Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
File: Afg1dg4UKs6kvwp_-K52do9dzcc.mft (raw, json)
Hash identifier: 9KkYmvw9i867Vk9wkZAXtdmKrtBYiYNZNvj1gb1eR6s=
Subject key identifier: CC:74:00:8A:71:B5:06:F5:3C:98:77:DA:A2:44:43:B3:62:44:F4:15
Authority key identifier: 01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
Certificate issuer: /CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Certificate serial: 01A0D20054ECD3FF11451099A3745A2B0759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
Manifest number: E6
Signing time: Thu 24 Sep 2026 06:00:32 +0000
Manifest this update: Thu 24 Sep 2026 06:00:32 +0000
Manifest next update: Fri 25 Sep 2026 06:00:32 +0000
Files and hashes: 1: 4jcZt8wr_Es5obrL6nyZ-hZNiVo.roa (hash: IB+ugtp0I7aeSyY/gPMof8xJPcR03yNbnpz2Zj7EXMg=)
2: Afg1dg4UKs6kvwp_-K52do9dzcc.crl (hash: 4TfOnsH6/gP07jGdw/MMc6OK9TOL+UZJetlz9qlb6Kk=)
3: EKtIRD07koj3PioZOzCC9_Q7xak.roa (hash: lz0w7rq5fTE3a3NzEhEeOVrovs8rwD/BBZm7VfWq6Qw=)
4: ETVOeNdAXGMglMi9aSJ3RaDWQ6k.roa (hash: lZ1vDi/rrrr51AW0R6YsNcHKSikuFPwLBuW6UAowH/0=)
5: EnUvjP-IlK1TjhIK9PapivGlbHI.roa (hash: s3r3WCLrBtGWpOA+chKpU0iZQeLq5vYcO5cTKAGqiTI=)
6: LYcuob5nBFbh7n613P7zBmvuRi8.roa (hash: BlKetV9H5SDTjF2fquyGonvag/juU02Kfq5nG08wFNE=)
7: Z91QgU3zPEvidy5E07FD820SvCE.roa (hash: t1hJ2jxHCBaQ4V6GB9HTa2VYzxo2IJI3xiQVOmOCbuo=)
8: kkaN34dPFzsfPEI-fZd7KP-pfLU.roa (hash: AzWDWwHIXhb8lGQNOOstOsRvBfcDp2w4pMgxi168ueE=)
9: lQPkRwjAgL9s8Del_fG_YG6m55w.roa (hash: tt7eRX7rLhh4+WSgLjRaVmZ3euA+zhr35kKk4/BemZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:54:ec:d3:ff:11:45:10:99:a3:74:5a:2b:07:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Validity
Not Before: Sep 24 06:00:32 2026 GMT
Not After : Sep 25 06:00:32 2026 GMT
Subject: CN=cc74008a71b506f53c9877daa24443b36244f415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:4d:1c:b0:40:92:10:cb:d6:d7:68:86:87:
00:3a:79:83:b6:d3:4b:78:0e:34:e7:0a:8e:13:be:
a6:98:37:be:05:5d:1d:9c:ae:b0:d5:72:99:01:66:
de:8e:c6:e0:3b:2e:6e:fd:c5:97:80:f1:4d:29:88:
06:1f:15:b6:8c:ab:a2:2e:3f:bb:7e:ef:ca:5e:72:
a3:13:c5:1d:29:d7:f5:2f:e7:bc:e0:7b:c1:d5:6c:
28:fe:5e:3a:46:ec:bf:78:01:e2:93:f9:06:f8:bd:
94:e9:49:77:02:86:01:9d:9d:3b:0f:28:5a:5c:80:
71:5f:2c:9b:bf:6a:b1:81:8b:4c:6d:e4:67:84:33:
69:10:a9:79:16:31:57:e4:d9:24:f5:cc:14:a4:a0:
17:1a:25:c7:07:ef:66:36:00:23:47:9f:7a:0b:db:
1b:4e:d0:7a:c5:f5:16:1e:e6:6a:d5:f8:3d:08:c3:
18:58:be:45:b7:22:5a:25:4e:76:d9:ef:01:b5:13:
0a:02:b4:c6:43:2e:ac:31:8d:15:f8:51:28:19:bf:
43:ac:07:ea:7f:26:91:7e:85:9d:2c:d7:3d:54:73:
36:58:86:49:73:6f:bf:ed:36:3b:be:b7:09:d3:99:
0b:6e:1a:99:ed:e3:ae:8b:9b:94:99:bd:35:48:4f:
