Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier: gAfZ8Cb8sc1QlVciaJfCZd9xODptDEuSnwns1UKCW8U=
Subject key identifier: 97:3B:23:6E:24:12:DB:10:E2:0C:84:B1:23:A0:38:73:39:D6:86:DD
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 019D985011B33E4599A6B07C04DB52512743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number: 05DA
Signing time: Thu 16 Apr 2026 22:01:17 +0000
Manifest this update: Thu 16 Apr 2026 22:01:17 +0000
Manifest next update: Fri 17 Apr 2026 22:01:17 +0000
Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: 5nb/rDXNVYZw8OWT21LsKqGE6iA/LjPZuRlnRh5q0oU=)
2: v5j62T31CGbyesihQ2ZxZfpouT0.roa (hash: /9+S8FBh2KrNLclqntL3l149SX/pG8FSBZ5MZAy4TsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:11:b3:3e:45:99:a6:b0:7c:04:db:52:51:27:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Apr 16 22:01:17 2026 GMT
Not After : Apr 17 22:01:17 2026 GMT
Subject: CN=973b236e2412db10e20c84b123a0387339d686dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:32:90:01:c4:41:20:7a:90:89:18:a2:fe:79:
22:d4:20:9f:a0:d4:c5:66:27:d6:d6:a4:61:80:0e:
82:4f:09:96:2e:af:a6:5d:bc:08:18:af:b7:63:f9:
78:79:0d:8f:a8:94:72:b7:a0:f9:3f:d1:56:ec:dd:
80:34:b3:17:68:36:af:ef:42:68:54:e8:06:0a:f5:
73:a9:f8:88:b3:a7:9b:d9:8e:0a:4c:f0:f9:4d:eb:
4f:42:ba:52:6a:ba:56:2f:c3:e4:9d:c8:d5:e3:2c:
d3:94:7a:6c:6f:d3:35:f2:18:7e:18:da:41:d3:8c:
e6:07:3f:3d:b7:a6:3c:91:fa:ca:c7:d3:0f:9c:57:
d1:4e:3d:d4:f1:1d:c4:af:16:72:23:23:48:f6:c3:
b1:40:46:7e:98:2d:e1:9f:65:f7:00:a7:9a:86:26:
1d:ff:63:a9:81:10:54:d6:f6:fd:94:40:d4:2a:21:
28:a9:bb:f5:ed:eb:da:d4:2f:99:4d:bd:9e:67:94:
4a:16:70:ff:79:45:64:ea:3e:3b:33:89:51:c5:8c:
58:12:40:83:4d:fd:e0:ed:19:f3:0f:d1:b3:e8:28:
4c:b1:b2:9e:12:4a:e8:92:f5:c3:26:b5:c4:6f:84:
dc:38:e2:d7:a8:8d:67:cf:e9:ab:f8:df:0f:16:da:
d7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3B:23:6E:24:12:DB:10:E2:0C:84:B1:23:A0:38:73:39:D6:86:DD
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d2:44:92:b7:54:79:fd:9e:ec:8d:fc:87:ce:5d:5c:d9:b7:
6d:44:50:7a:e8:47:db:0c:f9:7a:00:b7:0c:dc:24:1a:48:5f:
12:1e:b1:45:5b:2b:34:b3:83:b9:34:bd:93:fb:fc:70:9a:e3:
f3:1e:2d:9a:8e:41:a0:ee:2d:31:6d:8f:3d:ad:90:61:a7:ae:
93:9c:b4:07:15:4c:b1:86:72:45:64:71:d6:ac:15:85:8e:47:
6a:46:1f:a2:15:72:11:1f:c9:4f:b7:e9:e0:d0:98:23:56:84:
00:02:41:c4:a6:ac:11:08:6a:cc:2a:bf:a9:c6:1e:5c:21:bf:
b7:55:48:88:a6:d9:8b:f2:40:6c:11:63:4d:23:f7:7f:7b:9e:
86:b7:3f:58:51:80:f6:f4:c3:c1:d2:94:96:95:0e:78:b9:45:
a7:11:6a:5b:3a:4e:01:8d:19:70:83:aa:89:61:10:24:f1:cb:
ff:66:8a:a1:41:19:95:e7:07:5a:8f:f6:dc:20:4e:dd:20:e7:
22:a7:c6:80:2e:94:e1:c5:8d:e1:e9:18:05:19:be:a3:2a:f7:
34:f9:7d:3a:9e:c4:de:88:3b:ee:5b:09:76:bc:a6:25:db:93:
f7:29:91:13:b9:af:6d:4e:46:e8:47:9d:f4:3f:70:fe:00:13:
aa:a7:c1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:54:41 2026 by rpki-client