Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: 2Qw2rZp/I/PDVcmdH+J2zsLqHZQuo3xBphxW/IKnrRw=
Subject key identifier: D6:AB:00:64:96:00:89:B9:50:1F:9F:1C:09:C9:CF:CE:FD:F7:D4:81
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 019EBFC81602662D0FDA04FD14C5AFBB0053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 12DB
Signing time: Sat 13 Jun 2026 07:00:21 +0000
Manifest this update: Sat 13 Jun 2026 07:00:21 +0000
Manifest next update: Sun 14 Jun 2026 07:00:21 +0000
Files and hashes: 1: PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa (hash: uNWAi4ypu2U7vKEwyptJEE3BsJukgPqN0/lL7CgpehE=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: yt2Ab2U7bKBib9K8GfK1uzgC0dLPzcfBuysrEHHcGHM=)
3: bNsvbdSJD0WI7Ewm9hgAe8yTIz4.roa (hash: fjVFQSNrjHzCOHsMITQUOhjzFotcFBmj0QqIbMKaS7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:16:02:66:2d:0f:da:04:fd:14:c5:af:bb:00:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Jun 13 07:00:21 2026 GMT
Not After : Jun 14 07:00:21 2026 GMT
Subject: CN=d6ab0064960089b9501f9f1c09c9cfcefdf7d481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:42:73:3f:81:a6:43:6c:98:9a:d1:ab:c3:03:
a6:76:7d:36:f6:92:a8:bd:9d:3f:98:79:44:7a:45:
f0:71:a8:2d:62:0c:ee:ed:a7:e4:f6:5c:e3:c7:6f:
88:f6:50:8e:e2:fd:ff:56:bd:aa:0a:10:ee:e6:7c:
d8:77:39:06:0a:65:53:3c:9e:7d:15:23:e1:48:be:
d1:80:dc:ff:c3:4b:be:0a:cc:6d:8a:f0:25:00:8c:
5a:ab:24:d7:37:ec:cf:b6:3a:b7:92:0b:64:6b:c1:
81:49:76:de:25:a4:4c:fa:08:34:a4:bc:89:fe:6a:
3c:64:c0:4c:80:33:a9:39:76:38:f5:31:38:06:e8:
11:d7:37:a7:19:91:98:5b:6e:32:34:7f:a8:7a:16:
ef:d4:dd:4e:5b:bd:4a:a5:6b:d1:e0:84:b1:f4:71:
b9:d2:b6:f9:9d:fc:e6:44:a7:27:27:7e:23:9f:87:
27:bb:97:c4:3a:41:fd:37:4e:70:4c:0f:d3:ea:93:
77:dc:47:f0:d1:5e:0d:a3:61:8a:8b:77:a1:11:bf:
14:c1:21:cd:2c:eb:3b:73:81:a0:45:64:08:d8:1d:
54:8b:79:9d:78:76:a3:c6:e6:27:fc:76:75:59:91:
b9:79:6f:c2:10:c5:62:a1:62:fd:a0:ac:3d:15:a5:
c9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AB:00:64:96:00:89:B9:50:1F:9F:1C:09:C9:CF:CE:FD:F7:D4:81
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9a:29:63:8f:04:ed:0d:26:25:fe:f3:06:f3:37:7a:5d:fb:
94:4f:23:b1:3f:07:44:0a:fb:50:2e:b2:0f:f9:ac:de:97:1a:
a0:ca:00:1b:e0:51:e8:b9:17:be:65:64:c0:09:c8:27:cb:40:
4f:99:a6:fb:ef:82:d1:ab:e9:0d:65:5e:2a:15:86:87:bb:65:
1f:41:17:f4:5a:1d:fd:d5:d7:c9:e9:27:0c:f5:15:86:e2:c2:
0c:a8:e8:0c:1f:a3:5c:a6:8b:3c:0c:33:34:f4:b5:98:09:94:
17:a9:df:73:66:8e:8f:e7:8f:b2:4e:34:b1:97:1d:eb:04:f3:
28:4b:bc:ba:bb:f6:35:4b:ef:31:74:25:2d:16:54:62:79:a2:
87:82:68:32:a6:91:ef:eb:9f:20:a7:0c:92:83:f7:8f:63:c3:
3d:12:15:f2:eb:de:b8:5a:d5:35:37:fb:e1:11:88:82:29:fd:
11:8b:7d:d5:ca:0c:24:9a:52:e5:c8:20:11:d9:15:4b:bc:96:
be:ef:33:b0:61:9d:ca:0a:eb:48:b9:cc:f2:1d:60:e8:ed:0e:
b7:34:a4:bc:34:be:fe:89:02:85:32:87:aa:33:35:48:55:04:
b6:ee:ce:df:58:bf:de:ba:fe:4c:0a:5f:de:64:9d:2b:56:62:
5c:7b:7f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:50:41 2026 by rpki-client