b7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:74:00:8A:71:B5:06:F5:3C:98:77:DA:A2:44:43:B3:62:44:F4:15
X509v3 Authority Key Identifier:
keyid:01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b1:a2:22:1d:a9:27:a1:d8:3d:a0:8c:25:cd:86:c1:7b:b7:
5a:c3:c9:ad:b4:e5:ee:93:7e:29:de:1c:f4:87:93:fd:84:14:
e7:af:8b:eb:c6:4e:21:3f:fd:14:23:12:e0:da:05:40:70:77:
20:0e:a2:16:ef:13:30:76:e5:6c:40:82:0f:81:6d:58:88:0c:
26:10:5c:b7:0e:c7:01:48:e5:58:ee:34:1c:eb:91:68:eb:af:
86:d8:8b:16:fc:cd:90:09:5a:d9:e8:b8:fd:4b:73:a2:7c:7c:
75:6f:34:69:07:35:79:17:54:08:a8:75:fc:46:17:29:99:30:
bc:c9:9b:67:4f:05:aa:7c:8a:b1:f1:61:5b:b6:38:a3:4b:3f:
0c:40:af:f5:b0:ca:36:ee:39:a1:3b:e8:c2:37:07:b4:51:b3:
d7:da:40:85:21:ab:76:9c:82:5f:a7:bc:6b:b0:53:1f:c3:60:
ad:67:3c:90:f7:62:2a:91:ed:d1:ea:d8:37:15:57:f9:9a:c4:
15:70:07:ae:af:eb:4d:f3:99:31:97:27:75:2d:8d:0c:bb:f5:
ac:f1:65:72:cb:b0:fc:7c:7e:a3:07:9b:ba:78:ee:86:bc:9d:
24:c6:10:16:f2:07:63:1d:db:02:95:d3:9a:11:c4:21:5d:ec:
3c:92:8f:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSAFTs0/8RRRCZo3RaKwdZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZjgzNTc2MGUxNDJhY2VhNGJmMGE3ZmY4YWU3Njc2OGY1
ZGNkYzcwHhcNMjYwOTI0MDYwMDMyWhcNMjYwOTI1MDYwMDMyWjAzMTEwLwYDVQQD
EyhjYzc0MDA4YTcxYjUwNmY1M2M5ODc3ZGFhMjQ0NDNiMzYyNDRmNDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqJNHLBAkhDL1tdohocAOnmDttNL
eA405wqOE76mmDe+BV0dnK6w1XKZAWbejsbgOy5u/cWXgPFNKYgGHxW2jKuiLj+7
fu/KXnKjE8UdKdf1L+e84HvB1Wwo/l46Ruy/eAHik/kG+L2U6Ul3AoYBnZ07Dyha
XIBxXyybv2qxgYtMbeRnhDNpEKl5FjFX5Nkk9cwUpKAXGiXHB+9mNgAjR596C9sb
TtB6xfUWHuZq1fg9CMMYWL5FtyJaJU522e8BtRMKArTGQy6sMY0V+FEoGb9DrAfq
fyaRfoWdLNc9VHM2WIZJc2+/7TY7vrcJ05kLbhqZ7eOui5uUmb01SE+3fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMx0AIpxtQb1PJh32qJEQ7NiRPQVMB8GA1UdIwQY
MBaAFAH4NXYOFCrOpL8Kf/iudnaPXc3HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWZnMWRnNFVLczZrdndwXy1LNTJkbzlkemNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt
MzhlZThmZDY0ZTdkLzEvQWZnMWRnNFVLczZrdndwXy1LNTJkbzlkemNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk
LzEvQWZnMWRnNFVLczZrdndwXy1LNTJkbzlkemNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbGiIh2p
J6HYPaCMJc2GwXu3WsPJrbTl7pN+Kd4c9IeT/YQU56+L68ZOIT/9FCMS4NoFQHB3
IA6iFu8TMHblbECCD4FtWIgMJhBctw7HAUjlWO40HOuRaOuvhtiLFvzNkAla2ei4
/Utzonx8dW80aQc1eRdUCKh1/EYXKZkwvMmbZ08FqnyKsfFhW7Y4o0s/DECv9bDK
Nu45oTvowjcHtFGz19pAhSGrdpyCX6e8a7BTH8NgrWc8kPdiKpHt0erYNxVX+ZrE
FXAHrq/rTfOZMZcndS2NDLv1rPFlcsuw/Hx+owebunjuhrydJMYQFvIHYx3bApXT
mhHEIV3sPJKPZw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:22:23 2026 by rpki-client