Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
File: afM-l5tD6I0OXsp5h5R9sh73yrk.mft (raw, json)
Hash identifier: bE0Mij5hJ8EYAYa7yLrZninMc15xXw9pJyWrUeC6rR4=
Subject key identifier: 1F:99:92:56:90:11:FC:38:7D:29:17:36:AE:4D:9D:D3:1F:4E:69:B4
Authority key identifier: 69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
Certificate issuer: /CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Certificate serial: 019CADFDF6E1486366203855DF4167786D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
Manifest number: 0701
Signing time: Mon 02 Mar 2026 10:00:27 +0000
Manifest this update: Mon 02 Mar 2026 10:00:27 +0000
Manifest next update: Tue 03 Mar 2026 10:00:27 +0000
Files and hashes: 1: afM-l5tD6I0OXsp5h5R9sh73yrk.crl (hash: 5jpPWP2/JpdQ/XP2+y3kyBCzpKfWNfwIzznBnqAhQQw=)
2: eNYwFKvhTYAKwUVHqfcOhm_redw.roa (hash: h0zFFTvlVNTqfoPE4dwnvafuj6T5qC/XkjacHGe2Fjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fd:f6:e1:48:63:66:20:38:55:df:41:67:78:6d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Validity
Not Before: Mar 2 10:00:27 2026 GMT
Not After : Mar 3 10:00:27 2026 GMT
Subject: CN=1f9992569011fc387d291736ae4d9dd31f4e69b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:69:1d:1a:9c:92:98:5f:5c:48:39:fb:12:
1d:2e:22:8d:21:92:0a:58:69:a0:53:a0:b1:59:9d:
ad:5f:2d:0e:1f:43:1f:95:91:c1:0c:8d:3b:54:52:
78:12:d7:4a:3b:cb:db:16:0d:45:39:4b:e5:26:12:
26:b5:f2:c3:b7:de:aa:01:d6:4a:ec:c1:6c:2b:82:
43:7a:8a:2c:06:58:2f:0d:bc:6a:27:0c:22:44:dd:
a3:56:da:ed:f6:fd:f3:6c:b7:f5:1b:ac:fb:07:b0:
57:66:a2:ed:59:d3:da:5d:6b:e1:7e:ff:e0:8e:36:
49:64:aa:7f:9e:55:cd:12:89:49:b9:25:b6:29:0d:
1e:3a:11:14:53:d3:df:f6:c8:ec:f8:c3:0b:62:02:
01:87:e7:5d:30:a5:83:30:47:45:6f:48:52:ff:e4:
60:f3:c1:3e:3d:8a:55:24:40:96:72:9e:ed:b6:45:
d2:4a:2c:19:d6:84:2c:6e:c6:73:d6:3a:3b:f3:33:
04:99:ab:9a:49:75:99:38:52:f3:1b:62:49:b0:57:
ec:c2:ce:24:c3:9b:c0:59:c9:80:bd:d7:71:13:7f:
5b:37:13:00:84:ca:95:7f:86:f0:b3:c5:65:0d:71:
ae:57:fd:14:e8:a3:ea:d4:3b:67:5f:68:e8:93:f4:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:99:92:56:90:11:FC:38:7D:29:17:36:AE:4D:9D:D3:1F:4E:69:B4
X509v3 Authority Key Identifier:
keyid:69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:dc:39:81:ba:dd:b5:c2:06:6b:43:89:5b:bd:38:93:ec:9f:
fc:c9:f2:84:5e:83:2c:a3:72:0f:26:7f:fc:bd:a0:26:18:16:
