Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
File: AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft (raw, json)
Hash identifier: U+QvJ9R56xiyaqjW38ZDoFEL9IiFDe7cfb0MMCiJaEU=
Subject key identifier: 57:39:9E:B4:42:0C:96:51:CE:D8:95:BE:64:16:03:FE:A5:D0:81:5D
Authority key identifier: 01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
Certificate issuer: /CN=01f10a032279133d6d64c82531435e5787d11d6b
Certificate serial: 019FAA874400782AE4B6539C1F9F36CB9128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:00:18 +0000
Manifest this update: Tue 28 Jul 2026 21:00:18 +0000
Manifest next update: Wed 29 Jul 2026 21:00:18 +0000
Files and hashes: 1: AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl (hash: yCtx6vZ749hUrzJYJ3xsicw06iRZ6f+9DnP5qtsIy6Y=)
2: ZPzCvvAXDEp6OpHBb8rDqpV1VBA.roa (hash: wVo6gN+qFZsAuQseg3rAQsoqV8pB36JzHJHizR0u3Ok=)
3: n_bUUF63fJyO6RE2_6rFYsd7xOk.roa (hash: zlA1EVISGpvLZV/DjqWIFdyGMaWRDEbajyuByb/cvqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:44:00:78:2a:e4:b6:53:9c:1f:9f:36:cb:91:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f10a032279133d6d64c82531435e5787d11d6b
Validity
Not Before: Jul 28 21:00:18 2026 GMT
Not After : Jul 29 21:00:18 2026 GMT
Subject: CN=57399eb4420c9651ced895be641603fea5d0815d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0c:2c:66:b4:08:34:5b:8c:74:42:9e:bf:63:
23:da:e8:3c:70:ed:7e:74:ce:44:c8:5f:ce:d2:8f:
df:c6:8c:44:ce:d8:bf:3d:d3:67:da:5b:25:8e:12:
0b:8d:37:af:1c:c5:35:6a:a8:6a:c7:c4:38:5d:2d:
62:f6:0f:d5:1d:a8:c5:7c:cc:e1:f5:e3:3b:20:7f:
26:af:b8:24:16:2f:0f:b5:eb:7b:1e:e8:16:1c:6a:
31:0f:13:c6:bb:f9:20:13:dc:45:31:37:dc:46:b2:
66:d6:ad:92:81:7a:b1:4a:31:a8:d9:3b:3e:86:78:
ec:f8:a2:91:47:7b:99:dc:19:89:7d:3f:31:04:b5:
6b:58:b8:a8:32:cc:79:af:e5:d8:7e:11:b9:0b:ff:
57:31:cd:9a:5a:f6:08:bc:b4:94:78:59:ae:ec:3c:
5d:47:70:3c:08:fd:d2:a8:04:b0:71:46:66:96:07:
b5:71:44:90:16:df:22:bb:ee:00:ea:03:a8:35:59:
4c:21:22:f2:c5:2f:a1:28:bf:fe:3d:de:85:df:01:
c8:cb:b2:d1:03:94:43:81:db:0e:68:02:88:e8:67:
fb:1e:4a:00:3c:89:db:c2:fb:bf:b6:a6:9b:6f:15:
a2:bf:50:74:d0:48:4c:d3:3e:00:9c:fc:94:ca:42:
a9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:39:9E:B4:42:0C:96:51:CE:D8:95:BE:64:16:03:FE:A5:D0:81:5D
X509v3 Authority Key Identifier:
keyid:01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:dc:b5:69:18:cb:b4:5c:fb:8a:20:cb:0c:79:34:58:34:d4:
39:25:28:55:15:d6:76:fd:18:04:aa:70:46:d7:5a:4a:41:9b:
0e:a8:47:27:58:ab:1b:a6:94:7e:3f:28:29:c8:99:4c:6a:a8:
3a:4a:8c:fd:22:ab:f7:3e:b7:1c:d2:8f:70:84:86:c0:03:e4:
ef:19:20:f0:b0:10:31:ff:93:fd:83:01:c2:0b:2f:d8:bc:1f:
8e:fc:70:78:20:c0:28:68:04:b8:4d:12:46:45:f6:9b:a0:f2:
1a:96:91:a4:f0:2b:6d:af:6a:f7:e1:6e:87:d1:92:b2:56:2f:
de:d6:7d:79:f8:ee:56:d8:cf:8f:0d:db:fb:4b:07:3f:8c:f5:
f5:52:07:c9:1a:9c:f0:05:a5:0b:ed:f0:e0:6e:71:af:de:98:
63:bd:59:ce:56:c9:97:53:28:65:f4:98:be:dc:33:93:98:83:
1d:b4:fd:ad:cf:b0:30:c5:db:4b:23:78:14:09:21:58:de:1f:
c8:19:22:3b:5b:8c:a7:60:8b:1c:1a:20:ba:29:34:88:e5:d3:
d1:33:44:c1:a3:88:d7:f4:06:97:a9:2b:9a:1b:80:35:b6:21:
24:86:0e:f2:00:83:6e:6b:9c:f5:90:13:62:69:c0:df:09:5f:
bb:cc:60:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:57:18 2026 by rpki-client