Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
File: _AfGtW7x8jmwKO9CN1oqF2W8CLg.mft (raw, json)
Hash identifier: gf/HUgtdtCdWQ8DB5/3LSUCNRjkkb22+bIRs3AsDEGI=
Subject key identifier: 62:DA:BA:D6:8E:F4:56:1C:16:C5:EC:D8:93:42:0C:7D:7B:15:10:F4
Authority key identifier: FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
Certificate issuer: /CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Certificate serial: 019D9962A940655FDAF791731E769D8E55CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
Manifest number: 127C
Signing time: Fri 17 Apr 2026 03:01:12 +0000
Manifest this update: Fri 17 Apr 2026 03:01:12 +0000
Manifest next update: Sat 18 Apr 2026 03:01:12 +0000
Files and hashes: 1: OLCJ9MarnmaxDlyqFbIFGYBy6AM.roa (hash: B/qMixseryt20pkCrHjoaGaJSXDzJQy1EA0RsnIA43s=)
2: _AfGtW7x8jmwKO9CN1oqF2W8CLg.crl (hash: dkdnuhlmSRzZj09L19IhtsgdukaHnqgrPMdxIasu89A=)
3: itz24NxT7Zi7fZ9WaeuI55HznXI.roa (hash: ujlPzuDCIcJuw9D1k7JPVilrVtFB6Vb5mfSYbPM7nRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:a9:40:65:5f:da:f7:91:73:1e:76:9d:8e:55:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc07c6b56ef1f239b028ef42375a2a1765bc08b8
Validity
Not Before: Apr 17 03:01:12 2026 GMT
Not After : Apr 18 03:01:12 2026 GMT
Subject: CN=62dabad68ef4561c16c5ecd893420c7d7b1510f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:49:f4:ad:11:ea:79:2d:3c:e7:ed:26:d7:52:
7d:49:fd:fd:a7:0d:2d:49:d1:49:cf:06:53:8c:80:
99:65:6e:91:5b:1d:e8:6d:d0:2e:5d:79:a8:54:ff:
76:d1:06:c4:0f:fe:27:ad:ce:1e:c4:b4:2a:a1:5d:
57:88:76:be:58:e9:03:29:40:82:17:58:63:3d:59:
96:64:20:05:eb:ce:28:34:9c:d7:47:ed:9e:86:82:
2f:83:95:30:2d:5a:89:48:3b:07:84:3d:11:3b:70:
e4:ab:ab:bd:a8:aa:c2:b2:3b:7f:02:7d:40:67:95:
43:3e:53:9f:1a:a6:9f:1d:8b:98:99:68:a3:9b:7b:
c6:38:9f:32:e9:95:f4:53:b1:aa:e5:6e:b4:0f:bb:
48:0e:71:be:5e:74:24:59:55:33:19:c8:e7:87:18:
1e:25:40:7c:4c:2e:e7:d1:a1:76:00:38:47:2c:70:
ea:f2:33:32:1b:30:18:4f:43:c5:9e:06:dc:bf:a4:
cd:b9:5c:44:9f:13:08:c5:43:c7:67:da:ca:80:99:
7a:11:6c:03:1a:e2:d7:27:36:d2:f8:1f:96:36:02:
ca:38:99:54:66:83:17:10:65:ae:19:27:3e:3d:d9:
69:26:71:4b:70:74:7c:7a:6a:07:7d:92:e0:c8:f8:
46:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DA:BA:D6:8E:F4:56:1C:16:C5:EC:D8:93:42:0C:7D:7B:15:10:F4
X509v3 Authority Key Identifier:
keyid:FC:07:C6:B5:6E:F1:F2:39:B0:28:EF:42:37:5A:2A:17:65:BC:08:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AfGtW7x8jmwKO9CN1oqF2W8CLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c68ae4-9724-4975-8bd4-c8700a14761b/1/_AfGtW7x8jmwKO9CN1oqF2W8CLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c1:41:3d:4f:a3:31:ec:45:e8:50:d9:2b:b0:8e:62:97:a3:
f1:e2:ca:80:4e:11:4c:7a:e8:86:e9:70:f7:aa:b1:55:fc:e4:
9a:83:88:c4:f9:41:4a:0a:81:65:11:fd:bf:57:4b:95:8a:8c:
d4:8a:ac:73:5a:38:a2:f2:ae:f2:fa:e1:d5:13:4a:10:6d:c7:
de:f9:d4:bd:2e:e7:08:3f:70:3b:2e:b6:a1:40:df:5a:bd:2f:
af:dc:fa:15:95:27:45:ff:66:5d:91:d2:53:1b:de:45:42:3d:
9f:1f:0f:02:04:83:89:ae:c4:81:56:ca:78:37:51:da:09:a2:
04:7c:bb:1d:c7:c8:cd:24:86:cd:a2:40:fc:37:cf:74:b9:04:
85:50:53:e5:20:64:6c:83:64:78:6c:8d:a2:fe:e7:22:cc:a2:
ed:79:a5:7b:37:e3:d4:ba:20:56:a5:6e:35:4a:9c:68:ef:43:
74:55:3f:db:5a:43:7f:97:64:d8:67:64:09:a1:ac:e1:d3:87:
1a:1c:df:32:62:a3:93:5e:a4:26:cd:df:6f:2e:bc:ee:f6:b3:
d8:e5:c3:34:94:9d:8b:21:cd:1a:ac:bb:29:1c:44:99:0a:c9:
95:e7:ea:c7:4b:ec:de:15:73:71:b4:39:b9:d4:8f:4a:d9:cd:
16:c2:da:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:49 2026 by rpki-client