Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier: kahAujMfYgumM7oePixNyKMpPRp3pymiyzNfXTZmkmY=
Subject key identifier: 2C:F9:8D:8F:B5:11:A6:54:4D:2E:F8:C0:D1:AB:C0:16:2C:D5:6C:37
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer: /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial: 01A0E13CF66A47BA1F63FDFF158B0062FC0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number: 1A96
Signing time: Sun 27 Sep 2026 05:01:03 +0000
Manifest this update: Sun 27 Sep 2026 05:01:03 +0000
Manifest next update: Mon 28 Sep 2026 05:01:03 +0000
Files and hashes: 1: 3lE-OFcZg5HBfiXy0gupENM3iyk.roa (hash: bLLbFDCXQ+hwG1ZI2hchMxCwkBA94qpajMIUIPVAa8Q=)
2: 3yN1WaImxLytELQ8orv8zRs2JTc.roa (hash: xMQ9DHu/OHk2/N1Hs4FxQtyh2D3+E7jpj/gCToK104o=)
3: 6tH2d7DuA0R1l2Pidcpu6hElWDI.roa (hash: CfNi98riUNvkPkY0puJ/adG9NQhrM30w+euigtAJ/Sw=)
4: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: bLVYtkTlXxM0p0+fY3nTACZPKUPFGSEjOsDcOCJxydg=)
5: TzbPsDZ-cxzqjv8-LwUqnZiNDVA.roa (hash: Fw/wCqm5ct+1+LFhxRHPMU/lUojt4L4OVaEyFt+zO+s=)
6: ddUJNLSqBtnSmNldI4m1ICrrXaA.roa (hash: 3+OVO0aN+wd5+fw851/RNy2HHQdglPinsg8QGb8dxQo=)
7: eJhW9z5ku9_qhNiO6iw_ATXoEHw.roa (hash: EPkgNIk6bKUUZeeYQssHTaftEyd1+IqUJt3qVX40j0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3c:f6:6a:47:ba:1f:63:fd:ff:15:8b:00:62:fc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Validity
Not Before: Sep 27 05:01:03 2026 GMT
Not After : Sep 28 05:01:03 2026 GMT
Subject: CN=2cf98d8fb511a6544d2ef8c0d1abc0162cd56c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:12:47:03:9a:8e:90:50:fc:9d:db:90:d5:87:
35:a4:fa:20:6d:03:f2:4b:9d:04:27:37:6a:84:75:
3e:04:ac:41:96:f4:32:b7:b2:7d:8c:1c:77:87:9e:
8d:ee:2b:5d:c5:3b:12:99:92:4c:d6:c9:84:12:53:
2f:57:6f:a6:44:09:91:ed:75:7b:8d:d2:8a:32:0f:
05:22:2a:61:8e:d9:56:d9:2d:f4:00:79:ae:a8:96:
28:d0:35:e1:84:f3:9d:7d:a7:bf:8d:3c:3f:f0:a6:
95:c9:e5:d3:83:aa:db:b4:a4:92:18:e0:94:8d:24:
9d:5b:aa:30:2f:f4:8a:fc:58:00:bb:67:cf:78:53:
17:2e:75:87:bf:14:83:0f:87:71:fd:3a:d7:c3:eb:
18:4a:ea:f6:40:07:43:ff:1f:5c:58:55:ff:6a:12:
6f:4f:f9:12:8d:93:1b:38:75:f5:8d:ac:e8:58:5a:
fa:35:98:64:92:76:95:95:b2:67:b9:24:92:0e:a8:
a5:e7:7f:b9:fc:bd:0e:1d:26:e3:81:19:4e:aa:1f:
38:3a:1c:27:f5:bc:d4:ae:d4:1f:71:fa:24:f0:e1:
97:7c:7d:26:4f:17:bc:bc:2d:a4:5f:97:cd:c9:f2:
0c:2e:ef:1e:5c:b1:92:f4:e0:6c:cb:d9:c3:f5:c2:
ed:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F9:8D:8F:B5:11:A6:54:4D:2E:F8:C0:D1:AB:C0:16:2C:D5:6C:37
