Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
File: AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft (raw, json)
Hash identifier: /8NY7UYNMntvNqWZ2p5NmnEX7XMgTd5FPpan3tNPUVM=
Subject key identifier: 2D:E3:73:78:05:A8:4A:4D:62:5A:BB:5D:A5:DC:B2:53:98:E1:EF:95
Authority key identifier: 01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
Certificate issuer: /CN=01f10a032279133d6d64c82531435e5787d11d6b
Certificate serial: 01A0CA47BFE0E97950D3285FAA3AE7394357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:01:34 +0000
Manifest this update: Tue 22 Sep 2026 18:01:34 +0000
Manifest next update: Wed 23 Sep 2026 18:01:34 +0000
Files and hashes: 1: AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl (hash: UJnmBWJ+nkqbovlJADaZVPh9cO7sJSlhRZ3PeqxEx7c=)
2: ZPzCvvAXDEp6OpHBb8rDqpV1VBA.roa (hash: wVo6gN+qFZsAuQseg3rAQsoqV8pB36JzHJHizR0u3Ok=)
3: n_bUUF63fJyO6RE2_6rFYsd7xOk.roa (hash: zlA1EVISGpvLZV/DjqWIFdyGMaWRDEbajyuByb/cvqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:bf:e0:e9:79:50:d3:28:5f:aa:3a:e7:39:43:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f10a032279133d6d64c82531435e5787d11d6b
Validity
Not Before: Sep 22 18:01:34 2026 GMT
Not After : Sep 23 18:01:34 2026 GMT
Subject: CN=2de3737805a84a4d625abb5da5dcb25398e1ef95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:0d:e7:41:9f:78:5e:d0:c2:ae:8b:8d:6b:
b4:5c:ce:9e:6f:eb:20:9a:05:b1:e1:98:30:67:fb:
d1:3b:00:2e:85:6b:98:b4:08:c6:47:c6:cd:90:1f:
7c:bc:df:2a:12:db:fc:2e:77:af:b9:32:ff:0d:e6:
9e:24:b3:a0:32:9b:e8:40:bf:8e:3b:fd:89:17:6e:
86:bf:ea:ea:63:45:fd:e9:ab:96:76:e9:98:f7:9a:
b0:90:81:ff:c4:34:33:e2:7b:8e:c5:24:dc:87:03:
67:d1:5e:83:06:c9:56:1d:13:35:6d:12:76:30:14:
d0:41:32:a2:2e:df:35:5a:95:7f:ea:fb:80:31:8d:
cb:ed:b4:a5:ed:a3:d7:bd:90:fc:b0:a2:07:77:02:
0f:ab:d6:a9:81:bd:ea:4d:14:ae:7b:f6:9a:90:7e:
9a:15:34:f6:be:56:c0:4b:cf:f4:41:c9:6f:a7:6d:
e0:aa:a4:17:99:4e:7d:db:df:ea:9f:fe:f3:59:7e:
b1:73:f1:98:59:2c:d0:e5:bb:b0:c3:8f:8e:7e:9d:
f5:65:5b:1a:7f:0c:68:db:55:cb:e5:7d:9b:b7:1e:
ea:0b:ea:09:7c:27:17:89:05:d2:8b:d2:d5:ee:b7:
56:8d:99:03:d1:70:a4:13:e9:4c:81:fb:65:80:d0:
0c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E3:73:78:05:A8:4A:4D:62:5A:BB:5D:A5:DC:B2:53:98:E1:EF:95
X509v3 Authority Key Identifier:
keyid:01:F1:0A:03:22:79:13:3D:6D:64:C8:25:31:43:5E:57:87:D1:1D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02cccd-0433-4330-981c-c672d673686f/1/AfEKAyJ5Ez1tZMglMUNeV4fRHWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:cf:5c:cc:4b:0e:c9:77:d6:86:20:cb:2f:4c:d4:87:cf:3c:
