Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File: AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier: c8q4Ej8JX7H/zTC+KExZPqy2zm4IiLVwpQwUR00dXGw=
Subject key identifier: EC:14:EB:E1:4B:E9:A7:A9:6A:42:9E:89:FA:7D:DB:4F:CF:3B:6A:A9
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial: 019D273AD11416EF7F5925DC1F9D5EFA85DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 23:00:59 +0000
Manifest this update: Wed 25 Mar 2026 23:00:59 +0000
Manifest next update: Thu 26 Mar 2026 23:00:59 +0000
Files and hashes: 1: 9M-CJkVBZVuqIwi3Sawh0isCz1k.roa (hash: aFU0pADsAbTvFke0dF4U47/0s76HwBtoQCpl6QnSuNI=)
2: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: opeTLDJow8TEa9hrLb9LoTHx/dWyHHC2v8EHuClHVKc=)
3: KbY29WtKZkz8Fbjj7QvLlg811Iw.roa (hash: vGh5FY7zuISKMd7QAir+eppKFgiFx2llO5uFQh7FV0A=)
4: Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa (hash: lpodXqk6t7MJFjfZg1Uow8LLK/4R3ylcdMkmlTgRneo=)
5: hkJYoKxZ5NaqYkSY0GG7dfC0J6M.roa (hash: M6l2Qx3MyNr2ADezdHbYqYOeyWWrHzzKzTBcWubDLyY=)
6: iN3PbeV3-UffGNWyXfh7JHJfK74.roa (hash: JtoeR6EU9pVtvyEClltI2vcG5Q/h7OJRN/rUzf7IfP8=)
7: qydppjeYfUzDVxdV73Ghn9vaAYk.roa (hash: F/o5ke8f18yC9oKEjHkU0hNCPxAS0/yMbN5QTK0st0g=)
8: sH1teYqG2FqEXd7RfMCaBcOnmaw.roa (hash: suxWcXpZV2IMJ73fGzjwM37LJ58quwhaki1YE7N0sRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d1:14:16:ef:7f:59:25:dc:1f:9d:5e:fa:85:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Validity
Not Before: Mar 25 23:00:59 2026 GMT
Not After : Mar 26 23:00:59 2026 GMT
Subject: CN=ec14ebe14be9a7a96a429e89fa7ddb4fcf3b6aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:47:49:4e:5a:c1:95:33:8f:b3:5b:0a:d5:cb:
d2:c4:0e:23:35:65:21:63:cf:da:4e:b3:b7:90:ad:
bf:ea:37:0b:fe:b4:b6:d9:bf:1c:33:2b:1d:28:cd:
3a:f7:0f:c7:72:cf:de:92:4b:00:16:ec:28:98:0a:
2d:7a:96:87:59:b1:d0:62:f0:29:ac:b1:e9:d2:bd:
a7:15:34:a1:f1:4b:d5:29:07:0f:d5:47:cb:56:99:
dc:e9:21:75:aa:ab:60:f5:34:79:43:15:92:36:12:
5e:3c:40:b2:9c:45:57:ec:83:ed:ad:83:b6:97:59:
96:7d:90:52:53:43:7d:09:2f:96:0e:a4:3b:ea:63:
da:a4:38:9e:4c:47:d6:33:7f:b4:a8:c3:15:76:bc:
9b:42:c2:bd:45:51:9b:4d:30:bd:88:68:59:fd:ec:
29:1d:00:07:50:76:4a:1a:f3:f0:b8:e7:42:b2:cd:
79:ff:4b:c6:cb:27:80:b0:76:5c:b4:99:5e:3c:6e:
9b:7f:47:8b:5f:13:3f:cf:b6:a4:98:4e:8f:76:fe:
3b:4d:db:ea:89:2e:1d:50:56:51:f3:bd:d9:b0:2a:
d2:a8:6b:f8:a5:9e:b0:1d:d2:f0:47:4d:b5:05:3c:
38:33:b5:c2:61:ea:d5:69:f9:af:7d:09:d4:cf:a1:
9f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:14:EB:E1:4B:E9:A7:A9:6A:42:9E:89:FA:7D:DB:4F:CF:3B:6A:A9
