Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
File: AFetCa6aGpgBInWFGqvmnk4VovQ.mft (raw, json)
Hash identifier: ftfm5dVeKu0f2Qt7q++0lTe6tnpllPUifdkFwd9puWo=
Subject key identifier: 01:1B:76:33:B7:E9:35:0D:29:94:58:E8:C5:F8:AB:C0:D8:EA:27:9C
Authority key identifier: 00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
Certificate issuer: /CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Certificate serial: 019EBDDA9EB76CD54832A3090BF33096A644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
Manifest number: 1241
Signing time: Fri 12 Jun 2026 22:01:21 +0000
Manifest this update: Fri 12 Jun 2026 22:01:21 +0000
Manifest next update: Sat 13 Jun 2026 22:01:21 +0000
Files and hashes: 1: AFetCa6aGpgBInWFGqvmnk4VovQ.crl (hash: /6MIS5FdxK2R9YlZIVUifFRtrVnadTuTrRT5bp/YSUY=)
2: YF-tWCFsSuAIoswUePA1e2Wc2vc.roa (hash: pEIfFvCDAADSX4Ka/xFTpfoKfdGNNPSk4G6XnaiqnGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:9e:b7:6c:d5:48:32:a3:09:0b:f3:30:96:a6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0057ad09ae9a1a98012275851aabe69e4e15a2f4
Validity
Not Before: Jun 12 22:01:21 2026 GMT
Not After : Jun 13 22:01:21 2026 GMT
Subject: CN=011b7633b7e9350d299458e8c5f8abc0d8ea279c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:d1:47:88:19:41:f9:1c:ab:0f:55:88:43:
73:4c:73:8b:f7:c6:28:85:59:95:09:f6:c4:5e:76:
60:4a:f2:5a:b1:3a:24:ec:3d:a7:f7:96:ab:a6:c6:
41:2e:f5:07:23:28:3c:2d:71:7f:e2:44:a9:82:e1:
61:df:8d:0a:35:62:68:cb:dc:68:f0:b7:7c:b8:5f:
67:e4:30:cd:4c:09:08:f8:b4:7c:9b:b8:70:95:b4:
79:f7:34:92:34:f5:89:7c:09:01:78:de:4d:08:d2:
9c:6c:a8:4e:e6:b0:3a:e7:18:7d:05:09:e5:28:42:
63:6b:93:29:b1:f8:d3:fa:f8:b2:5d:cf:bd:e4:7b:
e9:fb:be:09:a3:06:65:62:fe:14:96:0c:55:20:13:
c4:e2:ae:c6:ea:0a:8b:14:98:a0:9f:d1:95:65:60:
44:02:c0:a3:62:10:97:29:ab:b1:b1:9b:05:18:48:
dc:72:68:cc:a4:c5:5f:25:a4:e9:8f:cf:31:dd:61:
a8:ad:ee:f9:57:a0:af:ba:8f:bc:84:92:6f:b0:4e:
65:3a:52:b4:ce:e5:00:2c:a4:6b:10:00:9a:4b:ac:
9c:c8:02:5b:4b:e4:e4:ad:52:f4:01:05:08:3d:ee:
fc:aa:e3:ff:da:16:bd:1f:08:2a:43:d1:a4:32:fe:
26:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1B:76:33:B7:E9:35:0D:29:94:58:E8:C5:F8:AB:C0:D8:EA:27:9C
X509v3 Authority Key Identifier:
keyid:00:57:AD:09:AE:9A:1A:98:01:22:75:85:1A:AB:E6:9E:4E:15:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFetCa6aGpgBInWFGqvmnk4VovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c32b9-f775-4868-923d-dca38d59a158/1/AFetCa6aGpgBInWFGqvmnk4VovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8f:7b:c8:93:56:eb:4a:46:d2:f5:28:30:8b:fb:51:e5:14:
0b:6f:5f:13:3b:4d:b9:ae:d3:ae:aa:16:72:ad:8c:d7:d3:37:
c2:02:42:ed:ed:ca:c4:71:7e:89:d8:0c:ba:80:e4:cb:5d:73:
3e:55:d1:3c:a1:b2:8b:f7:1e:00:53:c9:c4:9f:fb:22:7d:44:
dd:2a:25:57:c7:f8:0f:4b:67:cb:f0:41:8b:e6:4e:7b:07:ad:
b5:90:f2:a7:ea:89:a4:3a:2e:72:00:95:96:36:69:98:f5:07:
f2:3e:dc:7f:84:3e:25:6b:81:b7:c6:55:02:d4:b2:eb:da:3e:
c5:18:82:29:67:95:00:31:e8:10:3b:51:dd:61:e9:65:de:e8:
4c:4f:44:dc:10:6d:7c:56:6a:e1:01:01:7e:43:d3:69:9b:f2:
a1:a2:e2:8c:b0:c7:fc:fc:eb:10:06:4d:7d:da:82:8a:36:ac:
93:3e:a9:d0:de:c9:5c:e4:19:cd:9c:b6:41:d0:d3:85:be:fb:
60:88:b8:8d:3d:88:95:8d:29:e0:9c:c7:b8:c5:e3:52:60:94:
17:58:c3:b9:82:7a:33:aa:a4:66:06:78:87:cc:03:03:81:ec:
55:31:03:26:d1:3e:c4:1d:f9:ce:70:59:90:b6:e3:38:1e:23:
6b:90:ee:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:19 2026 by rpki-client