2b:e7:79:eb:fe:0f:b7:91:32:d0:a8:8b:1c:bd:7e:05:cc:27:
13:5b:9a:1d:54:8e:b1:b4:3a:2c:e7:0e:7e:3b:15:8f:e9:1c:
f2:9f:3e:87:17:43:af:56:50:bf:4a:75:03:4f:82:c6:2b:ad:
19:e7:83:5e:11:1f:aa:89:0e:15:0d:4b:e4:3f:1f:f8:fe:d6:
d2:48:ac:0c:74:d1:39:04:d4:6f:6e:4f:67:3b:23:5d:94:a2:
97:d6:bf:48:c5:9d:12:2e:ae:21:99:07:cc:48:04:2b:bf:e4:
af:8d:cb:91:ee:d6:b7:c5:75:fe:bc:25:bf:fa:96:9e:12:2b:
c5:71:94:27:9c:07:b2:f5:8a:6b:8f:8f:7c:79:fd:99:f1:92:
bf:17:f7:e5:0f:a7:18:9b:22:b1:35:e2:37:26:72:2f:87:c7:
cb:dd:0f:2b:70:27:4f:8f:dd:a7:ba:c4:ee:59:39:62:a2:ed:
eb:d9:12:7e:d4:f6:c5:05:bd:6c:ec:f6:29:44:60:f5:2d:57:
5c:9d:af:d0:40:cd:de:40:b4:9e:4d:d3:c7:21:f9:59:c4:f1:
12:7a:2d:59:63:b5:ff:dd:5c:6b:08:74:75:38:f1:c2:41:3f:
c2:32:18:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKR7/g6XlQ0yhfqjrnOUNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZjEwYTAzMjI3OTEzM2Q2ZDY0YzgyNTMxNDM1ZTU3ODdk
MTFkNmIwHhcNMjYwOTIyMTgwMTM0WhcNMjYwOTIzMTgwMTM0WjAzMTEwLwYDVQQD
EygyZGUzNzM3ODA1YTg0YTRkNjI1YWJiNWRhNWRjYjI1Mzk4ZTFlZjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZ4N50GfeF7Qwq6LjWu0XM6eb+sg
mgWx4ZgwZ/vROwAuhWuYtAjGR8bNkB98vN8qEtv8LnevuTL/DeaeJLOgMpvoQL+O
O/2JF26Gv+rqY0X96auWdumY95qwkIH/xDQz4nuOxSTchwNn0V6DBslWHRM1bRJ2
MBTQQTKiLt81WpV/6vuAMY3L7bSl7aPXvZD8sKIHdwIPq9apgb3qTRSue/aakH6a
FTT2vlbAS8/0Qclvp23gqqQXmU5929/qn/7zWX6xc/GYWSzQ5buww4+Ofp31ZVsa
fwxo21XL5X2btx7qC+oJfCcXiQXSi9LV7rdWjZkD0XCkE+lMgftlgNAM3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3jc3gFqEpNYlq7XaXcslOY4e+VMB8GA1UdIwQY
MBaAFAHxCgMieRM9bWTIJTFDXleH0R1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWZFS0F5SjVFejF0Wk1nbE1VTmVWNGZSSFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMt
YzY3MmQ2NzM2ODZmLzEvQWZFS0F5SjVFejF0Wk1nbE1VTmVWNGZSSFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wMmNjY2QtMDQzMy00MzMwLTk4MWMtYzY3MmQ2NzM2ODZm
LzEvQWZFS0F5SjVFejF0Wk1nbE1VTmVWNGZSSFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYc9czEsO
yXfWhiDLL0zUh888K+d56/4Pt5Ey0KiLHL1+BcwnE1uaHVSOsbQ6LOcOfjsVj+kc
8p8+hxdDr1ZQv0p1A0+CxiutGeeDXhEfqokOFQ1L5D8f+P7W0kisDHTROQTUb25P
ZzsjXZSil9a/SMWdEi6uIZkHzEgEK7/kr43Lke7Wt8V1/rwlv/qWnhIrxXGUJ5wH
svWKa4+PfHn9mfGSvxf35Q+nGJsisTXiNyZyL4fHy90PK3AnT4/dp7rE7lk5YqLt
69kSftT2xQW9bOz2KURg9S1XXJ2v0EDN3kC0nk3TxyH5WcTxEnotWWO1/91cawh0
dTjxwkE/wjIYKg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:25:08 2026 by rpki-client