Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
File: AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft (raw, json)
Hash identifier: 72D6Ir+BBXA7JjSe66V3VClho7e7f7WN9/C5rXDTFvU=
Subject key identifier: 64:4C:E2:8E:8D:8F:72:03:AE:CB:C4:B6:08:7A:5B:E2:C2:53:58:C8
Authority key identifier: 01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
Certificate issuer: /CN=01f10a032279133d6d64c82531435e5787d11d6b
Certificate serial: 01A0D0121EC3FD86F1BE8FA04B7E237DA18D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:00:43 +0000
Manifest this update: Wed 23 Sep 2026 21:00:43 +0000
Manifest next update: Thu 24 Sep 2026 21:00:43 +0000
Files and hashes: 1: AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl (hash: sbD5kGFORl3uz5AksIu1TMK6R3WX015YWUfVYoR8Rhk=)
2: ZPzCvvAXDEp6OpHBb8rDqpV1VBA.roa (hash: wVo6gN+qFZsAuQseg3rAQsoqV8pB36JzHJHizR0u3Ok=)
3: n_bUUF63fJyO6RE2_6rFYsd7xOk.roa (hash: zlA1EVISGpvLZV/DjqWIFdyGMaWRDEbajyuByb/cvqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:1e:c3:fd:86:f1:be:8f:a0:4b:7e:23:7d:a1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f10a032279133d6d64c82531435e5787d11d6b
Validity
Not Before: Sep 23 21:00:43 2026 GMT
Not After : Sep 24 21:00:43 2026 GMT
Subject: CN=644ce28e8d8f7203aecbc4b6087a5be2c25358c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:a9:f3:63:5c:a8:8a:6f:79:ba:ec:d5:c5:
6a:77:51:26:80:d3:bb:36:9c:85:53:de:83:b8:e6:
93:bf:d7:4f:2b:74:c2:85:8f:f8:ed:72:8a:01:46:
01:fb:b7:03:eb:86:9e:14:a0:9b:cc:bc:02:30:24:
c4:eb:66:41:85:40:e0:5a:6f:8d:ab:9d:a7:79:f0:
31:1b:55:5b:d6:98:e1:21:23:d7:81:22:68:37:91:
2e:3d:7c:63:bf:76:94:6d:82:88:ad:36:80:75:76:
95:b2:01:95:80:b9:90:53:5a:52:24:8d:92:8d:cd:
2c:80:92:da:0e:ee:2d:f6:c5:7d:ca:0a:1c:24:63:
cc:64:00:60:cb:ba:34:1b:4b:2c:83:4e:3e:bb:9b:
29:4a:6b:db:c3:e5:de:6e:b3:be:52:6e:4d:2e:74:
85:fc:4f:aa:63:0f:ad:56:26:f8:51:1d:ce:dc:f7:
fd:e7:6b:56:85:6d:e9:38:da:77:b3:2e:a2:a9:6f:
70:31:0f:c4:79:ac:c9:8a:59:71:68:58:b5:bf:42:
6e:1b:2b:90:f8:03:25:c6:28:2c:19:b5:16:97:c0:
f3:87:ba:b5:82:7f:ad:27:bb:1a:93:30:b8:e7:af:
b1:86:c1:95:64:a7:15:61:8b:14:af:8a:85:29:0f:
cc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4C:E2:8E:8D:8F:72:03:AE:CB:C4:B6:08:7A:5B:E2:C2:53:58:C8
X509v3 Authority Key Identifier:
keyid:01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:28:97:23:a9:c7:ca:f8:aa:8f:b4:f8:fe:f2:ad:c5:b6:41:
15:30:53:77:9e:d0:32:99:f8:8f:ea:fe:29:aa:cf:23:17:bc:
42:c3:ca:d9:fc:41:59:b4:f7:f4:56:38:ef:a7:58:d3:4d:b4:
57:6b:7b:e9:d8:c5:bf:6d:73:4d:a1:56:16:12:f9:76:85:09:
76:96:27:ae:ce:37:db:c6:80:11:9a:cf:69:8c:70:36:48:dd:
17:83:ad:b0:15:0b:72:6d:cc:30:b7:94:fa:41:90:2c:67:a4:
96:4b:bb:25:4c:ec:a7:9a:85:38:cc:5c:e7:fb:f5:90:de:f0:
01:f0:55:75:61:a5:4e:da:61:d4:3e:27:75:a0:23:c2:86:97:
35:f5:17:56:ec:8b:5b:03:d4:c9:0f:62:a2:cd:9b:1a:b2:70:
c6:a5:3a:26:48:fd:56:12:73:e9:53:25:3c:aa:a8:93:68:81:
3f:74:a0:43:1b:45:8d:45:e0:07:ca:d4:a8:9b:57:a3:00:64:
05:d9:34:d9:48:e8:46:1f:82:de:00:59:04:71:01:43:c8:4d:
a9:96:bd:90:90:a4:96:f4:45:69:a9:f2:46:2b:4d:70:1e:64:
96:23:46:6c:75:1a:83:a5:61:53:93:d8:d4:1d:de:0a:6e:a2:
cb:ff:bb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:03:44 2026 by rpki-client