Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File: AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier: ord+O6ChHkJi3kj7sfVnCoLqFfSor0dwi0tL8eOV6PU=
Subject key identifier: AC:BD:4F:D9:8F:1F:82:FE:FB:06:B1:BF:7F:79:B1:C8:E1:E1:5E:74
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial: 019E1C7D675AF146A6D980BB8BFCE57C9677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 14:00:40 +0000
Manifest this update: Tue 12 May 2026 14:00:40 +0000
Manifest next update: Wed 13 May 2026 14:00:40 +0000
Files and hashes: 1: 9M-CJkVBZVuqIwi3Sawh0isCz1k.roa (hash: aFU0pADsAbTvFke0dF4U47/0s76HwBtoQCpl6QnSuNI=)
2: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: kJ+4E/XTgUI0BzZl+KwQ728VsKjl1grHUw4uxY+AtCw=)
3: KbY29WtKZkz8Fbjj7QvLlg811Iw.roa (hash: vGh5FY7zuISKMd7QAir+eppKFgiFx2llO5uFQh7FV0A=)
4: Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa (hash: lpodXqk6t7MJFjfZg1Uow8LLK/4R3ylcdMkmlTgRneo=)
5: hkJYoKxZ5NaqYkSY0GG7dfC0J6M.roa (hash: M6l2Qx3MyNr2ADezdHbYqYOeyWWrHzzKzTBcWubDLyY=)
6: iN3PbeV3-UffGNWyXfh7JHJfK74.roa (hash: JtoeR6EU9pVtvyEClltI2vcG5Q/h7OJRN/rUzf7IfP8=)
7: qydppjeYfUzDVxdV73Ghn9vaAYk.roa (hash: F/o5ke8f18yC9oKEjHkU0hNCPxAS0/yMbN5QTK0st0g=)
8: sH1teYqG2FqEXd7RfMCaBcOnmaw.roa (hash: suxWcXpZV2IMJ73fGzjwM37LJ58quwhaki1YE7N0sRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:67:5a:f1:46:a6:d9:80:bb:8b:fc:e5:7c:96:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Validity
Not Before: May 12 14:00:40 2026 GMT
Not After : May 13 14:00:40 2026 GMT
Subject: CN=acbd4fd98f1f82fefb06b1bf7f79b1c8e1e15e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:d4:51:7a:48:97:61:11:2e:dd:f4:07:bf:
f3:66:44:53:ec:84:26:18:12:b9:fa:c5:68:c7:e6:
a4:83:6b:13:a2:06:0e:7a:18:85:91:2a:2f:5e:e6:
31:fd:6b:0e:46:90:5c:62:8e:21:5e:a5:92:1a:53:
40:29:d2:1d:1b:a7:2c:41:4d:29:3c:e1:68:c3:0a:
89:7b:e6:ec:fc:1c:ca:ac:2d:64:50:1c:dc:53:ff:
c3:78:80:5f:3f:44:16:79:bb:19:1e:58:6b:38:50:
e5:f7:1c:fd:0d:c3:29:f2:93:9e:e8:73:78:9d:60:
d6:70:f7:1a:a5:b7:ce:bc:56:74:38:9c:45:ba:b4:
19:4e:f5:01:f0:83:74:c6:05:15:7c:f2:d1:6c:2d:
96:cd:3d:aa:81:41:71:fa:16:cf:61:e3:a7:ff:98:
09:be:1a:db:a4:09:7e:96:2e:47:3d:28:57:d3:83:
94:05:5e:aa:9e:ef:b3:28:06:4c:1e:9a:a0:46:0d:
51:0b:b0:2d:ff:df:f2:0a:12:f9:b3:71:e4:d9:d1:
e3:91:9a:69:56:9a:73:64:8b:b9:4b:54:bf:03:f8:
5c:de:cf:a2:94:50:10:d4:b6:29:f2:53:9a:16:7c:
40:e0:af:23:59:33:51:7d:88:88:66:54:a8:7b:0b:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BD:4F:D9:8F:1F:82:FE:FB:06:B1:BF:7F:79:B1:C8:E1:E1:5E:74
X509v3 Authority Key Identifier:
keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fd:8f:80:cc:c8:42:ac:2a:7c:d1:3f:30:fc:ca:cd:c0:ee:
87:3b:bd:7a:fa:07:1c:2d:e4:4c:94:ba:28:66:68:e1:87:76:
ff:b1:57:3a:9d:10:ab:f6:e8:b2:f9:75:c3:8d:5e:1c:56:3e:
38:3e:28:c0:be:e5:58:0b:68:08:60:d4:ab:1b:f7:3b:23:ee:
88:d7:36:53:6d:19:3b:30:bc:f3:c0:01:d1:9e:71:92:8b:de:
80:63:61:6e:ed:21:dc:cd:c3:49:80:e9:c2:41:45:4d:36:c6:
4f:cf:0a:23:ed:71:4f:c2:0f:71:2a:9f:cb:13:b1:7c:e9:15:
6a:40:d8:2f:94:05:28:c0:dc:6d:c0:fb:0a:91:06:4a:27:df:
e7:06:f3:d0:eb:70:df:f3:7e:15:81:1c:86:9b:15:25:e3:ef:
40:75:97:20:5f:e6:7c:eb:6a:04:4c:31:a4:9b:f2:93:da:22:
7e:31:4e:33:05:05:23:34:c4:c6:1a:d3:73:40:41:13:13:e6:
a3:4b:e1:b6:d8:43:e9:a8:c0:fe:0b:7d:73:25:9e:64:5d:b2:
13:50:a2:9f:0f:f2:c3:f8:c7:66:6d:83:b3:dc:a3:7a:6a:43:
f8:bf:12:bf:60:f2:2d:47:8b:15:e1:2d:7e:2f:95:14:3d:ac:
b5:ac:7f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:50 2026 by rpki-client