b:
99:34:67:d0:f9:5f:0d:fa:3b:b8:8d:7f:92:0f:a8:
0e:44:d1:a4:c3:7c:4c:26:19:0e:fc:3f:54:72:f0:
e1:22:10:28:e4:30:6e:d1:e7:f0:93:59:c3:68:d3:
33:1c:77:51:15:9e:3b:60:da:1e:27:9f:91:e3:97:
43:fc:04:eb:05:b1:bd:34:9e:67:62:95:f1:3c:66:
0d:b4:5f:d2:2f:27:9b:9c:50:cb:bc:d0:87:ce:89:
57:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1D:B6:D2:5B:B7:55:E1:88:F5:16:EE:83:C2:91:75:8E:CE:C9:E9
X509v3 Authority Key Identifier:
keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1f:54:ca:52:c3:e2:bb:06:7a:4a:47:81:e1:69:d4:46:aa:
9b:a3:63:2c:e5:a9:60:ce:60:86:6e:ae:2f:61:78:b7:3c:5f:
6b:b7:06:77:c6:db:dd:52:af:0f:fc:8a:62:9e:b4:3f:d0:39:
d6:94:dc:20:97:a4:51:b9:5d:03:62:2a:1b:b9:6e:1d:2c:d0:
36:cf:3a:c8:7e:fd:26:2c:a3:37:04:63:ff:60:49:37:c1:2b:
12:85:1d:5f:70:e3:9d:2e:29:1d:ea:2d:a2:08:dd:1b:7f:db:
34:f7:8c:97:1c:d2:37:12:af:b6:78:ed:60:12:d0:c4:dd:55:
d6:35:05:cd:0a:bf:d5:1a:9f:a4:1b:d6:60:ee:0d:b8:ef:c1:
bc:62:e2:b7:f0:33:31:d6:32:f1:67:55:d9:cb:e8:cf:d9:ba:
0d:05:b8:13:60:0a:dc:38:ef:aa:9e:09:eb:13:68:4c:5d:b5:
45:5a:9f:58:97:fb:73:0e:e1:e8:e0:12:99:6a:15:61:0b:9b:
ed:b8:91:cf:38:41:fe:96:cf:c2:2e:7d:ac:6d:02:3d:6c:13:
03:ba:59:9f:59:16:35:8c:70:9e:a7:de:f1:a9:3a:81:df:f5:
f2:89:48:94:f4:94:8a:ef:ec:40:13:77:42:c8:e5:d9:bc:cb:
a8:f8:15:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:13:26 2026 by rpki-client