Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: 1V5ZQQyTNyjHZfWyy9mpDXEbHMj0x7vXBjmhZ3cGlQ0=
Subject key identifier: 32:D2:55:21:68:81:18:60:7D:C0:DE:AF:BB:F8:4B:17:42:89:E2:35
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 019FA975D43A460909105B94289E601FEDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 1354
Signing time: Tue 28 Jul 2026 16:01:39 +0000
Manifest this update: Tue 28 Jul 2026 16:01:39 +0000
Manifest next update: Wed 29 Jul 2026 16:01:39 +0000
Files and hashes: 1: PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa (hash: uNWAi4ypu2U7vKEwyptJEE3BsJukgPqN0/lL7CgpehE=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: Jie0j06E+ime5h7Ok4etEtjZ6mDzcuNp+zh0UaGxOMg=)
3: bNsvbdSJD0WI7Ewm9hgAe8yTIz4.roa (hash: fjVFQSNrjHzCOHsMITQUOhjzFotcFBmj0QqIbMKaS7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:d4:3a:46:09:09:10:5b:94:28:9e:60:1f:ed:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Jul 28 16:01:39 2026 GMT
Not After : Jul 29 16:01:39 2026 GMT
Subject: CN=32d25521688118607dc0deafbbf84b174289e235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c8:37:3d:b4:6a:44:fd:0f:bf:8a:5a:23:1b:
a8:d8:12:f6:8c:62:7e:05:27:65:15:2c:d9:56:91:
99:d9:86:f1:59:84:43:eb:1f:1b:83:ed:21:4d:98:
00:05:9f:22:df:e1:76:d4:51:b4:e7:cb:e8:b8:b7:
d9:7b:23:39:17:25:fd:c3:0b:45:3f:57:93:74:f3:
9a:87:7c:10:fe:9b:ac:ec:cd:4c:27:40:79:4d:ed:
33:52:ee:f6:a7:eb:87:3f:d2:a4:28:22:ee:40:40:
e5:6d:2f:44:80:48:4e:bb:8c:c2:af:25:cc:cc:8f:
c9:cd:e0:e0:87:d2:e5:45:a2:c6:77:30:5f:24:a5:
3d:f4:ce:ea:d9:6b:6b:e2:71:60:62:b6:10:ee:e3:
2d:32:15:3e:18:e2:ce:01:16:33:8e:04:39:bd:7e:
d6:6f:97:8e:5c:17:4f:2f:3f:df:a2:69:40:e8:e7:
1e:cc:c8:9d:11:8f:7c:e8:15:2c:9c:89:e0:a5:ce:
a9:46:70:61:38:5d:1c:42:42:b7:6f:fb:18:06:a8:
01:15:65:90:41:29:7a:32:c6:89:6b:df:87:73:e2:
aa:7d:5f:f9:21:79:ee:7f:f7:bb:08:fd:2c:11:00:
db:2d:af:6b:9f:ce:c6:f5:28:5b:f7:63:6c:90:82:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D2:55:21:68:81:18:60:7D:C0:DE:AF:BB:F8:4B:17:42:89:E2:35
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a8:aa:39:7c:8a:57:21:92:40:23:fc:9c:00:ab:b4:df:68:
e2:0e:c2:44:91:a3:b5:f3:a8:96:d5:62:64:1c:54:33:b4:94:
ba:b3:d8:3b:5e:64:bf:d2:79:25:70:85:14:dc:c6:44:65:10:
75:de:56:48:5f:58:f0:b0:49:07:b3:0e:70:33:20:4c:24:38:
c0:a6:a1:a0:ee:b4:3a:58:5a:4c:a6:ce:08:1d:89:07:c5:f7:
8b:5d:fb:b9:84:cd:12:82:e4:5b:8c:ea:13:2e:da:20:36:ad:
1b:be:06:fd:e6:1b:90:e1:72:46:a2:41:81:10:18:2d:80:95:
40:0f:63:c0:fb:cc:11:90:83:71:05:c2:6d:75:96:0a:82:76:
6e:36:07:3f:11:ad:83:68:5c:29:01:c4:04:7c:fe:36:74:fb:
0f:0a:48:35:38:e7:c6:fc:6a:6f:3e:1b:6b:cd:f7:8d:08:5a:
7d:c4:64:9d:31:f1:72:6e:7d:65:3f:95:8e:d9:a6:a0:2f:01:
7d:80:4e:02:0b:41:89:7c:10:7a:4d:1a:30:94:c2:16:11:f6:
62:58:7d:5b:96:cc:76:ba:a2:d4:ba:b2:8c:39:8f:af:b3:cc:
e7:a3:c1:f5:25:77:0a:d8:4d:20:a2:be:f8:f3:f6:23:86:8f:
3d:76:e5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:28:59 2026 by rpki-client