Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: V+BXLlrjONqLnT2p15vmq5n1lqivx9ZSdVtXBoUTLIQ=
Subject key identifier: 1E:F0:11:86:43:E3:77:DC:83:62:35:3C:2F:E8:A1:1B:6B:38:ED:A2
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 01A0C28E382694B383438E9CE4D79EE39E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 141F
Signing time: Mon 21 Sep 2026 06:01:35 +0000
Manifest this update: Mon 21 Sep 2026 06:01:35 +0000
Manifest next update: Tue 22 Sep 2026 06:01:35 +0000
Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: bNqe5KmSQYCjUFI6joWstlkYaVvzKduPUEh/19pZrPA=)
3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8e:38:26:94:b3:83:43:8e:9c:e4:d7:9e:e3:9e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Sep 21 06:01:35 2026 GMT
Not After : Sep 22 06:01:35 2026 GMT
Subject: CN=1ef0118643e377dc8362353c2fe8a11b6b38eda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:ed:12:fc:e9:f8:e2:01:56:f6:03:75:81:
e9:c5:55:65:0c:aa:31:b4:cc:33:23:4e:a4:dc:89:
fb:6d:a9:a2:73:38:37:1c:ab:d9:8e:8d:82:be:d2:
12:f1:39:cb:53:83:b3:6f:fe:13:e3:e6:9f:bc:48:
d2:eb:99:41:7a:73:f7:da:b9:ba:06:3a:2d:41:d7:
e7:1b:02:1b:1b:c4:9b:ca:48:03:44:1b:f4:74:46:
13:4f:b1:b0:7a:cf:17:25:6b:30:01:c0:65:65:9b:
b6:86:a0:f8:4a:41:11:0d:a4:43:e6:0f:ff:e7:91:
ac:cd:6b:9f:35:18:dc:c1:1c:2a:a8:0c:e5:a5:dc:
64:30:68:a8:05:6e:f1:38:7b:b3:9c:bd:06:2c:7c:
46:1d:1d:57:e4:55:e6:05:6c:17:dc:b1:34:10:39:
6e:87:f8:f3:93:70:16:30:03:8e:54:93:95:c1:72:
e0:8b:31:bb:de:ee:ec:c6:65:17:d2:5c:ca:e9:7d:
46:6d:19:61:93:a3:65:24:1e:ac:b6:8b:fc:19:8a:
cb:34:05:25:0e:d3:d1:39:08:2e:f1:75:d4:dd:1e:
05:3f:ec:f3:79:cc:ab:e1:8c:16:09:f5:db:73:54:
d2:6f:b0:ff:b1:f2:b3:31:e5:d7:39:7e:b5:12:e6:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F0:11:86:43:E3:77:DC:83:62:35:3C:2F:E8:A1:1B:6B:38:ED:A2
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7c:93:e8:eb:b0:8b:0a:39:d0:d0:8a:81:c6:7c:47:e6:5d:
a2:d7:f9:f2:6a:1c:30:0f:12:6c:6d:81:a6:e8:ef:b2:b5:73:
d9:af:8c:a4:db:79:a2:15:8a:cb:2b:36:a0:8e:1a:76:0c:fd:
fa:0e:2a:42:a8:68:da:99:0e:0d:57:49:b4:e1:80:cd:a9:72:
d8:e3:7c:e9:99:7b:ee:ec:10:7c:e6:ea:c3:97:98:9b:9a:3d:
fd:bd:62:28:73:27:b6:be:14:8f:1c:27:da:f1:d3:3c:7a:f5:
94:8f:9d:69:94:11:5d:f4:f2:fe:e5:24:ca:d4:58:a5:93:13:
f6:84:5c:83:19:f8:63:3c:92:7b:86:d5:f2:d7:66:7f:49:92:
dc:85:e4:5f:57:c9:17:35:9f:91:2f:91:bd:a5:d2:22:49:02:
3e:3c:7c:47:36:90:5e:0c:ee:92:57:9d:e9:26:3d:e4:90:ec:
0c:75:a4:2c:71:53:3d:cb:a0:ad:7c:46:66:3c:b7:d7:12:0b:
cd:e5:98:c3:a8:f5:fd:55:31:1b:19:7f:88:24:3e:29:b4:e4:
6f:bd:b3:48:0e:f2:28:e3:5d:04:48:9b:ab:70:18:d2:bd:a4:
bb:cc:d8:89:1c:f7:0e:48:1b:a5:98:42:3d:c0:45:4d:53:d8:
ac:e2:ce:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCjjgmlLODQ46c5Nee455HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMDdjNmI1NmVmMWYyMzliMDI4ZWY0MjM3NWEyYTE3NjVi
YzA4YjgwHhcNMjYwOTIxMDYwMTM1WhcNMjYwOTIyMDYwMTM1WjAzMTEwLwYDVQQD
EygxZWYwMTE4NjQzZTM3N2RjODM2MjM1M2MyZmU4YTExYjZiMzhlZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxbtEvzp+OIBVvYDdYHpxVVlDKox
tMwzI06k3In7bamiczg3HKvZjo2CvtIS8TnLU4Ozb/4T4+afvEjS65lBenP32rm6
BjotQdfnGwIbG8SbykgDRBv0dEYTT7Gwes8XJWswAcBlZZu2hqD4SkERDaRD5g//
55GszWufNRjcwRwqqAzlpdxkMGioBW7xOHuznL0GLHxGHR1X5FXmBWwX3LE0EDlu
h/jzk3AWMAOOVJOVwXLgizG73u7sxmUX0lzK6X1GbRlhk6NlJB6stov8GYrLNAUl
DtPROQgu8XXU3R4FP+zzecyr4YwWCfXbc1TSb7D/sfKzMeXXOX61Eub3owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7wEYZD43fcg2I1PC/ooRtrOO2iMB8GA1UdIwQY
MBaAFPwHxrVu8fI5sCjvQjdaKhdlvAi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQt
Yzg3MDBhMTQ3NjFiLzEvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9jNjhhZTQtOTcyNC00OTc1LThiZDQtYzg3MDBhMTQ3NjFi
LzEvX0FmR3RXN3g4am13S085Q04xb3FGMlc4Q0xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnyT6Ouw
iwo50NCKgcZ8R+Zdotf58mocMA8SbG2BpujvsrVz2a+MpNt5ohWKyys2oI4adgz9
+g4qQqho2pkODVdJtOGAzaly2ON86Zl77uwQfObqw5eYm5o9/b1iKHMntr4Ujxwn
2vHTPHr1lI+daZQRXfTy/uUkytRYpZMT9oRcgxn4YzySe4bV8tdmf0mS3IXkX1fJ
FzWfkS+RvaXSIkkCPjx8RzaQXgzukled6SY95JDsDHWkLHFTPcugrXxGZjy31xIL
zeWYw6j1/VUxGxl/iCQ+KbTkb72zSA7yKONdBEibq3AY0r2ku8zYiRz3DkgbpZhC
PcBFTVPYrOLOBg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:42:57 2026 by rpki-client