Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: MMQQYyVGWMuYdc+N9/9uqHECOl9nkHEiH6X2b5iS12Y=
Subject key identifier: E9:22:6F:D6:2D:13:BA:80:6D:8C:66:DD:89:2F:5E:F8:87:13:77:FB
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 019CAAC6C54CC21A3DD04FD070EFC43C06D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 11C7
Signing time: Sun 01 Mar 2026 19:01:19 +0000
Manifest this update: Sun 01 Mar 2026 19:01:19 +0000
Manifest next update: Mon 02 Mar 2026 19:01:19 +0000
Files and hashes: 1: PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa (hash: uNWAi4ypu2U7vKEwyptJEE3BsJukgPqN0/lL7CgpehE=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: f873M/SP0mJkDP3CPhWkJ7kyhPfS8wPFr2Rl3N3Q84Q=)
3: bNsvbdSJD0WI7Ewm9hgAe8yTIz4.roa (hash: fjVFQSNrjHzCOHsMITQUOhjzFotcFBmj0QqIbMKaS7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c5:4c:c2:1a:3d:d0:4f:d0:70:ef:c4:3c:06:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Mar 1 19:01:19 2026 GMT
Not After : Mar 2 19:01:19 2026 GMT
Subject: CN=e9226fd62d13ba806d8c66dd892f5ef8871377fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:99:7d:b9:7a:81:0b:ad:e1:32:e5:a9:04:
25:ad:02:2e:4b:de:63:ef:db:d3:ae:56:e2:4a:a8:
bd:fe:29:33:e7:fa:0c:95:84:33:23:74:f8:f8:c4:
4a:9a:1e:63:d9:06:23:70:bf:fa:a0:88:2a:3a:2a:
f9:c1:db:7a:80:7d:81:3e:47:72:15:94:53:02:e5:
70:6f:e7:5e:c2:d3:30:0b:c9:17:ef:ab:07:ad:d3:
1e:11:6e:16:3d:fd:40:09:be:66:89:3b:ca:ee:48:
24:f2:4c:76:fe:35:46:c3:8e:48:63:95:23:4a:40:
c4:51:65:cb:7e:3c:c5:d8:c5:34:15:06:0d:7c:e3:
0a:04:13:e1:90:27:2d:56:60:fe:a1:15:82:f8:2a:
23:92:11:c8:5c:ef:ad:b7:14:58:4b:ff:01:4d:db:
df:21:45:d5:e7:61:7c:04:bb:9c:0b:f0:f4:11:39:
24:19:c6:e0:1c:12:f0:dd:e9:35:e4:a5:19:06:d2:
60:6d:b6:8c:76:7b:03:82:8d:bd:f7:27:cb:e4:d9:
be:78:2f:df:2d:88:e5:fd:97:ec:61:cb:8b:bc:24:
50:cb:40:fd:13:37:c0:14:12:4e:5b:fc:14:32:4c:
21:dc:c7:b9:2b:de:cb:09:84:5e:ce:cb:87:d1:41:
1a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:22:6F:D6:2D:13:BA:80:6D:8C:66:DD:89:2F:5E:F8:87:13:77:FB
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a5:bc:d8:46:ac:40:c6:c5:ae:09:fa:b3:29:f4:05:16:02:
1b:ec:df:5d:8a:14:09:54:c3:12:ae:e7:27:e7:cf:fc:8e:8f:
1e:2c:94:dc:64:82:95:00:73:1c:75:94:11:e9:d2:65:4d:86:
a6:fa:b5:2f:3e:4a:a8:02:89:f7:ec:31:26:18:10:bf:50:d4:
6f:df:23:4d:c8:9b:09:21:42:56:f6:59:5f:5d:98:e3:25:a0:
4f:a6:59:a1:7b:a0:24:fe:0f:70:d0:d0:9d:5a:fc:73:3c:16:
ca:94:3d:bd:1c:d8:11:3a:5f:3f:7f:94:34:d6:72:ae:99:ed:
fb:43:e2:ec:3d:4f:5e:65:df:bc:a6:8f:87:be:d0:97:e0:72:
51:29:fc:91:a4:36:d0:81:9d:e9:c3:65:0d:f5:5b:6b:f7:90:
df:fb:90:bc:ef:8e:2e:29:5e:fe:3c:64:5e:a3:0e:35:9b:4b:
ea:6c:5e:6d:30:34:87:1d:15:22:31:aa:10:e8:81:26:56:ea:
c7:13:9a:38:86:99:73:7b:38:22:0f:e3:dc:65:51:81:2f:72:
4e:45:71:f7:e4:a1:93:d0:04:77:a1:22:b5:a2:b7:c8:be:50:
d3:0f:4e:56:d2:32:0a:f7:46:a2:ba:59:27:0c:e1:ce:b2:df:
e9:39:0f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:14 2026 by rpki-client