Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
File: Afq489H7PSo1xPZ6SPb2CD6rpXU.mft (raw, json)
Hash identifier: XCm1cXCms086WfTMnetu45s5uw6GJj+41oZU696HKlw=
Subject key identifier: B5:20:7A:8E:91:B4:CF:87:B9:D4:3B:12:BA:55:4B:26:3B:3B:B0:01
Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Certificate issuer: /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Certificate serial: 01A0C2C3F13D73FF86A8237EBCB60A72BC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
Manifest number: 0A46
Signing time: Mon 21 Sep 2026 07:00:16 +0000
Manifest this update: Mon 21 Sep 2026 07:00:16 +0000
Manifest next update: Tue 22 Sep 2026 07:00:16 +0000
Files and hashes: 1: Afq489H7PSo1xPZ6SPb2CD6rpXU.crl (hash: WPe4EFJvfrNXl4PnhxVXCvBKaH3ISe3wlhqEc0xlXns=)
2: WwxUIgZQzTDxG7ybBsjkioJXz8E.roa (hash: MbjGJ2NlvdJnsdm83ackK73GTkTFyLBuLVC/1DFPquA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c3:f1:3d:73:ff:86:a8:23:7e:bc:b6:0a:72:bc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Validity
Not Before: Sep 21 07:00:16 2026 GMT
Not After : Sep 22 07:00:16 2026 GMT
Subject: CN=b5207a8e91b4cf87b9d43b12ba554b263b3bb001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9b:9e:fb:fc:f2:a5:10:5f:dc:7d:ef:5c:5d:
6c:cf:c5:d1:e6:1a:f0:40:5b:0d:49:0d:1d:6e:c3:
8e:73:d2:4c:82:86:0b:aa:9f:35:a6:b9:08:44:9d:
d1:ca:8f:2c:95:a3:95:3f:84:42:a7:da:d4:f5:97:
3f:ae:91:43:c5:b1:38:18:19:41:38:ff:7e:3b:2b:
c9:3b:87:57:82:8c:9e:ee:85:c1:4d:d9:97:77:b8:
f4:dd:e3:fb:b4:0d:70:ae:a3:b6:53:14:a5:b2:5e:
7a:7f:3e:9f:4d:ea:6b:1d:78:85:24:57:c7:0a:20:
b1:6a:2a:32:6b:99:cd:6b:22:f7:ed:53:cb:da:11:
f5:32:dc:f7:61:f7:6b:d4:32:de:39:4e:e3:49:4c:
36:46:40:46:5e:f3:92:f2:d3:78:9e:41:28:29:d0:
9b:a3:01:bb:ce:ca:d0:8f:f8:93:19:7c:0c:5d:9f:
68:57:ce:a5:aa:f0:58:4d:01:b0:1e:1e:6c:d6:5b:
11:00:78:8c:11:87:55:f0:64:43:3b:48:d7:be:a1:
3f:36:35:a9:e2:d0:d5:43:8e:90:88:4a:80:06:9c:
37:7a:55:93:de:a1:f0:c2:71:80:e9:7d:f5:07:76:
84:10:6c:01:c6:22:47:0c:8d:21:0b:2a:84:87:ba:
af:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:20:7A:8E:91:B4:CF:87:B9:D4:3B:12:BA:55:4B:26:3B:3B:B0:01
X509v3 Authority Key Identifier:
keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:70:3e:36:f6:38:0f:d9:7a:22:4a:55:e4:3c:53:f3:2e:84:
52:69:d0:87:26:0b:b7:df:82:6a:dd:38:20:32:06:3f:2e:6e:
71:bf:8d:53:01:4b:65:65:d8:0d:f8:f1:39:82:b5:4c:5b:ad:
2f:6a:e0:38:0f:03:1e:35:1d:f0:e2:58:74:71:34:fd:1c:60:
4c:5f:0a:9b:2a:83:15:83:5d:a7:66:d7:f7:bb:d9:29:e7:59:
7a:25:72:f7:3c:03:d5:df:f4:19:a6:1b:8e:81:40:e6:62:c9:
49:d0:2c:6d:e1:03:cd:a3:ae:5f:40:69:6b:5e:c8:4d:7d:45:
32:f7:c3:90:4a:49:06:4c:05:e4:ed:67:25:85:12:02:52:a1:
d1:a9:51:d0:cb:37:a8:fc:96:1d:f2:40:c9:b9:1e:38:47:98:
f7:66:4a:2c:c3:84:52:0d:be:f6:25:a1:85:03:4d:bf:38:6e:
43:56:c1:f9:95:a3:28:0d:7f:49:c1:87:7b:98:7f:2a:73:4c:
77:96:6e:92:96:7e:f8:98:8f:51:a5:5e:40:60:ac:99:2d:c0:
ab:62:12:06:a3:4d:90:a4:ae:c7:71:ab:5c:c6:6d:d4:33:f6:
50:e1:1f:b9:01:0f:94:b9:0f:49:01:ae:13:68:3a:cd:7a:1b:
7c:6b:5e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:47:30 2026 by rpki-client