Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: g0jY2uuzyFqaTA1uthXTCb9hmBjNwFKv1Xtwsh7pet0=
Subject key identifier: 52:C3:13:13:06:16:98:E2:C1:25:4E:5B:72:2E:5F:2A:77:20:D7:4B
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 01A1E05F42F2EE8FF2B4ED177660FEFEB41B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 14B3
Signing time: Sun 15 Nov 2026 18:01:41 +0000
Manifest this update: Sun 15 Nov 2026 18:01:41 +0000
Manifest next update: Mon 16 Nov 2026 18:01:41 +0000
Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: bsJb6JLXWITXSA/4bw/9e3ae62AW7J5kfxCsspeqoug=)
3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5f:42:f2:ee:8f:f2:b4:ed:17:76:60:fe:fe:b4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Nov 15 18:01:41 2026 GMT
Not After : Nov 16 18:01:41 2026 GMT
Subject: CN=52c31313061698e2c1254e5b722e5f2a7720d74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:5c:6e:d0:1d:2a:0c:2d:ce:55:12:af:0a:
9b:60:a5:02:7f:89:d9:67:01:21:6a:b2:24:76:49:
f0:09:10:5e:4e:f5:72:53:27:6d:b8:c2:09:65:28:
32:77:16:dc:b5:8d:e1:ac:54:d2:c2:39:36:a4:5f:
60:0d:c9:a0:ba:dd:6b:3b:a8:63:7c:d3:c0:54:5f:
ba:35:0e:5a:d9:22:ec:2b:a9:ea:da:92:d9:33:0b:
6c:ac:3b:eb:4e:82:37:ec:87:5f:bf:33:16:9f:a6:
9a:c7:b2:6f:33:67:72:19:63:a9:5a:b5:e6:a1:09:
ca:05:f9:03:15:74:44:19:ce:08:66:c8:4e:54:f4:
78:20:3b:d1:d7:54:bc:c2:0c:cd:7c:91:da:04:fa:
72:d1:9a:29:44:b4:85:97:e6:1a:32:25:37:28:02:
75:f5:f2:af:20:00:a3:3f:ad:5c:0d:e4:67:e9:9f:
8e:18:58:f4:43:c0:47:b7:07:34:5a:a2:9f:cb:44:
88:13:2e:16:23:6f:0f:91:9a:97:fe:31:13:15:da:
57:88:4b:cd:9c:14:1a:f0:ba:12:01:5a:17:8e:fa:
80:5b:52:76:2f:2d:36:f9:25:a6:9a:de:89:99:4f:
88:01:1c:7a:ab:92:a5:40:dd:ab:a5:74:95:27:cd:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C3:13:13:06:16:98:E2:C1:25:4E:5B:72:2E:5F:2A:77:20:D7:4B
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:14:af:82:7b:03:b9:cd:29:e7:51:1c:32:7d:e1:e3:f3:8f:
be:98:e9:e8:9f:9b:f6:88:c4:75:a5:e1:f1:76:1b:3a:d3:0b:
6a:64:a4:66:7d:2e:66:c3:b3:ef:d5:cf:a3:df:b5:6b:77:bb:
24:9a:62:80:a3:22:ef:aa:19:b0:31:aa:e2:c9:6f:dd:04:93:
cc:4a:17:ae:0f:de:d2:fb:cd:7b:d2:4a:be:a5:3c:b5:65:fd:
78:21:e1:ad:6f:01:c6:20:78:86:14:62:65:94:0d:8a:9c:6a:
c6:2f:dd:b3:46:9d:86:be:00:ad:b8:99:1c:79:c2:e2:4f:79:
5e:f6:55:75:11:57:b0:eb:53:bc:7f:6b:71:2f:9b:77:37:88:
b9:ed:fd:6f:38:ae:23:ca:06:83:6c:55:b9:13:8c:14:49:b6:
88:b8:1f:08:75:b8:6f:f1:2c:a6:d6:c0:a9:37:18:8a:b7:38:
96:ca:45:4e:1b:88:0c:ef:e1:81:c6:55:80:5e:45:8d:31:13:
88:3b:71:1a:b3:12:a0:6c:f5:70:4e:f1:2e:a9:07:33:c1:72:
c6:98:ac:e7:86:44:87:61:c2:2a:a5:2a:cd:1e:81:ae:4d:a2:
b1:a4:24:3f:fa:79:ee:f9:fd:32:cb:3c:0c:d2:3d:8e:61:0d:
f4:d2:21:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:06:35 2026 by rpki-client