Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: jOj4CJjk0ulBplkhefNZoau5eK4t0zpHgcIf7WvS3P8=
Subject key identifier: 96:C5:36:01:15:92:14:20:0E:DF:D6:28:4A:15:AF:82:44:54:79:54
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 019FAA88CB7AC75E19ECFED779A7102C838B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 138E
Signing time: Tue 28 Jul 2026 21:01:59 +0000
Manifest this update: Tue 28 Jul 2026 21:01:59 +0000
Manifest next update: Wed 29 Jul 2026 21:01:59 +0000
Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: hqtWRO+LSc++jpW3bypuvFol6P9ejcsPAlkTZM2hq1s=)
3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:cb:7a:c7:5e:19:ec:fe:d7:79:a7:10:2c:83:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Jul 28 21:01:59 2026 GMT
Not After : Jul 29 21:01:59 2026 GMT
Subject: CN=96c53601159214200edfd6284a15af8244547954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:fa:5f:0b:20:c5:a1:6c:54:21:76:b1:c4:
f2:1f:09:80:51:4e:c6:fd:37:e0:ce:3c:d2:cf:96:
da:63:ce:30:a6:52:83:bb:16:2a:de:bc:a1:02:84:
90:04:f9:26:a0:a5:03:32:6e:6e:b6:4a:13:c9:8c:
01:0f:ba:91:9a:5f:dd:a7:2d:d8:7e:d5:18:74:63:
9a:0b:e7:6a:52:21:8c:84:d1:1f:51:96:ef:3a:39:
21:22:ff:df:34:ad:da:cf:57:89:a5:89:87:f9:e8:
43:87:e2:1b:e6:f8:7c:32:ee:aa:1b:e6:05:60:8d:
67:1c:2a:5b:98:db:ff:58:c2:13:48:3d:f0:36:fb:
fb:dd:71:ec:8e:f4:f5:e3:94:28:1c:23:76:e3:7b:
c3:cc:07:23:22:ee:de:b4:95:25:de:64:90:28:68:
77:7f:4f:30:81:99:9c:61:41:7f:a4:00:2b:cd:e1:
a3:1b:28:30:d3:d7:d1:5a:ac:e9:c4:53:a2:90:ec:
9b:e6:aa:25:32:ca:ed:cb:e5:01:a6:70:d0:a3:27:
c5:98:14:0a:73:15:08:ae:d2:a2:b0:19:60:88:48:
75:23:ff:77:95:46:ec:2d:a5:cb:8f:25:25:56:96:
7b:3e:98:11:79:0b:f5:3b:b2:11:36:ed:f6:8d:cb:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C5:36:01:15:92:14:20:0E:DF:D6:28:4A:15:AF:82:44:54:79:54
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:8e:61:63:00:bb:e4:33:6a:f3:0c:2c:ba:4a:f4:0b:d6:20:
17:f0:da:49:11:f4:fa:cb:8a:1f:f6:34:c5:19:c9:23:cb:e3:
ee:7e:16:69:41:88:67:a1:d7:45:4e:72:5e:87:bb:33:32:35:
ea:53:ad:df:39:a7:64:12:56:09:98:11:71:f8:f9:3c:6f:3e:
27:ec:47:b8:15:ce:05:38:1d:42:dc:f1:99:ea:be:d1:a8:9c:
d0:a3:da:d8:42:31:0f:bf:5b:fb:07:dd:00:a1:de:5f:a7:96:
fb:75:a0:a6:67:44:42:84:94:81:ab:15:df:0b:54:12:3c:b1:
b2:9b:0d:d2:88:bf:b6:74:9d:e9:8d:81:76:6e:f6:6a:73:1e:
a6:62:41:ea:eb:72:91:2b:5b:72:2d:2f:d6:a0:8c:7b:ec:84:
44:60:86:19:66:11:f9:4f:bc:69:13:24:34:2e:68:f0:44:33:
5a:f8:67:55:d3:f2:85:c0:35:4a:02:65:40:4a:be:d4:3c:00:
48:6a:ea:30:db:fd:5c:52:f4:f9:99:cb:ed:ad:38:69:4e:7e:
f4:36:e0:ea:07:2c:6c:91:22:66:22:bf:af:83:11:16:5d:82:
a3:a4:ec:10:25:7c:45:55:d1:78:1f:f8:eb:72:11:f9:7c:7f:
5b:a8:fe:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:09:41 2026 by rpki-client