Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
File: Afq489H7PSo1xPZ6SPb2CD6rpXU.mft (raw, json)
Hash identifier: 5Kd4skveZb73sYH4/YDRGC1D3qX2IsRsRenWFd4IAFw=
Subject key identifier: 71:4C:39:0E:DA:39:B5:83:96:0B:41:B5:29:65:76:9C:17:0C:76:D7
Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Certificate issuer: /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Certificate serial: 01A1DEA72174C73B80C026C8FB672330BF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
Manifest number: 0AD9
Signing time: Sun 15 Nov 2026 10:00:57 +0000
Manifest this update: Sun 15 Nov 2026 10:00:57 +0000
Manifest next update: Mon 16 Nov 2026 10:00:57 +0000
Files and hashes: 1: Afq489H7PSo1xPZ6SPb2CD6rpXU.crl (hash: 9itFP9z9s2s109gHu9WBmRRs1KMZ8ajg0IaGB+IsYqg=)
2: WwxUIgZQzTDxG7ybBsjkioJXz8E.roa (hash: MbjGJ2NlvdJnsdm83ackK73GTkTFyLBuLVC/1DFPquA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:21:74:c7:3b:80:c0:26:c8:fb:67:23:30:bf:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Validity
Not Before: Nov 15 10:00:57 2026 GMT
Not After : Nov 16 10:00:57 2026 GMT
Subject: CN=714c390eda39b583960b41b52965769c170c76d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0b:f7:9d:81:51:02:52:9d:0c:7e:b3:ca:b9:
f2:b9:aa:cc:f1:5c:2f:e1:2c:c7:1b:fd:8b:c5:f4:
47:b9:7b:a4:64:8b:f9:56:1b:15:be:ce:01:88:42:
6c:80:30:d1:dc:15:20:07:cf:2b:c7:eb:74:0a:76:
75:b5:42:81:47:91:a8:fb:d2:3f:f8:e2:53:f6:d3:
5e:ee:cf:55:fa:e9:f1:3c:62:1c:c4:11:d0:02:ef:
7c:35:ca:32:55:9a:f0:8d:a4:2b:dd:46:dc:6c:f1:
3f:e7:d0:8a:18:63:e4:93:94:06:ac:34:b5:12:8c:
c1:9c:46:22:99:29:9d:f2:6b:9e:b4:61:3c:67:dc:
c3:87:39:c5:07:76:d3:f9:d5:62:23:64:e3:92:0b:
1d:9c:c5:23:c7:44:16:11:b1:47:7d:57:74:33:9a:
a8:7c:41:4f:bd:6a:6c:3e:67:fc:fb:72:98:d9:a4:
3e:06:4c:72:4d:5f:25:f7:ee:db:d6:bb:9b:46:26:
83:35:b3:8d:49:61:c5:3a:2e:09:f7:34:0e:5a:18:
01:dc:ad:f6:b5:a2:4f:d5:cb:1f:75:45:7c:c5:8e:
8c:4f:e2:3f:02:24:e9:07:40:9b:17:b6:ec:4f:55:
c1:42:6b:9f:7b:af:66:cd:7a:36:bf:ca:93:8d:30:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4C:39:0E:DA:39:B5:83:96:0B:41:B5:29:65:76:9C:17:0C:76:D7
X509v3 Authority Key Identifier:
keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:28:b3:82:20:e7:1d:5d:71:7e:e6:f7:d6:b4:b5:7e:9e:03:
8d:b2:4a:4c:1a:00:d8:7b:f9:e4:86:00:ba:1b:3b:a3:46:43:
20:7e:38:13:b4:f0:cf:1a:eb:b7:a3:9b:ee:dc:c2:d6:d6:36:
5b:68:7a:47:4b:ae:72:97:df:88:a4:83:92:64:b0:84:fe:e3:
fd:24:4a:98:16:98:1f:8e:0a:a5:51:37:00:16:ea:00:1c:34:
a0:92:86:7a:24:eb:8e:4d:5a:85:16:20:85:d0:98:eb:1b:e7:
60:6c:6d:77:ba:d3:96:14:93:58:92:26:35:79:73:5c:ed:a1:
08:cf:30:ec:c2:ab:63:8d:b0:68:19:82:4f:c5:5e:65:4b:87:
9a:d0:f8:6e:a3:77:4f:ac:e9:87:54:da:21:2f:24:dd:e8:91:
4b:e7:84:f0:01:6b:4d:c2:91:50:16:5d:d4:75:a8:c0:9f:49:
9d:1b:dd:56:1e:f2:76:40:b7:d8:02:45:65:ec:73:04:52:60:
13:ba:1c:d2:5c:16:d2:3a:46:ee:8a:40:63:5d:06:ea:2c:3f:
b0:38:c3:34:26:eb:45:03:73:0b:8d:6e:95:20:2e:6b:b1:83:
c1:49:e8:6c:95:bb:c2:7b:d9:75:4d:58:d2:d8:3b:2c:ba:31:
d4:4a:71:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:14:45 2026 by rpki-client