Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: MMu09Ha9yz8wJ53sUxWH0knbyGMp0CQXfvKhrDsaDVY=
Subject key identifier: C1:B6:DB:4C:04:D2:BE:F8:1E:C3:0E:47:0C:75:B0:5F:F6:2D:20:3E
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 019CA9EB4D4FA25CA4F3D3FF74C3B90CADE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 1200
Signing time: Sun 01 Mar 2026 15:01:36 +0000
Manifest this update: Sun 01 Mar 2026 15:01:36 +0000
Manifest next update: Mon 02 Mar 2026 15:01:36 +0000
Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: o0dC1xz1qL0bDVF8qNI1kk//AOfxtDFnLiDhARw985E=)
3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:4d:4f:a2:5c:a4:f3:d3:ff:74:c3:b9:0c:ad:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Mar 1 15:01:36 2026 GMT
Not After : Mar 2 15:01:36 2026 GMT
Subject: CN=c1b6db4c04d2bef81ec30e470c75b05ff62d203e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:eb:13:bb:7a:84:78:5b:23:f3:61:fa:2d:75:
30:6c:e9:89:12:ca:8d:ea:03:af:2e:d2:6f:5a:4d:
d9:4c:c2:ca:1e:21:9d:a0:14:12:73:9a:27:bc:80:
7d:47:0e:d7:26:e8:ac:35:61:e8:30:38:ae:6f:67:
91:71:19:74:44:4f:06:10:e9:15:52:cb:0a:c3:a4:
59:78:bc:7f:2f:80:10:f7:60:a7:e9:ae:19:89:cf:
ab:a6:19:eb:38:11:a7:52:38:7a:f0:22:30:19:69:
22:5f:ec:7c:2e:5a:4b:07:60:ee:9c:06:c0:1d:df:
f5:25:3e:36:5f:1a:1a:f2:87:ce:c8:27:1a:53:cd:
8c:84:14:e0:46:1e:6e:26:b0:43:8f:e6:de:1c:1b:
7f:25:49:92:ff:19:94:84:f7:d1:5e:99:57:f5:27:
f7:fd:84:c2:11:0f:c5:f8:d7:4c:28:26:3d:42:7b:
cb:b8:30:1f:2a:86:e1:ba:0c:10:d8:48:69:25:59:
89:26:39:6d:4d:0d:98:4e:39:39:74:9b:e7:04:0e:
68:d2:e3:df:0a:f1:e7:b2:80:da:04:de:b5:83:dc:
01:8f:58:8f:fb:c1:e7:96:7d:eb:6c:0a:40:89:16:
4f:be:d7:2f:cd:b8:bd:c9:aa:e1:7a:d0:74:dd:8a:
52:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B6:DB:4C:04:D2:BE:F8:1E:C3:0E:47:0C:75:B0:5F:F6:2D:20:3E
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:e5:dc:d4:31:b5:35:59:14:9d:8f:9f:81:1d:8e:47:bf:8c:
6d:c9:33:e8:a1:17:76:05:fe:52:7d:5e:a3:bd:57:a6:ea:40:
63:fc:c8:38:76:00:82:c8:8b:26:5d:30:46:20:7b:e8:2a:b8:
35:f7:22:ba:c2:cc:25:be:6d:f5:4f:dc:c8:71:93:a7:7c:e0:
0d:4e:77:75:40:89:88:81:c6:0d:a9:c1:66:9e:23:ca:10:87:
63:35:ed:73:d9:97:98:44:c4:c8:b0:9f:3c:3a:5b:d4:bf:ed:
bc:eb:47:81:d6:9a:f1:ae:43:7e:f5:1b:c7:44:ac:e6:7e:6b:
b5:c2:e3:59:46:20:e1:ad:9a:d8:04:0f:4c:81:c5:cc:ad:49:
ab:d0:bd:c7:f8:a6:56:59:18:7d:78:e4:1b:28:aa:c9:73:54:
86:1d:52:8b:d5:4b:dc:db:d6:4f:b4:82:68:ed:db:2d:53:9f:
b2:5f:9c:fa:0d:d7:8f:55:77:ef:a5:62:9d:84:9f:46:a0:1b:
ba:01:6b:73:39:c4:95:ef:97:2b:d5:77:20:03:a8:a5:1c:67:
f7:03:7d:9c:65:2e:0a:2a:48:2b:ab:99:5b:ec:e5:74:cb:18:
00:5f:69:89:6d:41:18:19:c6:df:6d:4b:0c:97:a5:d2:25:0f:
d3:90:18:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:21:53 2026 by rpki-client