Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: uGoeobAN7JGURcfP/NzSnADwOcmIvbXzI2sQTgld3G4=
Subject key identifier: 1B:BD:F5:AF:4B:90:2C:30:12:6D:7C:F7:39:DF:9F:9D:7B:61:0C:71
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 019CAAC70D6E8665A22969514F0CC2783CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 17D9
Signing time: Sun 01 Mar 2026 19:01:37 +0000
Manifest this update: Sun 01 Mar 2026 19:01:37 +0000
Manifest next update: Mon 02 Mar 2026 19:01:37 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: niVctJxQOpi5VkW6tIfh/U/WQbZwWeGEhHo6p1//sqI=)
2: xIyRvynsJDfonhuzRYt1ty9sqMY.roa (hash: EoXBFExcfd/L36PfBZw/K0nrCLVb7q9unxVkiCC6TIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:0d:6e:86:65:a2:29:69:51:4f:0c:c2:78:3c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Mar 1 19:01:37 2026 GMT
Not After : Mar 2 19:01:37 2026 GMT
Subject: CN=1bbdf5af4b902c30126d7cf739df9f9d7b610c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8f:1b:9d:e8:72:2a:5a:ef:e5:47:99:93:66:
ef:30:20:22:33:ab:35:a9:a7:3d:bc:5c:bd:51:79:
b5:fc:0f:7e:8c:3e:54:96:fa:6b:87:c5:bf:db:00:
21:9c:64:97:28:f6:af:06:26:82:34:ae:05:eb:f3:
67:c1:28:5a:cf:2e:b1:2d:3d:36:bf:8d:6b:c2:59:
5b:c7:48:74:63:69:fe:c8:c7:b9:55:4d:6e:10:d1:
a6:20:fc:29:41:d2:34:43:55:fc:c8:5e:f5:5f:4f:
38:f2:25:9e:ba:22:9f:bb:b5:8c:ae:f9:37:ee:75:
c2:e2:90:55:00:16:d3:67:01:b5:42:cd:99:5d:a4:
bb:c0:af:25:32:47:45:0f:fe:65:51:a9:8f:7d:92:
b2:7e:d6:a1:57:5e:78:e3:ec:bd:06:79:1c:d6:86:
9d:15:39:00:bb:01:1d:94:23:e0:f3:28:59:ad:f2:
b1:90:d0:50:d9:40:eb:b9:2e:b0:88:19:aa:b9:bf:
fb:39:20:f1:85:8c:5e:fb:a3:a4:2a:1c:e2:b8:e4:
87:16:8a:6f:ec:cd:80:86:cc:e0:a4:dc:0a:5b:d5:
dd:56:c7:50:e7:2d:69:54:a9:39:e4:24:5e:49:15:
4c:9a:b4:39:66:d0:e2:a2:dc:9f:f8:5c:b2:a2:d9:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BD:F5:AF:4B:90:2C:30:12:6D:7C:F7:39:DF:9F:9D:7B:61:0C:71
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:14:e3:ef:b2:67:64:3d:54:ba:3a:d4:a9:0c:8e:ed:e5:6c:
a6:26:16:79:17:8c:6b:2e:8d:81:50:95:9f:15:fb:68:e1:c0:
96:d3:1d:3d:65:b6:9f:ea:88:94:e0:11:d2:ea:55:b1:f5:6d:
00:c8:06:eb:e0:00:58:47:17:fb:93:ed:a6:1c:d0:07:2b:67:
d7:01:a8:ac:0e:45:1e:64:e8:05:52:d4:c1:77:20:ab:8f:16:
73:5f:36:75:3f:23:3b:06:8c:49:94:8a:01:9a:a9:40:10:f5:
79:c7:90:a6:0d:e8:e6:c1:77:55:55:a1:47:25:d1:ed:f2:54:
ce:da:27:9e:1c:0c:bf:6c:a9:d2:da:d3:c5:ed:46:1c:2e:4f:
a6:ee:41:94:e0:e3:45:cd:ed:fa:37:31:87:19:27:ee:8e:99:
c0:ef:6b:4b:d6:19:4d:3c:de:81:3f:31:7f:32:fa:00:6f:99:
96:ed:94:37:09:9a:2e:af:d2:b4:5c:92:6e:25:ab:ef:36:bf:
97:58:35:7f:62:34:f8:67:46:66:ce:de:8a:9e:0f:80:39:fd:
1c:08:cc:a0:f6:75:22:6a:5d:8b:3a:f7:79:b6:21:4d:df:01:
e1:c2:bb:21:21:43:49:f8:ff:d7:70:16:28:44:52:41:2f:d2:
e3:40:52:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:46 2026 by rpki-client