Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json)
Hash identifier: cMbZzqvP5ff0AYFtHiLn6HQqrANeV7/Ia5w/+GZBzXY=
Subject key identifier: 4B:34:BA:E8:2A:79:B1:CC:D8:38:BB:D7:B0:1C:8F:0B:50:6F:3B:3E
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 019EBFC835CCC54DFB0F63F1D2868F04182B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
Manifest number: 0673
Signing time: Sat 13 Jun 2026 07:00:29 +0000
Manifest this update: Sat 13 Jun 2026 07:00:29 +0000
Manifest next update: Sun 14 Jun 2026 07:00:29 +0000
Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: A4wcVdKwc0IOVCiy4EIzaTkFG/riQLfSe4Fe79V4iMc=)
2: v5j62T31CGbyesihQ2ZxZfpouT0.roa (hash: /9+S8FBh2KrNLclqntL3l149SX/pG8FSBZ5MZAy4TsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:35:cc:c5:4d:fb:0f:63:f1:d2:86:8f:04:18:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Jun 13 07:00:29 2026 GMT
Not After : Jun 14 07:00:29 2026 GMT
Subject: CN=4b34bae82a79b1ccd838bbd7b01c8f0b506f3b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0a:14:80:5a:44:b2:95:65:4a:58:99:ad:14:
f8:ea:9e:0a:ad:aa:6f:15:85:74:da:68:42:20:d7:
32:c2:e2:e2:3e:f7:31:5b:17:11:0f:3f:fb:83:01:
00:9f:11:48:e8:8e:c3:15:c3:0d:26:59:bb:cd:79:
bf:67:a0:e0:90:1d:5f:ab:0f:99:ae:8b:75:78:6f:
56:27:26:8c:47:29:e1:33:d8:87:db:f6:e1:d7:09:
91:da:97:90:01:32:a9:ee:8b:27:a6:25:50:de:f5:
1f:7d:56:72:02:7b:96:60:a9:05:6b:22:8e:3a:97:
c0:80:90:68:2d:63:2a:e3:73:78:d1:67:ec:c1:8e:
6c:2e:8b:6a:c1:b5:3c:ed:38:bc:a0:bb:22:1a:0f:
c0:02:d7:5d:94:97:a9:fb:c7:17:5f:9d:8c:e6:8a:
59:a4:08:e5:ad:83:9c:66:92:52:db:6c:f6:91:67:
23:d5:42:e2:df:c2:31:b4:bb:79:e3:85:fc:d4:7e:
b1:c1:1f:70:37:4f:b9:16:68:0c:bb:99:1f:87:55:
21:ec:28:2f:e9:d6:42:b6:62:51:ba:e9:9c:0c:4f:
c5:20:68:15:2f:a1:e2:1d:13:1a:30:ee:cc:66:2f:
ff:89:a3:0a:e4:61:56:2a:51:38:4c:fd:18:bf:1e:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:34:BA:E8:2A:79:B1:CC:D8:38:BB:D7:B0:1C:8F:0B:50:6F:3B:3E
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5b:5a:de:d9:ea:14:02:e3:01:81:f5:5d:ba:e1:d6:22:a1:
a8:3c:38:66:63:a1:e1:94:1a:dc:57:67:92:cd:b0:9a:5c:89:
7d:fc:f2:16:1e:fa:1d:cd:80:95:b4:22:ac:2e:4d:56:fc:97:
34:5e:c8:9e:9c:a0:26:cf:a0:b7:3d:bb:be:e3:8c:19:67:cf:
10:cc:95:72:22:e0:21:69:bb:50:7a:4b:09:67:c3:6b:29:c2:
f9:9f:43:ed:d4:5f:db:4d:a6:37:af:ee:64:97:91:7d:09:d7:
e6:9a:67:be:03:5b:65:01:b6:5c:9c:20:65:2d:9a:86:3a:49:
c9:68:80:48:e0:10:8c:5d:cd:76:22:9e:ff:15:58:b8:91:c8:
7f:fe:08:ec:14:02:b2:c4:19:25:3d:02:91:5e:78:98:91:99:
04:3b:2b:12:7b:cd:ff:0c:6a:39:01:2c:0f:32:59:41:52:bb:
a8:7f:8e:e5:99:18:07:8f:5e:c1:d2:8b:c3:94:ed:9a:d9:de:
23:d2:0b:39:85:89:f0:f4:ea:48:12:27:0f:57:00:39:a5:eb:
a1:cf:78:dd:75:bb:7e:ac:6c:d2:09:fb:0c:9f:df:f9:c5:a5:
2f:81:11:aa:3f:8a:b6:99:cf:03:56:c7:3e:d3:a4:8c:57:86:
c7:02:2c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:45:42 2026 by rpki-client