X509v3 Authority Key Identifier:
keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bf:38:12:8d:44:0c:f7:b8:bc:ac:29:14:d1:60:aa:bf:ee:
f4:f0:c7:43:b4:63:10:48:48:5c:01:c4:7d:31:db:d0:43:7e:
7d:1a:ae:12:8e:35:92:da:db:b7:aa:1c:01:ca:4d:21:7b:0e:
31:6b:25:af:60:bd:63:42:a4:e1:40:14:5d:bb:fe:6f:36:f5:
61:55:af:b6:16:d0:24:d0:2c:e8:74:19:5a:a9:bb:2d:20:9d:
71:90:67:3b:d2:cc:8a:df:de:43:67:71:1e:af:f5:c3:45:9d:
4c:11:0b:ba:76:b8:39:4e:a2:7e:a6:50:98:bf:1a:6d:58:28:
3b:44:9c:73:35:ae:12:7a:93:81:0d:19:18:c3:d7:16:d9:a3:
c2:a8:8a:33:b6:0e:d7:06:97:c9:cc:9a:52:dc:11:a3:7b:e8:
4d:27:fa:34:7e:d3:3d:46:8a:5a:14:bf:4b:e0:0a:5e:bf:f1:
5c:8c:d7:b6:30:5a:13:25:b0:69:bd:61:d7:7c:98:ce:18:1f:
fe:e8:38:0e:e6:7a:9f:e7:75:b2:32:8c:09:70:e6:67:5e:15:
2e:d3:a1:26:c9:66:e0:f5:e6:c6:38:96:bc:ca:2a:a8:57:b1:
a9:78:0a:52:73:19:9d:92:3e:7f:3c:ff:44:f5:bb:80:bc:a5:
39:d8:bd:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhPPZqR7ofY/3/FYsAYvwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZjNlZjNlMGVhOTVhOTc1NTM3ZDVjMjVkOTNjYjc2YWY2
ODcyMzQwHhcNMjYwOTI3MDUwMTAzWhcNMjYwOTI4MDUwMTAzWjAzMTEwLwYDVQQD
EygyY2Y5OGQ4ZmI1MTFhNjU0NGQyZWY4YzBkMWFiYzAxNjJjZDU2YzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhJHA5qOkFD8nduQ1Yc1pPogbQPy
S50EJzdqhHU+BKxBlvQyt7J9jBx3h56N7itdxTsSmZJM1smEElMvV2+mRAmR7XV7
jdKKMg8FIiphjtlW2S30AHmuqJYo0DXhhPOdfae/jTw/8KaVyeXTg6rbtKSSGOCU
jSSdW6owL/SK/FgAu2fPeFMXLnWHvxSDD4dx/TrXw+sYSur2QAdD/x9cWFX/ahJv
T/kSjZMbOHX1jazoWFr6NZhkknaVlbJnuSSSDqil53+5/L0OHSbjgRlOqh84Ohwn
9bzUrtQfcfok8OGXfH0mTxe8vC2kX5fNyfIMLu8eXLGS9OBsy9nD9cLtDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCz5jY+1EaZUTS74wNGrwBYs1Ww3MB8GA1UdIwQY
MBaAFAHz7z4OqVqXVTfVwl2Ty3avaHI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEt
MzUzYjNhNjMzYWRhLzEvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84NDE3YTAtMDc3Ny00NDZlLTk3ZTEtMzUzYjNhNjMzYWRh
LzEvQWZQdlBnNnBXcGRWTjlYQ1haUExkcTlvY2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAir84Eo1E
DPe4vKwpFNFgqr/u9PDHQ7RjEEhIXAHEfTHb0EN+fRquEo41ktrbt6ocAcpNIXsO
MWslr2C9Y0Kk4UAUXbv+bzb1YVWvthbQJNAs6HQZWqm7LSCdcZBnO9LMit/eQ2dx
Hq/1w0WdTBELuna4OU6ifqZQmL8abVgoO0ScczWuEnqTgQ0ZGMPXFtmjwqiKM7YO
1waXycyaUtwRo3voTSf6NH7TPUaKWhS/S+AKXr/xXIzXtjBaEyWwab1h13yYzhgf
/ug4DuZ6n+d1sjKMCXDmZ14VLtOhJslm4PXmxjiWvMoqqFexqXgKUnMZnZI+fzz/
RPW7gLylOdi93w==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:19:59 2026 by rpki-client