Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier: obp5xg8w/AqTlGfJ/2oijvKu5fhx3wBJ2tUQuSUyRn8=
Subject key identifier: BE:90:24:F8:29:B3:7A:30:6C:15:24:E4:6C:86:9C:D2:37:99:22:4C
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer: /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial: 019D9A3EB0D83D355D2CDEBD0230378DF263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number: 1855
Signing time: Fri 17 Apr 2026 07:01:32 +0000
Manifest this update: Fri 17 Apr 2026 07:01:32 +0000
Manifest next update: Sat 18 Apr 2026 07:01:32 +0000
Files and hashes: 1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: vSdH81d/vSIy3JBHO28fU30SC4HYfCIFpvMHv9tOlrM=)
2: xIyRvynsJDfonhuzRYt1ty9sqMY.roa (hash: EoXBFExcfd/L36PfBZw/K0nrCLVb7q9unxVkiCC6TIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:b0:d8:3d:35:5d:2c:de:bd:02:30:37:8d:f2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
Validity
Not Before: Apr 17 07:01:32 2026 GMT
Not After : Apr 18 07:01:32 2026 GMT
Subject: CN=be9024f829b37a306c1524e46c869cd23799224c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:3b:94:d7:71:cd:32:d6:52:67:08:30:c9:
75:94:8b:74:85:8c:73:cd:8c:a7:c7:e8:42:79:a1:
7f:97:cc:58:0c:ad:42:7c:a9:7f:90:f4:a6:b6:01:
4e:05:55:58:13:4b:39:58:95:09:97:ec:47:2c:aa:
42:69:23:15:2d:46:e1:0f:e2:65:e6:9e:d8:eb:4f:
f3:aa:4b:98:f4:82:a2:fe:5b:e2:ad:d7:92:f6:20:
ad:37:6c:29:55:73:a2:05:74:25:0f:a5:e7:0a:7f:
5a:49:04:c3:87:d4:0e:da:ad:e6:90:76:40:93:71:
f9:4d:93:8f:24:56:0c:3b:8f:81:f9:fa:89:bd:f6:
e1:be:3c:a3:2d:52:30:28:36:ae:cc:ef:32:71:ca:
dd:a6:e3:fa:2c:5d:66:53:e6:e3:77:a8:c0:a6:40:
5c:5b:b4:c1:e3:0a:f4:c5:0e:c7:bd:7d:9f:3d:e0:
c3:08:b2:13:0b:6f:a3:78:ea:f2:f9:67:11:70:e8:
43:67:6d:81:6b:9e:31:0e:2a:33:a2:61:29:bb:f7:
b9:c2:20:3d:2a:0e:30:88:16:ee:18:1a:13:4d:f0:
0b:a6:b7:96:1e:57:d7:44:f7:25:11:52:d0:09:cd:
91:e2:a3:de:fd:c3:01:2b:93:e8:f0:24:61:70:89:
df:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:90:24:F8:29:B3:7A:30:6C:15:24:E4:6C:86:9C:D2:37:99:22:4C
X509v3 Authority Key Identifier:
keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:26:96:5e:c6:87:1c:81:4d:12:cb:47:63:80:93:28:76:4d:
a9:6e:9e:1d:1d:39:7a:79:e0:b8:f6:90:71:1d:3b:7e:68:5b:
41:37:f2:3b:72:2d:50:95:86:d4:34:fc:83:1e:b7:c0:c5:86:
cb:9f:f0:e9:9f:71:da:2c:7e:be:4b:b8:b1:5a:49:34:22:19:
ec:dc:c7:d0:d9:49:31:14:13:14:f8:da:30:c4:de:51:f8:21:
80:cd:b6:96:e0:b4:b7:df:78:69:20:6d:b3:25:8f:f3:e4:f7:
9c:33:71:bf:59:62:0f:53:ee:c6:76:03:2a:82:5a:8d:4a:2d:
c0:d0:1e:95:da:e4:ce:e8:a5:0e:44:f3:51:53:fc:59:6c:86:
bb:99:6c:b9:e4:8c:80:0f:1f:61:d8:8d:e3:c9:67:5c:c9:77:
1d:52:ae:d1:8d:fb:85:9c:3d:8c:de:39:4a:0a:5c:e5:1a:cb:
36:8e:88:0e:12:d9:c7:49:e4:94:28:93:6f:f2:b9:f8:18:7f:
f2:d1:28:6c:22:ea:6a:fd:38:49:1f:9d:68:fc:ea:76:ea:3a:
e4:c7:ec:7a:c8:88:b4:2b:06:86:63:d4:31:0d:77:a0:42:05:
67:70:21:54:ea:a6:cd:f1:60:56:9a:d3:1a:c2:bf:d3:59:46:
e2:8e:61:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPrDYPTVdLN69AjA3jfJjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NTFhM2ZlZTc3ZTkyNDE0NjE3NzEyM2RkNjc1M2IwNmZk
ZTI0NTIwHhcNMjYwNDE3MDcwMTMyWhcNMjYwNDE4MDcwMTMyWjAzMTEwLwYDVQQD
EyhiZTkwMjRmODI5YjM3YTMwNmMxNTI0ZTQ2Yzg2OWNkMjM3OTkyMjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5k7lNdxzTLWUmcIMMl1lIt0hYxz
zYynx+hCeaF/l8xYDK1CfKl/kPSmtgFOBVVYE0s5WJUJl+xHLKpCaSMVLUbhD+Jl
5p7Y60/zqkuY9IKi/lvirdeS9iCtN2wpVXOiBXQlD6XnCn9aSQTDh9QO2q3mkHZA
k3H5TZOPJFYMO4+B+fqJvfbhvjyjLVIwKDauzO8yccrdpuP6LF1mU+bjd6jApkBc
W7TB4wr0xQ7HvX2fPeDDCLITC2+jeOry+WcRcOhDZ22Ba54xDiozomEpu/e5wiA9
Kg4wiBbuGBoTTfALpreWHlfXRPclEVLQCc2R4qPe/cMBK5Po8CRhcInfgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6QJPgps3owbBUk5GyGnNI3mSJMMB8GA1UdIwQY
MBaAFGhRo/7nfpJBRhdxI91nU7Bv3iRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQt
YTNiNTg2MjgwNjBkLzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQtYTNiNTg2MjgwNjBk
LzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyaWXsaH
HIFNEstHY4CTKHZNqW6eHR05ennguPaQcR07fmhbQTfyO3ItUJWG1DT8gx63wMWG
y5/w6Z9x2ix+vku4sVpJNCIZ7NzH0NlJMRQTFPjaMMTeUfghgM22luC0t994aSBt
syWP8+T3nDNxv1liD1PuxnYDKoJajUotwNAeldrkzuilDkTzUVP8WWyGu5lsueSM
gA8fYdiN48lnXMl3HVKu0Y37hZw9jN45Sgpc5RrLNo6IDhLZx0nklCiTb/K5+Bh/
8tEobCLqav04SR+daPzqduo65MfsesiItCsGhmPUMQ13oEIFZ3AhVOqmzfFgVprT
GsK/01lG4o5hSQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:58 2026 by rpki-client