Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
File: AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json)
Hash identifier: ZqtL2uiEoHH8A+3MxREgv/Xc7u29oPBk+Q/G3jRp1eQ=
Subject key identifier: F6:77:99:02:82:20:12:A0:30:B9:40:E1:63:8A:17:39:C0:B7:3F:B4
Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
Certificate issuer: /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Certificate serial: 01A0D4CB6DFD19C24C8DA333E82C53746D9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
Manifest number: 1356
Signing time: Thu 24 Sep 2026 19:01:36 +0000
Manifest this update: Thu 24 Sep 2026 19:01:36 +0000
Manifest next update: Fri 25 Sep 2026 19:01:36 +0000
Files and hashes: 1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: P+0oSdUCDdZ24VungX4FXBmqk81vB+AWYEdyey9RRFg=)
2: YF-tWCFsSuAIoswUePA1e2Wc2vc.roa (hash: pEIfFvCDAADSX4Ka/xFTpfoKfdGNNPSk4G6XnaiqnGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:6d:fd:19:c2:4c:8d:a3:33:e8:2c:53:74:6d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Validity
Not Before: Sep 24 19:01:36 2026 GMT
Not After : Sep 25 19:01:36 2026 GMT
Subject: CN=f6779902822012a030b940e1638a1739c0b73fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f7:57:d7:a0:28:2a:1c:21:c6:b4:25:b5:4e:
1a:6a:6e:f5:c9:48:6f:82:0b:6e:2c:67:51:3e:49:
a7:83:5e:5e:b7:46:53:6e:24:6a:2c:d3:fa:7d:77:
9f:9f:4d:24:c8:a0:9f:bb:32:00:21:23:df:e7:59:
b9:8c:3a:33:6e:f0:2e:d5:26:e1:eb:fa:fb:85:fa:
46:73:3b:97:60:b9:49:06:80:09:b7:46:1e:4e:59:
72:64:f6:b7:da:a7:60:5c:a5:dc:ba:8a:97:f7:cc:
8d:a0:10:f0:c0:50:2f:0f:d0:46:36:9a:75:5a:f7:
c4:55:61:d1:81:49:18:76:e6:65:8a:26:07:9a:7e:
f6:99:1f:30:d6:fd:b9:25:ce:45:6a:ef:af:cc:9b:
05:f3:c8:36:e9:bf:3c:74:29:80:24:f3:e6:9c:aa:
56:66:ea:07:83:23:f6:15:49:c4:de:92:37:78:52:
16:24:d9:d5:3b:63:c0:1c:91:4d:80:d4:bc:c4:a2:
11:b2:5c:db:2e:d9:76:fc:e0:2e:07:23:73:92:0b:
ed:28:b8:76:71:9b:cd:02:81:9b:57:b1:cb:c1:87:
de:4d:8d:04:7c:20:9d:c2:35:36:7a:4a:60:db:00:
9a:66:62:ca:0d:4f:8c:17:50:77:79:d1:4a:c3:b9:
80:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:77:99:02:82:20:12:A0:30:B9:40:E1:63:8A:17:39:C0:B7:3F:B4
X509v3 Authority Key Identifier:
keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:56:93:ec:b3:bc:c1:39:0d:d3:50:17:f9:ce:d4:85:81:59:
f9:86:0b:6c:40:2e:22:c3:cc:36:76:2e:09:c3:de:5d:81:f7:
ab:b1:b3:60:44:5a:ae:9f:d4:d3:0a:75:0b:94:05:c6:5a:3c:
ef:9f:a6:60:3b:bb:bc:9b:88:00:02:90:89:8a:42:90:68:0f:
f3:5e:0b:ba:d0:74:25:a3:27:b4:b5:be:2f:ce:83:6c:fc:c5:
89:5c:e3:74:20:0a:bc:c8:31:9c:82:c8:c9:ca:45:02:90:95:
0f:63:6d:28:23:54:d8:15:84:44:6d:9e:0e:de:6b:42:0f:5a:
fd:6f:dd:f3:33:38:69:63:ce:ab:8e:6c:b7:62:8b:eb:25:65:
0b:73:3d:ce:89:67:e3:9d:75:66:a8:0d:9e:f6:8d:18:df:94:
70:fa:72:6a:40:70:d4:27:a4:07:b0:46:41:08:42:71:65:57:
bc:25:3b:16:85:75:57:ed:c4:9b:29:47:59:5d:41:a3:77:5b:
02:8c:5e:2d:6d:64:9a:2a:b0:3e:70:aa:be:df:b8:19:6d:3f:
c8:49:5f:bd:9f:7e:8c:00:4e:40:a7:03:5a:cd:0b:28:b6:0a:
6c:69:2a:26:2e:5c:1c:8d:8b:c1:22:fb:f9:ed:13:f1:e6:f3:
01:24:bf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:52:09 2026 by rpki-client