Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File: AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier: zFD7Kpeuisp2UUBVfx47w3L3FF/Zeh7Pfxltv1WCb+E=
Subject key identifier: FA:38:63:21:19:9F:9F:A9:E5:8D:B8:97:A3:C7:88:8F:89:7B:64:3D
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial: 019F8F46E20A94084F8F42B45EBCC6115DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 14:00:15 +0000
Manifest this update: Thu 23 Jul 2026 14:00:15 +0000
Manifest next update: Fri 24 Jul 2026 14:00:15 +0000
Files and hashes: 1: 9M-CJkVBZVuqIwi3Sawh0isCz1k.roa (hash: aFU0pADsAbTvFke0dF4U47/0s76HwBtoQCpl6QnSuNI=)
2: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: 6MxSdeAqH/Rr/VVSF33h8RfFyHdrznG/aXCMAuusLqY=)
3: KbY29WtKZkz8Fbjj7QvLlg811Iw.roa (hash: vGh5FY7zuISKMd7QAir+eppKFgiFx2llO5uFQh7FV0A=)
4: Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa (hash: lpodXqk6t7MJFjfZg1Uow8LLK/4R3ylcdMkmlTgRneo=)
5: hkJYoKxZ5NaqYkSY0GG7dfC0J6M.roa (hash: M6l2Qx3MyNr2ADezdHbYqYOeyWWrHzzKzTBcWubDLyY=)
6: iN3PbeV3-UffGNWyXfh7JHJfK74.roa (hash: JtoeR6EU9pVtvyEClltI2vcG5Q/h7OJRN/rUzf7IfP8=)
7: qydppjeYfUzDVxdV73Ghn9vaAYk.roa (hash: F/o5ke8f18yC9oKEjHkU0hNCPxAS0/yMbN5QTK0st0g=)
8: sH1teYqG2FqEXd7RfMCaBcOnmaw.roa (hash: suxWcXpZV2IMJ73fGzjwM37LJ58quwhaki1YE7N0sRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:e2:0a:94:08:4f:8f:42:b4:5e:bc:c6:11:5d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Validity
Not Before: Jul 23 14:00:15 2026 GMT
Not After : Jul 24 14:00:15 2026 GMT
Subject: CN=fa386321199f9fa9e58db897a3c7888f897b643d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:01:6e:d8:38:2b:e5:12:8f:9c:f1:49:67:ef:
93:cc:6d:a7:5a:67:b7:27:4e:f6:96:b5:71:15:e3:
21:da:f8:15:81:d0:5e:34:1e:d5:87:7e:d5:69:69:
43:c9:6a:0b:5f:70:ee:65:09:31:4b:e3:e5:60:3f:
6c:f9:cf:2d:29:8a:69:1f:60:5a:92:0d:92:ba:f4:
f9:ff:b3:71:09:1a:3d:2b:e4:d4:eb:56:a9:f3:ff:
57:6f:a2:c5:1f:62:ee:d0:31:a3:f4:90:ca:af:9b:
55:90:cc:ec:92:4b:d7:ec:23:c8:6c:0c:88:c0:65:
02:1c:3f:09:22:1b:26:19:ff:b6:d5:5d:76:16:54:
ac:a5:a5:6d:45:8e:d9:71:e9:0d:f2:23:7e:a9:2c:
a8:09:44:a8:bc:97:84:ea:25:53:18:0a:4f:03:b0:
f0:1d:38:b7:8a:93:97:7e:b7:8a:07:2b:86:8c:1c:
10:ae:be:b4:45:0c:39:60:d3:04:0d:10:8b:b1:e0:
14:1a:1c:57:90:c3:52:3a:ee:81:87:45:38:bc:c4:
0b:e1:ce:a2:9d:9e:ab:24:6d:38:57:e2:7f:12:08:
de:f9:5e:1f:eb:1e:1c:dd:9a:c5:28:03:37:d7:ee:
95:d4:e6:0a:f4:f1:69:b2:0a:d4:18:cd:5b:77:36:
95:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:38:63:21:19:9F:9F:A9:E5:8D:B8:97:A3:C7:88:8F:89:7B:64:3D
X509v3 Authority Key Identifier:
keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b2:99:1c:23:f2:9a:4d:a1:c5:74:2a:28:a2:63:45:3b:66:
0a:19:a5:22:bc:42:f4:a1:3e:82:2c:12:c5:18:b0:f7:e0:15:
05:ba:b7:bc:5b:8a:0d:5e:df:b0:e6:54:dc:31:ba:af:71:47:
14:8a:57:01:fc:89:36:1f:3e:30:c5:0f:38:d6:6b:85:d3:bf:
96:ce:2d:2e:2f:5c:81:06:b8:3a:5e:6d:49:38:00:95:0b:d0:
07:93:fa:84:29:ac:8c:91:0e:24:90:02:82:b2:88:bc:5c:1d:
f6:a1:26:55:57:d0:f5:fa:21:ac:fb:36:96:8d:70:b0:30:ba:
04:84:24:f4:ff:b1:0d:e1:42:92:bc:28:fa:78:81:84:29:eb:
b4:91:1f:5f:aa:4b:52:9f:f8:cd:e7:b5:47:c2:28:b6:52:e8:
6f:c6:fb:57:7c:c4:a9:cc:64:18:cf:90:e8:92:08:95:dc:95:
ef:7e:65:33:bc:cb:d4:ac:ec:f3:c8:8f:25:80:17:d3:a5:55:
bc:8b:c2:b4:a5:7f:3e:ab:ad:57:84:a4:b6:b0:56:20:6a:08:
8e:48:cb:c7:2b:af:08:ec:b5:25:4b:ef:b7:62:15:26:49:cd:
73:7c:15:d0:e2:20:17:56:56:ed:7f:b8:16:77:97:84:66:c0:
60:40:b9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:01:23 2026 by rpki-client