X509v3 Authority Key Identifier:
keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:b4:d9:03:36:1e:76:71:d3:dc:67:5e:80:64:19:27:60:18:
e9:b9:f5:a6:1a:39:ec:67:70:7d:c8:ef:60:99:54:72:1e:75:
c8:1a:26:00:b2:41:5e:42:d4:dd:1d:8b:8a:87:ef:bf:37:22:
87:f4:4d:94:30:6a:cf:41:dc:a0:c4:91:ea:25:be:ae:67:6a:
27:81:d0:31:4c:36:cb:bd:a9:e4:07:aa:8b:ef:f5:d6:7c:16:
f1:a7:27:08:15:90:e7:53:98:55:8d:51:31:9c:16:e4:99:7e:
fe:fe:fe:ab:48:30:22:91:b8:a6:d6:41:ce:b9:6d:f4:bc:e1:
94:a1:fe:b4:bc:21:8b:7b:99:ce:cd:27:5c:11:ba:b0:9c:4f:
7c:ba:bb:ce:41:82:84:42:68:04:d6:aa:e3:e9:c1:1d:80:89:
10:9f:84:e6:cf:ca:58:d8:1e:14:63:d9:5b:00:88:7d:70:7d:
d4:7b:1c:67:df:b8:70:15:c3:63:04:c7:47:98:fc:22:3f:8b:
fb:7a:cd:49:ef:b5:a4:57:a0:90:e6:1b:c2:20:6a:f2:b3:54:
b0:f2:18:e6:4a:b3:34:3d:fe:c3:b0:18:8d:c5:d8:49:8b:4e:
a4:2d:ee:e9:7e:32:8d:2d:94:55:26:bd:4a:90:55:95:cb:47:
3e:81:4d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOtEUFu9/WSXcH51e+oXbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNWZmOWNjODljNjZhOGEzYTVkNzM0YTBkNjVjNjFmZGM4
NTE4YmUwHhcNMjYwMzI1MjMwMDU5WhcNMjYwMzI2MjMwMDU5WjAzMTEwLwYDVQQD
EyhlYzE0ZWJlMTRiZTlhN2E5NmE0MjllODlmYTdkZGI0ZmNmM2I2YWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUdJTlrBlTOPs1sK1cvSxA4jNWUh
Y8/aTrO3kK2/6jcL/rS22b8cMysdKM069w/Hcs/ekksAFuwomAotepaHWbHQYvAp
rLHp0r2nFTSh8UvVKQcP1UfLVpnc6SF1qqtg9TR5QxWSNhJePECynEVX7IPtrYO2
l1mWfZBSU0N9CS+WDqQ76mPapDieTEfWM3+0qMMVdrybQsK9RVGbTTC9iGhZ/ewp
HQAHUHZKGvPwuOdCss15/0vGyyeAsHZctJlePG6bf0eLXxM/z7akmE6Pdv47Tdvq
iS4dUFZR873ZsCrSqGv4pZ6wHdLwR021BTw4M7XCYerVafmvfQnUz6GfEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOwU6+FL6aepakKeifp920/PO2qpMB8GA1UdIwQY
MBaAFABf+cyJxmqKOl1zSg1lxh/chRi+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kNTNjNzgtMGQ1Yi00MjM3LTk5OTkt
MGUyZDY5N2IyN2UzLzEvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kNTNjNzgtMGQ1Yi00MjM3LTk5OTktMGUyZDY5N2IyN2Uz
LzEvQUZfNXpJbkdhb282WFhOS0RXWEdIOXlGR0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvrTZAzYe
dnHT3GdegGQZJ2AY6bn1pho57GdwfcjvYJlUch51yBomALJBXkLU3R2Liofvvzci
h/RNlDBqz0HcoMSR6iW+rmdqJ4HQMUw2y72p5Aeqi+/11nwW8acnCBWQ51OYVY1R
MZwW5Jl+/v7+q0gwIpG4ptZBzrlt9LzhlKH+tLwhi3uZzs0nXBG6sJxPfLq7zkGC
hEJoBNaq4+nBHYCJEJ+E5s/KWNgeFGPZWwCIfXB91HscZ9+4cBXDYwTHR5j8Ij+L
+3rNSe+1pFegkOYbwiBq8rNUsPIY5kqzND3+w7AYjcXYSYtOpC3u6X4yjS2UVSa9
SpBVlctHPoFNWg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:55:09 2026 by rpki-client