Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File: AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier: sGrYIa6P6WsMK3EpNngOo6f6CoqKN8dcm6ofsTHMdCI=
Subject key identifier: C8:6D:EF:14:5C:04:37:5A:86:4E:34:81:CF:A3:B7:01:CF:93:ED:C9
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial: 01A0CA10071E2F01342821795C585728C860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number: 1A6D
Signing time: Tue 22 Sep 2026 17:00:43 +0000
Manifest this update: Tue 22 Sep 2026 17:00:43 +0000
Manifest next update: Wed 23 Sep 2026 17:00:43 +0000
Files and hashes: 1: 9M-CJkVBZVuqIwi3Sawh0isCz1k.roa (hash: aFU0pADsAbTvFke0dF4U47/0s76HwBtoQCpl6QnSuNI=)
2: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: 5D4syI7Omz2oXke/fuN71Gh8fjmhFpGFCL7lHV4l1nY=)
3: KbY29WtKZkz8Fbjj7QvLlg811Iw.roa (hash: vGh5FY7zuISKMd7QAir+eppKFgiFx2llO5uFQh7FV0A=)
4: Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa (hash: lpodXqk6t7MJFjfZg1Uow8LLK/4R3ylcdMkmlTgRneo=)
5: hkJYoKxZ5NaqYkSY0GG7dfC0J6M.roa (hash: M6l2Qx3MyNr2ADezdHbYqYOeyWWrHzzKzTBcWubDLyY=)
6: iN3PbeV3-UffGNWyXfh7JHJfK74.roa (hash: JtoeR6EU9pVtvyEClltI2vcG5Q/h7OJRN/rUzf7IfP8=)
7: qydppjeYfUzDVxdV73Ghn9vaAYk.roa (hash: F/o5ke8f18yC9oKEjHkU0hNCPxAS0/yMbN5QTK0st0g=)
8: sH1teYqG2FqEXd7RfMCaBcOnmaw.roa (hash: suxWcXpZV2IMJ73fGzjwM37LJ58quwhaki1YE7N0sRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:10:07:1e:2f:01:34:28:21:79:5c:58:57:28:c8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Validity
Not Before: Sep 22 17:00:43 2026 GMT
Not After : Sep 23 17:00:43 2026 GMT
Subject: CN=c86def145c04375a864e3481cfa3b701cf93edc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:b1:a4:fb:46:26:ae:85:34:74:a9:70:eb:
ef:eb:0b:81:c1:8e:b1:b9:ec:1d:42:3d:4b:66:8d:
a2:1b:d9:6f:47:59:b2:d8:bb:87:58:e6:d1:c4:bf:
7d:e7:f4:e1:78:39:aa:9e:c6:f6:c6:af:bd:f7:0c:
84:fd:ce:c7:5b:8b:9d:8c:d7:1b:38:e4:40:79:65:
00:8a:92:76:0e:e5:2e:2e:52:29:bb:30:c0:58:3f:
33:db:c0:5a:31:b5:c4:91:da:6d:71:a6:77:be:24:
ec:e4:6c:8f:e8:cb:8a:5d:d3:2f:14:9a:40:63:42:
f3:1a:01:20:8a:7a:31:cd:48:fa:63:c5:ca:0a:21:
44:aa:de:f7:a0:62:a6:13:40:90:01:e4:39:9a:00:
4c:4d:0a:5e:d1:57:eb:3e:c6:ce:d3:49:5a:ca:c4:
6c:f4:c9:b3:c3:71:96:fa:73:e2:4e:80:1b:3f:08:
3a:6c:23:38:19:65:1d:a2:bd:1a:31:d6:55:e7:a8:
08:ea:7c:34:d8:88:b2:dd:70:a6:b4:19:12:da:54:
7e:3a:7f:40:4b:ff:6d:b5:e1:09:0c:74:81:2f:2e:
01:93:c1:c2:53:5a:4b:cb:7b:80:3d:78:fb:5a:c3:
70:9c:d9:63:e7:27:65:6e:24:75:5b:ac:19:ae:b3:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6D:EF:14:5C:04:37:5A:86:4E:34:81:CF:A3:B7:01:CF:93:ED:C9
X509v3 Authority Key Identifier:
keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:97:12:e3:f9:d6:3b:5a:97:b7:ca:91:6f:ce:27:02:1d:3f:
97:77:7f:72:b5:75:2d:36:92:25:88:e9:99:17:a2:02:97:d3:
ce:61:02:e9:e0:c7:60:57:17:00:65:15:87:df:09:36:00:89:
e3:fa:10:cc:87:53:e5:49:68:99:05:c7:f9:0e:66:4b:8c:25:
69:cf:0f:c2:a0:6d:4d:97:cf:67:4e:bf:0e:4f:5c:74:e3:f5:
c6:4f:8a:7e:5f:64:2e:4e:2d:3d:75:1c:f8:da:f1:1e:c6:35:
97:89:ce:10:27:80:a3:6a:5d:5f:35:e8:d7:d8:16:a9:66:6d:
91:15:76:c4:62:97:16:22:91:c0:68:6e:ef:98:e2:e1:4e:27:
95:93:0f:bc:47:3a:1d:d4:52:ec:80:b4:b1:80:58:fb:ad:ac:
24:ce:ef:df:95:34:e2:e9:58:8d:87:23:b5:ac:c3:13:b3:03:
70:4e:ed:2f:95:97:a0:87:13:91:8a:a0:d2:51:ac:9e:00:97:
00:c1:c6:73:28:21:36:1a:02:ac:e6:f7:95:cb:50:3d:38:4a:
fe:9c:bc:0f:38:7d:b4:56:5a:2d:50:13:95:14:9a:ca:81:97:
ec:6c:7f:ae:8e:8b:40:b0:a5:a3:9a:36:13:8b:00:3c:10:ce:
f6:08:7c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:36:22 2026 by rpki-client