Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
File: afAHCvh31rmGswe5vATvGcRAQz0.mft (raw, json)
Hash identifier: fhkGwgcWj54jfRVOBdUdG/WBabcUdQLEl9qg2RMYWgs=
Subject key identifier: 41:35:78:B9:74:BA:8F:AF:0F:B5:BC:BB:D2:2C:6A:1B:BF:62:31:B4
Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d
Certificate serial: 019CAA58F0D2B941359D910FB726DE253A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
Manifest number: 0A7A
Signing time: Sun 01 Mar 2026 17:01:21 +0000
Manifest this update: Sun 01 Mar 2026 17:01:21 +0000
Manifest next update: Mon 02 Mar 2026 17:01:21 +0000
Files and hashes: 1: afAHCvh31rmGswe5vATvGcRAQz0.crl (hash: vUCOMPXzogOWdNKiRllokE0KZkUBBfoMiR63XimAYLs=)
2: dkw8BE0MteDejxs-2qVpeffd5cE.roa (hash: OLIzwrtSctTD4rRGWSFchziybsw/DjSgiuUvhAPMb0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:f0:d2:b9:41:35:9d:91:0f:b7:26:de:25:3a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d
Validity
Not Before: Mar 1 17:01:21 2026 GMT
Not After : Mar 2 17:01:21 2026 GMT
Subject: CN=413578b974ba8faf0fb5bcbbd22c6a1bbf6231b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:3d:e0:1d:e4:75:55:5c:7d:e1:b1:48:fb:
04:f2:6d:69:7a:d9:2f:0f:b7:89:4e:0a:b9:41:34:
61:db:99:09:8d:22:1a:46:4c:c1:b9:8d:bd:59:f9:
30:80:5a:e8:a5:4a:80:f9:36:eb:75:34:86:d5:4f:
50:fc:f0:73:19:14:88:07:0d:05:42:e5:ff:87:14:
61:bc:a6:23:eb:3a:59:6a:09:4c:33:6e:95:98:a2:
0d:ab:dd:70:fd:4d:70:ea:aa:c5:24:38:67:02:44:
18:9b:8e:89:57:a1:14:4c:97:ae:83:10:a2:0c:90:
55:3b:45:05:c3:42:26:ee:7c:18:65:94:29:1f:e8:
1b:46:3d:ce:0c:c5:1f:35:52:a6:de:d4:8d:a4:26:
40:1f:d9:a5:b9:2b:aa:a5:2f:c9:00:84:4b:81:06:
f6:68:a3:ff:64:90:74:36:f0:0b:73:77:68:75:0e:
5f:7d:6f:30:62:bf:cd:10:d4:30:04:1f:9d:af:e8:
d9:ca:85:ca:d8:ff:5a:b9:e3:4c:93:ad:c3:85:3e:
c3:81:8f:62:c8:c5:d4:86:9d:2f:32:ff:73:a3:a7:
40:10:c3:a4:1f:3c:8b:b5:72:5a:8c:40:01:92:c1:
c8:49:74:33:10:a8:5e:f6:51:85:64:76:23:71:d9:
fe:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:35:78:B9:74:BA:8F:AF:0F:B5:BC:BB:D2:2C:6A:1B:BF:62:31:B4
X509v3 Authority Key Identifier:
keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b9:fc:5f:f7:cf:07:dd:36:df:16:94:5b:37:bc:b3:2c:43:
d4:a0:91:8c:4f:b5:b8:90:71:0b:71:2e:0f:fe:6e:c0:ec:97:
a8:90:4a:29:7f:89:c1:43:fc:35:74:05:c8:6e:17:af:3c:ba:
0f:51:2d:69:5a:36:52:2a:07:18:ef:38:de:b0:33:46:3f:c6:
1f:56:03:50:fa:40:40:3e:b6:1e:c0:a8:93:f9:ba:6d:22:3c:
f3:1b:5f:da:da:24:1b:d3:de:39:16:b1:d4:d9:89:5b:90:bc:
c0:59:00:9e:f1:1f:77:96:3c:88:6e:2e:82:d4:6b:c3:a4:ec:
14:e8:0e:72:3d:40:11:f4:d2:ff:32:0f:7d:fc:cc:35:ed:37:
a3:45:ad:9b:59:a8:8f:4f:a2:67:ea:0d:65:37:03:ef:ca:e3:
54:31:26:cc:a9:9a:b0:bc:07:5f:33:49:f5:af:83:97:46:5f:
e7:f2:c7:fc:de:92:31:f9:a2:d6:6e:ab:cc:85:11:6b:da:fd:
61:02:bf:03:b9:8e:e3:73:ea:21:2c:bd:a7:94:b0:fd:e9:28:
1c:76:a4:ba:77:eb:5d:a8:37:98:6b:84:f5:a6:75:2a:cc:fc:
cf:b3:ad:d1:e7:26:31:5f:28:6f:8d:72:5c:c0:b3:1f:2e:e8:
5a:91:ce:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:46:36 2026 by rpki-client