Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
File: afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json)
Hash identifier: 1x8WzgvqzolIKcG/9L2Vj9xkxWMHvbr+t9s14ugTe84=
Subject key identifier: E6:3E:11:7A:D5:65:05:63:4D:A5:9F:30:B2:87:C8:68:FE:42:57:04
Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
Certificate issuer: /CN=69f1a6b4804bb6a3854a44e1069f257267417805
Certificate serial: 019D27A90DBC2DEA2F71AFE20A53DC0CBDD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
Manifest number: 065D
Signing time: Thu 26 Mar 2026 01:01:23 +0000
Manifest this update: Thu 26 Mar 2026 01:01:23 +0000
Manifest next update: Fri 27 Mar 2026 01:01:23 +0000
Files and hashes: 1: EWm46AI1rMUSMZthGRFJLKzdg5w.roa (hash: VkQfmMtNp47GhBpBHPy5YMBbYpA58g2YnMi7hmT4lRU=)
2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: mkL/k7fSGM1SgCIfqEVMnIYymKc2vkJLnCTqWMcQ1kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:0d:bc:2d:ea:2f:71:af:e2:0a:53:dc:0c:bd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805
Validity
Not Before: Mar 26 01:01:23 2026 GMT
Not After : Mar 27 01:01:23 2026 GMT
Subject: CN=e63e117ad56505634da59f30b287c868fe425704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:6a:31:06:02:59:43:9f:63:e8:a8:59:9d:
b2:aa:1f:f2:b5:52:d5:5d:b1:dc:b3:dd:a2:69:75:
84:34:47:ff:b5:a5:b8:c2:74:f1:e7:12:34:f8:5f:
31:5a:95:d6:46:0f:1c:1f:ad:a5:9b:89:cb:03:6a:
89:62:b2:33:75:7e:da:f8:76:18:ac:e8:10:0f:b6:
31:a5:6f:24:70:ab:47:6a:5b:57:0c:68:4e:83:4f:
2f:c5:b5:b1:63:40:f6:75:1f:e8:3b:77:49:b9:c0:
d8:3c:dd:3c:c9:0b:3e:ad:35:12:7e:1f:cc:43:dc:
69:8f:fe:f7:82:92:83:bc:d5:4f:5b:8d:85:1a:14:
ea:36:58:cb:1f:49:08:54:4b:22:df:fa:d1:90:a1:
9d:6f:ef:94:67:36:68:ef:7b:52:94:6e:a9:ee:c1:
01:50:c7:f6:50:13:f6:c0:f7:64:9b:33:95:4e:e4:
48:b4:0f:40:17:5f:7f:0d:ae:b6:d5:cc:d1:40:5b:
aa:0c:47:5c:2f:60:48:eb:91:4f:90:4d:66:e0:f4:
52:63:9f:30:6c:0d:f1:02:ac:e8:75:70:9d:65:68:
79:99:69:24:a6:9f:b6:68:83:95:20:3d:66:ce:44:
5c:93:4b:72:8c:87:67:b8:89:cb:e4:a3:68:c8:9e:
50:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3E:11:7A:D5:65:05:63:4D:A5:9F:30:B2:87:C8:68:FE:42:57:04
X509v3 Authority Key Identifier:
keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9c:87:ab:67:4b:10:9f:96:21:3c:63:5b:0c:d8:65:74:40:
2c:94:4c:ee:33:06:e9:44:8d:da:7b:68:d5:e2:35:00:41:7b:
a3:80:00:60:b1:11:71:c3:ed:22:94:de:5e:ce:de:9b:97:18:
8d:24:f6:34:98:cb:8f:8b:ae:22:03:4a:35:be:e1:ca:3f:b4:
1b:52:2f:02:85:7e:9d:d0:d5:db:fd:87:a0:82:46:df:35:bf:
89:78:97:4b:20:07:a0:a0:4b:c6:80:c2:05:a9:28:c6:16:8e:
0c:16:46:10:b5:2f:6e:99:99:db:ca:14:c3:92:39:90:bc:2a:
d9:0a:2d:4a:20:7d:1b:8a:95:9d:ab:de:16:91:1f:03:f3:0a:
bb:be:64:15:5a:ec:bc:9f:de:4e:ff:83:dc:99:8e:7d:3f:35:
47:b1:08:0e:bc:a4:25:06:ab:b8:ea:cd:6d:8d:13:05:61:47:
36:74:df:71:65:f8:c2:a0:e2:24:52:04:2f:cd:5b:08:c2:df:
fe:95:0b:ed:ef:22:9c:2f:c8:fd:78:f5:b0:69:d7:4d:4b:16:
cf:24:b6:6b:29:33:e4:c5:15:7d:22:38:6f:f9:8a:57:7b:fc:
7e:68:c8:c9:5b:c2:df:09:53:5d:f8:e1:77:c7:e2:d7:cd:b1:
fe:35:9e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:02 2026 by rpki-client