Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
File: AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json)
Hash identifier: gNqFhvuBk03wUtW31uuXYjDHzsl7ruBuZRlTDWBqdVM=
Subject key identifier: 7B:A7:5B:B9:8A:FC:48:F2:A6:00:35:46:C1:30:39:1C:49:5D:5D:97
Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
Certificate issuer: /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Certificate serial: 019FA975758B452216C4CBE34ABABEAB0FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
Manifest number: 12BB
Signing time: Tue 28 Jul 2026 16:01:15 +0000
Manifest this update: Tue 28 Jul 2026 16:01:15 +0000
Manifest next update: Wed 29 Jul 2026 16:01:15 +0000
Files and hashes: 1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: ml6vd23duqHthBMsaU96V8/Ir2xPLIGWxqlWPVx6mNk=)
2: YF-tWCFsSuAIoswUePA1e2Wc2vc.roa (hash: pEIfFvCDAADSX4Ka/xFTpfoKfdGNNPSk4G6XnaiqnGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:75:8b:45:22:16:c4:cb:e3:4a:ba:be:ab:0f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Validity
Not Before: Jul 28 16:01:15 2026 GMT
Not After : Jul 29 16:01:15 2026 GMT
Subject: CN=7ba75bb98afc48f2a6003546c130391c495d5d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:52:ba:e7:1a:5f:d8:20:eb:85:a3:29:2e:
24:d7:88:e1:8a:ae:bf:eb:7c:14:bd:a4:5a:bb:8a:
28:71:57:d1:46:a8:ed:fe:ac:e3:19:0b:03:c9:32:
d7:e6:a3:60:9f:76:c4:65:ef:f0:e3:78:d2:5a:55:
1f:a2:56:f5:fc:50:cc:fa:69:39:03:dc:4b:95:39:
14:44:9b:06:3e:c2:62:ec:6d:0a:91:74:66:10:54:
6b:5b:a7:c2:c7:7e:53:d9:56:2c:85:00:f9:dd:18:
41:c1:75:36:a9:99:9d:51:29:43:78:25:8a:2a:77:
55:94:5e:bc:3f:62:aa:e1:f6:62:6d:e1:cb:a9:bf:
88:df:c7:24:66:7b:aa:9c:fc:f7:ad:19:67:4d:b8:
19:3b:33:3f:60:21:40:09:1d:d4:c3:71:31:6e:d9:
c2:6b:3e:64:26:8a:25:7f:43:7d:3f:00:57:48:e9:
4a:68:16:dd:64:b5:72:20:c5:de:ae:b5:d4:f0:19:
ed:8c:d0:a7:a3:75:00:a0:f2:ef:4c:b0:5e:f6:7a:
5f:be:a5:94:cd:13:91:01:b2:cb:5d:57:04:94:7a:
d2:b3:b0:39:af:c5:a7:2b:0e:b8:33:f9:0f:a6:d5:
59:78:06:b2:7e:fb:ce:82:52:c3:5e:89:90:31:c4:
df:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A7:5B:B9:8A:FC:48:F2:A6:00:35:46:C1:30:39:1C:49:5D:5D:97
X509v3 Authority Key Identifier:
keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7b:ed:69:6b:6a:a5:2c:2d:d0:63:2c:fa:d2:5f:e3:1f:2c:
bb:78:0e:0b:91:75:30:fc:d5:f2:5b:9e:06:f5:b6:2c:ac:e0:
1f:46:21:1d:73:bc:8a:3f:e0:5c:83:52:84:c1:77:b4:82:00:
13:a6:f1:dd:be:6a:4f:7f:d9:f8:c8:81:bc:5f:87:2b:3e:4b:
19:72:62:c4:b4:41:95:f6:e9:80:59:e0:42:0a:c0:8b:78:48:
7b:43:bf:6f:68:64:67:e9:8c:14:25:9b:4a:44:4b:80:63:64:
cf:65:f7:6f:46:ac:5b:f7:3b:c6:ad:be:99:a3:3a:9d:03:4e:
c5:54:07:9b:39:f2:af:9d:41:e6:d5:c6:f0:5a:6c:82:a3:b9:
19:02:06:ea:07:87:e6:e1:ba:bd:3d:98:15:00:78:d7:2e:e9:
57:0f:a0:06:49:d0:76:1f:73:b6:70:4f:88:50:e0:8c:2e:19:
5d:ec:02:bf:90:bb:e9:19:b4:51:e3:c7:26:88:60:a9:e6:2d:
c5:1f:6a:c9:16:e9:27:9a:81:5a:e1:9c:fd:42:0d:d0:7c:b4:
51:24:10:6f:5a:4b:eb:01:a6:69:dd:f6:dd:1c:2f:ba:b7:60:
6e:c6:65:97:12:b3:eb:1a:0e:93:c7:d5:3f:5a:9f:e4:ac:a2:
56:7a:a2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:51:24 2026 by rpki-client