Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
File: afAHCvh31rmGswe5vATvGcRAQz0.mft (raw, json)
Hash identifier: QYtSVq8l524UOOkXR0zULDX8yFm2UPekXoTB1F5chtM=
Subject key identifier: F0:8F:2E:7F:FD:35:06:A2:75:FA:8C:63:FA:CD:27:DF:5A:83:2C:CC
Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d
Certificate serial: 019FAAF62539B79C77D1EE5F959CAF25B010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
Manifest number: 0C08
Signing time: Tue 28 Jul 2026 23:01:25 +0000
Manifest this update: Tue 28 Jul 2026 23:01:25 +0000
Manifest next update: Wed 29 Jul 2026 23:01:25 +0000
Files and hashes: 1: afAHCvh31rmGswe5vATvGcRAQz0.crl (hash: Q+OwSo3fLhF6kClOqCQvKIqOb+GSJr9cBz+ESmq542w=)
2: dkw8BE0MteDejxs-2qVpeffd5cE.roa (hash: OLIzwrtSctTD4rRGWSFchziybsw/DjSgiuUvhAPMb0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:25:39:b7:9c:77:d1:ee:5f:95:9c:af:25:b0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d
Validity
Not Before: Jul 28 23:01:25 2026 GMT
Not After : Jul 29 23:01:25 2026 GMT
Subject: CN=f08f2e7ffd3506a275fa8c63facd27df5a832ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:45:11:70:36:73:ac:49:f3:a1:93:62:13:
e8:de:58:9b:6a:16:cf:bf:45:e4:5b:40:58:6d:db:
58:31:e3:b5:6c:75:de:07:0c:73:60:ae:8d:6d:6d:
b4:8a:4a:9e:fd:2c:45:d4:72:70:26:bf:8c:b6:14:
55:bc:dc:1e:bb:d5:fa:2b:a6:7f:03:81:a1:8c:f1:
2c:a4:7f:f5:8c:cf:ef:b0:e7:2b:83:71:ac:27:2d:
ce:11:5e:68:ad:a5:30:69:5c:94:cc:73:13:cd:6f:
ad:b7:65:dd:fb:b8:7f:14:19:8e:e4:34:d9:e0:61:
f5:c4:77:50:f9:f3:9d:02:99:f6:51:68:c8:ad:b9:
70:b6:6a:88:7d:41:28:62:6b:19:d3:7d:37:85:63:
7f:b3:cc:25:d7:4f:91:35:57:ca:45:ac:2c:cb:c6:
37:ce:48:32:e4:8e:ab:20:2f:6a:81:ad:61:85:e1:
cb:da:bb:c8:ed:75:93:e8:3a:27:a4:37:2c:6d:39:
89:6c:dc:d7:f5:44:d3:e5:c2:c4:44:e0:45:f1:a9:
b8:9c:98:19:30:dd:2a:16:3c:8f:c6:4c:70:7c:6b:
ae:6f:99:30:cf:7b:a2:94:d3:93:ad:6e:c7:1a:f4:
c3:da:71:0e:3d:e8:6a:a6:51:9f:95:51:1f:7b:af:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8F:2E:7F:FD:35:06:A2:75:FA:8C:63:FA:CD:27:DF:5A:83:2C:CC
X509v3 Authority Key Identifier:
keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:52:a9:9e:8e:fa:2b:06:0c:f6:8b:cd:e5:d7:c4:c3:0e:68:
22:c1:2b:c8:a0:ec:d1:77:79:a4:4a:b2:40:f5:0b:6e:2d:81:
31:18:59:89:bc:f2:9d:1e:ff:27:76:bc:5e:5b:65:59:11:d3:
03:cf:cf:d8:ae:61:fc:05:c5:13:c1:13:25:29:c4:19:7e:28:
45:bd:45:ed:70:66:48:af:d5:84:b9:d6:8b:0d:d5:d7:85:95:
09:3d:f1:2d:8c:f6:ea:73:c9:de:f2:e4:50:9e:da:84:34:5d:
05:5f:12:bc:f8:0d:dd:d0:28:82:8d:ab:13:5c:d5:a0:fd:90:
34:c6:44:40:27:11:fc:e6:49:04:26:5f:5d:c0:62:2a:7e:bb:
c6:59:1c:f1:91:4b:ee:bf:bd:8a:5b:94:1d:40:e6:98:96:9b:
e7:67:69:0c:f6:c7:58:00:25:43:7d:38:23:c8:85:dc:ea:e2:
26:37:30:a6:5a:c5:8b:44:48:b2:b2:59:fa:66:bc:69:87:12:
7e:0a:af:70:60:3f:23:1d:c9:62:7e:00:7e:fa:53:a5:4f:a2:
9b:2c:30:e0:b0:ed:98:b0:e4:81:de:27:a8:77:14:56:05:aa:
b2:d4:a1:51:34:17:85:5f:a1:73:18:a4:58:03:1e:41:5e:c2:
07:f3:a9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:36:20 2026 by rpki-client