Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
File: Afg1dg4UKs6kvwp_-K52do9dzcc.mft (raw, json)
Hash identifier: o+f58Qu4l8an+8NdlrICswYaDJnazRSWltYYSGAtC0o=
Subject key identifier: E5:9D:1C:95:57:A9:F2:E9:45:C3:3D:F0:13:57:E7:23:6B:38:F8:EF
Authority key identifier: 01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
Certificate issuer: /CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Certificate serial: 019F8F7E72678E8CE1D728BD9D7109E7DA3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:56 +0000
Manifest this update: Thu 23 Jul 2026 15:00:56 +0000
Manifest next update: Fri 24 Jul 2026 15:00:56 +0000
Files and hashes: 1: 4jcZt8wr_Es5obrL6nyZ-hZNiVo.roa (hash: IB+ugtp0I7aeSyY/gPMof8xJPcR03yNbnpz2Zj7EXMg=)
2: Afg1dg4UKs6kvwp_-K52do9dzcc.crl (hash: SffIf6Lzn4wd7QANN4sNq0kgLrE0wR738tToEBW53uY=)
3: EKtIRD07koj3PioZOzCC9_Q7xak.roa (hash: lz0w7rq5fTE3a3NzEhEeOVrovs8rwD/BBZm7VfWq6Qw=)
4: ETVOeNdAXGMglMi9aSJ3RaDWQ6k.roa (hash: lZ1vDi/rrrr51AW0R6YsNcHKSikuFPwLBuW6UAowH/0=)
5: EnUvjP-IlK1TjhIK9PapivGlbHI.roa (hash: s3r3WCLrBtGWpOA+chKpU0iZQeLq5vYcO5cTKAGqiTI=)
6: LYcuob5nBFbh7n613P7zBmvuRi8.roa (hash: BlKetV9H5SDTjF2fquyGonvag/juU02Kfq5nG08wFNE=)
7: Z91QgU3zPEvidy5E07FD820SvCE.roa (hash: t1hJ2jxHCBaQ4V6GB9HTa2VYzxo2IJI3xiQVOmOCbuo=)
8: kkaN34dPFzsfPEI-fZd7KP-pfLU.roa (hash: AzWDWwHIXhb8lGQNOOstOsRvBfcDp2w4pMgxi168ueE=)
9: lQPkRwjAgL9s8Del_fG_YG6m55w.roa (hash: tt7eRX7rLhh4+WSgLjRaVmZ3euA+zhr35kKk4/BemZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:72:67:8e:8c:e1:d7:28:bd:9d:71:09:e7:da:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Validity
Not Before: Jul 23 15:00:56 2026 GMT
Not After : Jul 24 15:00:56 2026 GMT
Subject: CN=e59d1c9557a9f2e945c33df01357e7236b38f8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:68:6c:11:81:d8:26:d3:b5:e5:6d:ce:76:
a8:3a:6a:9b:31:2f:e1:a2:e2:38:76:6b:db:c2:07:
d3:4a:f7:68:4f:f7:d3:cb:22:f2:29:9b:09:fc:84:
ad:6f:1a:df:22:ac:e5:2c:7f:ed:43:43:21:b4:11:
3f:e8:18:2a:97:e1:1b:c9:fd:3f:c6:a7:08:44:4a:
45:58:75:20:e6:e0:34:79:0f:c9:69:2d:fd:52:60:
c1:37:b7:68:45:42:cb:82:81:a6:62:de:09:9b:9b:
fb:99:e4:1e:79:91:7f:b6:6f:ea:52:b6:ca:b0:9d:
e6:93:4c:ae:d0:e9:aa:83:ab:45:80:93:9e:48:e2:
c7:c7:99:08:66:95:12:25:39:ec:f4:5a:da:8b:c6:
f2:55:60:80:1f:0b:1b:d9:2d:1d:d6:72:07:93:ea:
4a:2d:7a:8d:fb:dc:ca:ad:9e:0d:c3:ac:9d:49:9b:
60:9e:f2:89:47:c2:c5:7c:53:e6:e1:43:f7:89:33:
d7:08:a9:19:08:7c:bf:03:66:8b:1d:ee:59:c4:92:
6c:c2:9d:76:98:c9:79:2c:bc:19:1d:33:4f:95:04:
97:13:bc:74:da:95:f9:84:18:c4:fa:ab:c9:14:87:
7f:19:a4:82:5f:e5:67:07:5e:31:02:f7:1f:3d:2c:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9D:1C:95:57:A9:F2:E9:45:C3:3D:F0:13:57:E7:23:6B:38:F8:EF
X509v3 Authority Key Identifier:
keyid:01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:be:95:02:37:36:7c:30:94:e4:e1:97:9a:19:48:51:65:07:
ac:46:99:49:a5:01:39:40:32:1f:00:f5:21:74:c7:2a:8b:36:
b4:56:88:e3:d5:89:d0:2a:6b:fe:9c:31:6d:6f:c3:33:e2:ec:
bd:bf:7c:cf:da:01:37:28:ac:47:50:28:60:e9:82:6f:aa:fa:
72:78:7d:0a:8e:22:b5:d4:9d:0f:1a:a1:17:98:b0:75:b8:5e:
02:ba:77:1d:84:73:db:94:df:ff:f7:69:08:73:2c:81:17:54:
d9:85:f1:96:90:da:59:2c:40:9d:81:83:40:59:db:e1:2d:61:
bd:25:d3:9c:44:29:9a:fc:30:c0:03:68:59:96:ab:de:40:05:
db:9d:1e:39:63:1d:18:37:7c:9c:0a:6c:9e:32:6a:b4:cf:7f:
ff:59:0c:73:bf:c2:ca:b6:d3:c4:26:c0:5d:fd:8c:c0:7b:81:
83:4c:81:2e:9c:15:ce:9b:fe:ad:70:a8:9b:0f:bf:45:f9:7f:
0a:ab:da:f2:d5:0d:d4:e1:b2:82:2e:cc:76:91:6f:f7:f7:89:
bf:f8:65:0c:da:4f:42:a6:5a:06:57:0e:81:b1:fc:6c:bc:c3:
6e:e7:73:87:cf:82:dd:29:6b:2b:9d:bd:da:41:3f:69:e6:2b:
5f:a0:1a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:37 2026 by rpki-client