Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
File: Afq489H7PSo1xPZ6SPb2CD6rpXU.mft (raw, json)
Hash identifier: GetCr6sTmv3ZF/5BdxKsmWYaAW68WjYyd/R9ckXRMY8=
Subject key identifier: 5D:94:95:4F:0D:00:CC:AA:3D:42:0A:D5:B5:EB:B0:1C:08:0D:2E:79
Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Certificate issuer: /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Certificate serial: 019CAC1049465D1F4469401EE39CB02E1F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
Manifest number: 0828
Signing time: Mon 02 Mar 2026 01:01:14 +0000
Manifest this update: Mon 02 Mar 2026 01:01:14 +0000
Manifest next update: Tue 03 Mar 2026 01:01:14 +0000
Files and hashes: 1: Afq489H7PSo1xPZ6SPb2CD6rpXU.crl (hash: JWKoiwmUQuw3Q8ie9lq7xci6bYXNgZQMMKXnJBS+OPY=)
2: WwxUIgZQzTDxG7ybBsjkioJXz8E.roa (hash: MbjGJ2NlvdJnsdm83ackK73GTkTFyLBuLVC/1DFPquA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:49:46:5d:1f:44:69:40:1e:e3:9c:b0:2e:1f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Validity
Not Before: Mar 2 01:01:14 2026 GMT
Not After : Mar 3 01:01:14 2026 GMT
Subject: CN=5d94954f0d00ccaa3d420ad5b5ebb01c080d2e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:12:87:95:50:ce:03:91:09:7a:2b:36:72:
e5:c9:44:cd:b9:af:02:3d:59:89:f8:2a:25:01:04:
4c:9f:e7:ac:8b:94:69:82:4d:5f:bf:75:42:ef:69:
65:cf:8b:70:d0:71:82:aa:c9:50:88:00:42:f2:ae:
67:a1:88:e5:91:e7:81:46:f7:01:15:72:fc:4f:e9:
92:e9:77:3f:64:7c:fa:1e:72:4c:a6:29:5e:da:d7:
d8:b7:3a:0a:c5:c0:51:34:8c:a3:7c:bf:c9:b5:76:
bc:bb:48:3e:4a:52:fb:20:67:f7:bc:ee:47:56:4a:
a6:41:b7:9f:2d:a0:70:f2:cc:82:74:a8:51:c1:a6:
18:4d:8e:7e:0b:cf:39:f2:ca:6d:38:63:a0:b9:fa:
68:8b:46:7c:0b:60:9f:11:cd:f4:92:77:19:b7:b5:
bc:4a:e7:14:83:8a:44:d2:db:8a:01:e6:6b:32:73:
16:bb:1a:ea:e2:a7:27:66:37:e6:b7:07:05:2d:60:
b3:31:72:db:05:62:a9:b4:b6:07:13:53:a9:93:11:
31:eb:b4:c7:60:51:26:71:86:01:12:68:9d:85:f7:
60:64:df:a2:6a:2c:ac:96:14:6f:9c:d0:6b:15:64:
3e:e0:80:da:a8:7f:ab:b2:22:db:54:26:d0:3d:45:
58:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:94:95:4F:0D:00:CC:AA:3D:42:0A:D5:B5:EB:B0:1C:08:0D:2E:79
X509v3 Authority Key Identifier:
keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3c:b6:1a:6e:4f:25:e4:b5:7f:f1:df:25:08:fe:f1:26:21:
ef:64:95:36:49:fa:4e:42:d9:d6:78:e8:01:a7:15:82:fb:97:
b6:ba:ac:47:a0:c1:f5:0e:2c:37:1f:65:a3:89:38:39:40:06:
4a:3a:37:59:a4:ed:4d:52:d3:cd:c5:5a:dd:1d:f1:83:fb:8d:
6d:72:0b:4d:98:ad:09:29:78:54:09:50:3c:40:85:c6:95:40:
a4:d1:24:d6:ae:f7:c4:e1:3f:86:4d:30:81:84:56:fa:51:fd:
cc:67:12:5f:de:b5:a6:a9:28:10:f1:53:14:7e:a5:32:db:dc:
8e:70:8f:d0:ac:a6:c2:af:d5:c8:0e:eb:28:b0:55:0e:d2:c6:
96:38:27:0d:a2:37:5f:c5:47:c5:98:2e:c3:d5:54:0a:21:17:
e2:64:68:9a:ad:59:34:80:1f:b1:44:7c:5f:4f:1b:ca:ea:2d:
03:6c:14:f3:df:c7:5a:4b:db:41:3c:61:85:93:17:3e:58:c1:
e9:21:6d:49:f0:b0:6f:85:63:c7:db:eb:33:33:f8:b2:be:8d:
93:d7:39:7a:4f:b6:8f:31:cf:e7:77:f6:ca:e3:c5:6d:59:09:
f0:34:05:9d:d3:82:32:0f:ab:77:c4:e0:bb:c1:d5:66:4e:9e:
7a:e6:48:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:40 2026 by rpki-client