Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: aJNb9mJH99PrBOtxMYIaTtu/9mxzogkKh8IDcJO12DQ=
Subject key identifier: 2E:40:27:F6:B7:5D:E4:42:6D:F3:A2:56:34:BA:B9:AE:87:DE:D3:F5
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 01A0C369326E9943538376D9CB1DA04CE22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 13E6
Signing time: Mon 21 Sep 2026 10:00:46 +0000
Manifest this update: Mon 21 Sep 2026 10:00:46 +0000
Manifest next update: Tue 22 Sep 2026 10:00:46 +0000
Files and hashes: 1: PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa (hash: uNWAi4ypu2U7vKEwyptJEE3BsJukgPqN0/lL7CgpehE=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: +BHue+ZM74I0XVGMIYrEWkRIVPpDp/YCAuj3v0p7ivE=)
3: bNsvbdSJD0WI7Ewm9hgAe8yTIz4.roa (hash: fjVFQSNrjHzCOHsMITQUOhjzFotcFBmj0QqIbMKaS7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:32:6e:99:43:53:83:76:d9:cb:1d:a0:4c:e2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Sep 21 10:00:46 2026 GMT
Not After : Sep 22 10:00:46 2026 GMT
Subject: CN=2e4027f6b75de4426df3a25634bab9ae87ded3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:64:f1:a7:09:fc:38:08:0d:06:2b:c8:8d:3f:
76:8d:03:3d:40:21:c8:ff:db:04:35:1b:47:99:d4:
6e:97:c4:1d:97:47:28:5d:db:d8:bd:82:f1:5d:66:
6e:4e:b0:a9:c3:1f:6a:05:98:e1:d4:ff:08:83:ab:
95:8f:70:6a:25:7c:48:8f:45:dd:2f:24:6f:c4:34:
55:e1:4b:b7:54:8e:ae:66:37:fc:49:d8:5c:9d:23:
70:f6:8d:b2:e7:24:be:12:13:72:52:96:a3:b1:b8:
93:f8:86:e8:3c:ac:17:a2:fe:01:25:6c:49:0c:6c:
6e:ea:7a:29:58:f5:9f:03:ca:21:f0:e3:92:a7:42:
f4:ba:74:43:04:4a:cb:e4:0d:98:3c:d1:39:5d:9f:
a5:60:b0:0e:c0:e9:6a:d9:b5:60:b8:8f:09:20:c7:
bb:7f:d5:1a:74:07:c3:8b:4b:66:49:f0:c1:b2:90:
a5:73:d5:0d:11:4c:35:cc:e7:db:aa:27:32:bf:3a:
ca:4a:1a:15:39:62:69:20:20:e2:f0:27:cb:ff:27:
80:b0:dc:e9:af:3b:7b:1d:f8:b5:37:c0:58:a4:ef:
01:62:ff:6a:34:1f:ae:7d:eb:70:15:17:53:68:4e:
af:e8:26:d3:60:23:39:50:ea:39:03:a1:3d:15:08:
a6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:40:27:F6:B7:5D:E4:42:6D:F3:A2:56:34:BA:B9:AE:87:DE:D3:F5
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e5:de:bb:57:1a:21:9e:46:01:79:83:2e:ef:2f:1b:71:ab:
61:1f:3e:65:35:c6:9c:66:6c:9b:6f:43:dc:ff:f6:4b:6f:9a:
ef:3d:2f:3c:10:c3:12:d0:29:70:22:8a:0c:72:2d:2b:a9:6c:
52:4a:5e:5f:f9:79:59:2a:26:7b:0c:e9:eb:2e:f6:82:99:24:
f9:71:5e:61:9f:4f:e1:92:01:82:6f:2c:e9:36:96:74:70:e3:
3f:35:b2:30:d1:2d:46:08:1e:e4:16:ff:ab:81:e2:a8:b6:9e:
5c:cf:5a:be:81:e2:84:cd:f3:3c:bf:8e:28:ec:52:eb:ca:48:
df:dd:67:e8:e5:d5:8d:be:68:0a:19:8b:75:54:13:97:be:48:
c5:0e:e8:05:25:ce:cd:54:c0:ee:8d:7d:65:f8:82:58:00:9e:
94:30:18:be:8d:7a:68:a9:74:93:47:db:34:59:d7:59:7a:a2:
23:5b:c2:2a:e7:7d:ba:69:f7:f5:5b:49:bf:d9:b2:1e:03:db:
fc:2e:c0:bc:5b:26:38:aa:68:e3:9e:31:3d:69:a3:55:ad:6d:
d1:86:51:41:29:db:66:a9:54:9f:ce:f3:fd:e4:bb:45:0c:8e:
90:5a:29:c1:16:f3:66:dd:44:08:61:a4:83:bc:09:07:31:cc:
5d:ac:a9:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:26:28 2026 by rpki-client