Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: Pdot1xM5MmGF0UMjj+44Sd4luS3O785reVJR/7nOQfY=
Subject key identifier: 51:9C:5E:25:3A:72:DD:E3:EC:9B:88:65:47:03:E6:F0:E5:B8:4C:CB
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 019D9A3E597250355261F8CF15721CA55AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 1243
Signing time: Fri 17 Apr 2026 07:01:10 +0000
Manifest this update: Fri 17 Apr 2026 07:01:10 +0000
Manifest next update: Sat 18 Apr 2026 07:01:10 +0000
Files and hashes: 1: PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa (hash: uNWAi4ypu2U7vKEwyptJEE3BsJukgPqN0/lL7CgpehE=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: bw51ilOOS5sg4PmyVmh0m/rSu05GGRtN6gqC2PoyTqU=)
3: bNsvbdSJD0WI7Ewm9hgAe8yTIz4.roa (hash: fjVFQSNrjHzCOHsMITQUOhjzFotcFBmj0QqIbMKaS7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:59:72:50:35:52:61:f8:cf:15:72:1c:a5:5a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Apr 17 07:01:10 2026 GMT
Not After : Apr 18 07:01:10 2026 GMT
Subject: CN=519c5e253a72dde3ec9b88654703e6f0e5b84ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ed:61:f2:d4:01:c1:95:e0:7b:51:8a:87:f9:
bd:2a:ca:69:9c:02:31:ae:95:e0:47:f0:72:5c:fe:
9d:23:7f:81:ca:61:e0:5e:7a:be:1e:9b:89:f1:42:
98:34:18:2d:6a:a7:7a:f6:3b:3b:db:bd:e8:e8:11:
80:ae:35:36:69:50:1c:72:68:90:5b:29:8c:b0:a0:
a1:34:15:32:a8:fa:80:fc:93:38:ad:4d:c3:83:12:
68:44:f6:12:d2:de:89:3f:a1:15:9f:68:45:8c:48:
ad:49:57:b5:44:04:43:18:8c:01:6a:25:db:d4:7b:
a5:79:93:c3:ef:6f:ce:db:0f:ee:17:92:c6:98:70:
31:67:9c:0c:91:bc:9f:0d:f6:a9:fe:bb:bb:9a:33:
59:08:aa:7d:db:45:cd:eb:7b:ac:a8:b0:ed:38:7e:
99:2f:31:f1:b0:f4:d1:c3:43:3f:72:30:df:87:2c:
76:97:7a:23:a7:74:96:9b:e6:f6:bf:7a:05:bf:a0:
d3:06:c7:d3:87:e0:d3:53:52:97:83:6e:d7:b0:ef:
3e:67:40:c3:28:cf:d5:89:49:79:8c:15:bd:7d:b4:
b9:e4:10:4e:8a:c6:23:6d:1d:b6:83:76:43:eb:1a:
ee:21:57:c4:e4:38:87:12:69:34:46:d7:07:7b:f9:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9C:5E:25:3A:72:DD:E3:EC:9B:88:65:47:03:E6:F0:E5:B8:4C:CB
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8f:ae:f7:91:71:20:9b:e3:41:43:51:71:ca:6d:a7:c7:40:
de:78:f3:3f:5b:f8:d3:93:94:cc:b3:33:71:b6:6a:9b:be:c2:
85:cb:7b:d1:91:70:c0:33:55:2b:a9:a7:88:5e:1d:6d:c7:3a:
88:8b:60:a6:5f:86:34:61:70:69:94:1f:7e:27:1f:78:33:fb:
94:98:c6:e9:b4:56:c2:f2:a2:b4:90:2f:de:16:a4:49:ee:79:
bf:78:73:2e:39:58:dc:3f:54:d1:a7:e1:47:fe:bb:6a:b6:c3:
b6:de:02:eb:3c:33:1f:e0:1f:52:63:86:d6:82:02:12:b2:d0:
02:79:33:e1:25:08:a3:5a:b8:58:05:53:80:a8:22:04:fb:c1:
b0:21:34:11:50:39:ec:36:85:f7:61:ee:47:a4:44:55:63:ba:
88:e3:28:1e:eb:db:fe:b1:5f:22:9d:61:8b:76:3a:ce:bf:07:
9e:20:9c:6f:a4:d5:e3:1e:9b:b6:c9:18:08:2d:b1:bd:33:e5:
3f:6d:29:a6:d8:29:cc:c8:ec:a3:3c:74:09:8f:79:21:8c:d1:
ca:6e:6c:b7:3d:0a:a3:3a:bb:e6:98:be:56:93:6d:9f:a5:e9:
10:1d:bc:5b:96:ef:e6:e8:b3:b9:dd:41:4d:08:94:7e:c2:45:
8f:e8:0a:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPllyUDVSYfjPFXIcpVr8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjczNTJkMDcxMzU2MjNlMzNmNWE3ZTYyOTI1ZDRiYWI3
MjJmYzYwHhcNMjYwNDE3MDcwMTEwWhcNMjYwNDE4MDcwMTEwWjAzMTEwLwYDVQQD
Eyg1MTljNWUyNTNhNzJkZGUzZWM5Yjg4NjU0NzAzZTZmMGU1Yjg0Y2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO1h8tQBwZXge1GKh/m9KsppnAIx
rpXgR/ByXP6dI3+BymHgXnq+HpuJ8UKYNBgtaqd69js7273o6BGArjU2aVAccmiQ
WymMsKChNBUyqPqA/JM4rU3DgxJoRPYS0t6JP6EVn2hFjEitSVe1RARDGIwBaiXb
1HuleZPD72/O2w/uF5LGmHAxZ5wMkbyfDfap/ru7mjNZCKp920XN63usqLDtOH6Z
LzHxsPTRw0M/cjDfhyx2l3ojp3SWm+b2v3oFv6DTBsfTh+DTU1KXg27XsO8+Z0DD
KM/ViUl5jBW9fbS55BBOisYjbR22g3ZD6xruIVfE5DiHEmk0RtcHe/mjYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFGcXiU6ct3j7JuIZUcD5vDluEzLMB8GA1UdIwQY
MBaAFGn3NS0HE1Yj4z9afmKSXUurci/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEt
MDcxNTE4ZTA1NzNlLzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEtMDcxNTE4ZTA1NzNl
LzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoo+u95Fx
IJvjQUNRccptp8dA3njzP1v405OUzLMzcbZqm77Chct70ZFwwDNVK6mniF4dbcc6
iItgpl+GNGFwaZQfficfeDP7lJjG6bRWwvKitJAv3hakSe55v3hzLjlY3D9U0afh
R/67arbDtt4C6zwzH+AfUmOG1oICErLQAnkz4SUIo1q4WAVTgKgiBPvBsCE0EVA5
7DaF92HuR6REVWO6iOMoHuvb/rFfIp1hi3Y6zr8HniCcb6TV4x6btskYCC2xvTPl
P20pptgpzMjsozx0CY95IYzRym5stz0Kozq75pi+VpNtn6XpEB28W5bv5uizud1B
TQiUfsJFj+gKVA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:19:16 2026 by rpki-client