Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
File: afAHCvh31rmGswe5vATvGcRAQz0.mft (raw, json)
Hash identifier: G9m1UYjkLRMdmHKqfGs2AuXZqG+0XtQMGoX12KI1hNE=
Subject key identifier: B7:DB:DD:16:22:C6:5F:4F:C9:3E:92:94:5C:A8:7F:9D:CD:B8:E3:FF
Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d
Certificate serial: 01A0DA28140D872D55973C7DD25CEC964C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
Manifest number: 0CA5
Signing time: Fri 25 Sep 2026 20:00:54 +0000
Manifest this update: Fri 25 Sep 2026 20:00:54 +0000
Manifest next update: Sat 26 Sep 2026 20:00:54 +0000
Files and hashes: 1: afAHCvh31rmGswe5vATvGcRAQz0.crl (hash: mtM5JOqmEkc967E2mYXmLVLYLd9XVPssmOs23naqVKE=)
2: dkw8BE0MteDejxs-2qVpeffd5cE.roa (hash: OLIzwrtSctTD4rRGWSFchziybsw/DjSgiuUvhAPMb0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:14:0d:87:2d:55:97:3c:7d:d2:5c:ec:96:4c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d
Validity
Not Before: Sep 25 20:00:54 2026 GMT
Not After : Sep 26 20:00:54 2026 GMT
Subject: CN=b7dbdd1622c65f4fc93e92945ca87f9dcdb8e3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:01:50:c2:af:8a:85:fe:7e:ef:e1:bb:cf:
ce:bf:de:47:2d:79:eb:e5:0d:62:a4:05:1c:19:b8:
dd:a9:de:29:cc:bc:01:02:59:0b:7c:a8:51:45:aa:
e4:37:22:4e:88:f9:2a:8c:84:d6:72:67:80:4c:2b:
43:37:85:57:f3:1a:13:15:34:5b:75:f5:5a:7e:c2:
80:4c:3f:f2:e1:f3:33:f1:7c:96:99:ec:98:14:a6:
b9:bc:da:2f:49:69:ff:b9:d7:99:4a:08:ea:4b:1b:
77:4c:5b:61:c6:e7:e9:44:21:c0:a8:89:fe:c9:78:
3a:81:68:18:38:6e:eb:94:ef:96:a9:97:be:81:93:
80:37:17:b1:b3:89:02:e5:e7:fa:44:66:25:4a:d6:
38:aa:6c:aa:3c:f9:2b:b4:6c:ec:29:56:1e:1c:f6:
d7:14:34:c5:ca:57:82:ea:47:ef:cc:48:c5:05:df:
5a:21:7d:fd:88:29:2e:db:d4:eb:0a:7d:ec:de:3a:
88:e1:da:b9:4e:a2:44:cd:18:db:ff:f1:39:9f:0c:
b5:41:2f:e8:23:ee:a8:5a:24:37:6b:0f:d9:47:f7:
92:44:ba:ef:e6:ea:9f:64:1f:b9:f0:89:f8:57:d7:
69:2b:d3:4d:ec:2f:5a:a9:bb:05:7a:53:c1:5b:35:
61:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DB:DD:16:22:C6:5F:4F:C9:3E:92:94:5C:A8:7F:9D:CD:B8:E3:FF
X509v3 Authority Key Identifier:
keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:78:68:21:dd:28:5c:ba:0a:47:31:3d:57:8a:bb:67:2b:de:
3b:1b:e7:47:fd:b1:58:05:64:6e:c9:ad:4f:bb:a3:94:f1:8d:
66:b9:04:40:01:57:cc:ec:f9:d0:61:1f:5a:73:c0:dd:71:ed:
a6:47:01:6f:a5:e6:c8:f7:a0:0f:da:70:94:20:d7:28:8f:8e:
95:e4:98:06:5e:db:ec:49:3c:8a:ac:eb:77:9a:f1:06:de:27:
4d:cf:6b:dc:e3:b1:b9:3c:8e:8e:f4:29:c0:4f:1f:b2:40:ce:
7d:6d:c4:ba:76:f9:b9:6f:a8:d3:87:b8:63:8e:3f:51:8c:32:
74:79:a0:07:b5:83:75:68:ee:5c:78:a7:0a:e8:e7:75:65:63:
e1:97:45:4f:6e:52:f9:5f:73:1f:0a:5d:af:fe:31:5e:ef:b5:
3c:41:7e:40:72:88:35:86:18:34:45:61:cf:86:58:d8:ce:69:
21:7b:37:49:08:15:a6:67:c6:ca:2e:f7:8e:50:dc:ae:5f:83:
20:99:19:eb:91:61:b3:aa:65:5e:60:51:47:08:e2:a2:42:3e:
a2:c2:18:d4:c1:5b:ea:53:10:76:5d:46:7f:c4:8f:19:1a:dc:
35:96:42:35:45:47:b5:ba:c6:41:ec:44:46:d6:fe:e5:5a:b0:
0e:32:a9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:42:20 2026 by rpki-client