ee:e5:c3:fa:f5:7e:42:84:cd:06:b3:eb:3e:a7:cb:ac:72:9a:
c1:a0:84:1a:00:12:f6:ae:32:3e:a4:64:be:eb:2d:ce:6f:51:
18:38:d1:15:1e:74:5f:0f:de:63:66:b2:22:7d:14:25:ec:4c:
78:65:59:4c:8d:e4:8f:6e:3d:b0:a1:64:b0:3e:9d:02:1e:b1:
0e:de:5a:9a:9a:54:50:94:65:e4:41:67:94:c5:53:1e:66:4c:
a6:0c:47:09:2b:1d:06:61:32:0f:a7:42:03:0e:90:a8:10:09:
96:38:3e:11:6d:de:8a:6a:14:ae:ad:6f:a1:ef:31:c2:16:80:
0b:64:bd:0b:df:db:e5:83:07:6a:13:61:c4:55:a0:e5:b0:f1:
6c:0c:c5:71:79:ae:7f:87:e5:89:b6:cf:77:2a:e6:e3:12:7a:
6e:e3:67:68:f4:32:b8:b1:07:53:2f:ba:7d:bb:cc:fe:b6:ed:
d9:93:87:05:ee:c9:f1:9e:c1:a2:8e:64:00:cf:d1:e9:23:eb:
59:66:72:11:56:91:a2:5b:d6:f4:f7:d0:58:79:8e:c6:9e:94:
e6:da:47:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/fbhSGNmIDhV30FneG0TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjMzZTk3OWI0M2U4OGQwZTVlY2E3OTg3OTQ3ZGIyMWVm
N2NhYjkwHhcNMjYwMzAyMTAwMDI3WhcNMjYwMzAzMTAwMDI3WjAzMTEwLwYDVQQD
EygxZjk5OTI1NjkwMTFmYzM4N2QyOTE3MzZhZTRkOWRkMzFmNGU2OWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzVpHRqckphfXEg5+xIdLiKNIZIK
WGmgU6CxWZ2tXy0OH0MflZHBDI07VFJ4EtdKO8vbFg1FOUvlJhImtfLDt96qAdZK
7MFsK4JDeoosBlgvDbxqJwwiRN2jVtrt9v3zbLf1G6z7B7BXZqLtWdPaXWvhfv/g
jjZJZKp/nlXNEolJuSW2KQ0eOhEUU9Pf9sjs+MMLYgIBh+ddMKWDMEdFb0hS/+Rg
88E+PYpVJECWcp7ttkXSSiwZ1oQsbsZz1jo78zMEmauaSXWZOFLzG2JJsFfsws4k
w5vAWcmAvddxE39bNxMAhMqVf4bws8VlDXGuV/0U6KPq1DtnX2jok/Rt/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+ZklaQEfw4fSkXNq5NndMfTmm0MB8GA1UdIwQY
MBaAFGnzPpebQ+iNDl7KeYeUfbIe98q5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZNLWw1dEQ2STBPWHNwNWg1UjlzaDczeXJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85NTNhNjEtMzM0OS00N2JmLWExMmIt
ZTRjNjkzMzQxNDJjLzEvYWZNLWw1dEQ2STBPWHNwNWg1UjlzaDczeXJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85NTNhNjEtMzM0OS00N2JmLWExMmItZTRjNjkzMzQxNDJj
LzEvYWZNLWw1dEQ2STBPWHNwNWg1UjlzaDczeXJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtw5gbrd
tcIGa0OJW704k+yf/MnyhF6DLKNyDyZ//L2gJhgW7uXD+vV+QoTNBrPrPqfLrHKa
waCEGgAS9q4yPqRkvustzm9RGDjRFR50Xw/eY2ayIn0UJexMeGVZTI3kj249sKFk
sD6dAh6xDt5amppUUJRl5EFnlMVTHmZMpgxHCSsdBmEyD6dCAw6QqBAJljg+EW3e
imoUrq1voe8xwhaAC2S9C9/b5YMHahNhxFWg5bDxbAzFcXmuf4flibbPdyrm4xJ6
buNnaPQyuLEHUy+6fbvM/rbt2ZOHBe7J8Z7Boo5kAM/R6SPrWWZyEVaRolvW9PfQ
WHmOxp6U5tpHBA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:56 2026 by rpki-client