Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
File: afAHCvh31rmGswe5vATvGcRAQz0.mft (raw, json)
Hash identifier: U7LZRZ3Itwrw1peuL9YXFCjs9tYqw984NmS0bDazJVI=
Subject key identifier: 33:C3:12:11:EB:55:31:CF:1F:F4:F0:FA:D8:FC:BB:6F:7C:76:AB:1F
Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d
Certificate serial: 019D99D0E1E52CFC37108C54D28A25F54273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
Manifest number: 0AF6
Signing time: Fri 17 Apr 2026 05:01:36 +0000
Manifest this update: Fri 17 Apr 2026 05:01:36 +0000
Manifest next update: Sat 18 Apr 2026 05:01:36 +0000
Files and hashes: 1: afAHCvh31rmGswe5vATvGcRAQz0.crl (hash: W76HDwnpP3KHkZtn4ZKsdiBJNpZ57YMQMc16RBOUleo=)
2: dkw8BE0MteDejxs-2qVpeffd5cE.roa (hash: OLIzwrtSctTD4rRGWSFchziybsw/DjSgiuUvhAPMb0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e1:e5:2c:fc:37:10:8c:54:d2:8a:25:f5:42:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d
Validity
Not Before: Apr 17 05:01:36 2026 GMT
Not After : Apr 18 05:01:36 2026 GMT
Subject: CN=33c31211eb5531cf1ff4f0fad8fcbb6f7c76ab1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cb:04:6e:19:c5:9b:9d:d6:97:fa:6c:06:44:
e4:6e:56:73:e2:f2:55:fb:33:76:62:6d:a7:1a:0c:
33:92:82:da:a3:fb:49:8d:50:24:5a:12:74:f9:54:
0d:51:ce:2d:c5:a4:a5:20:5e:d8:19:75:03:ff:66:
a5:77:a7:46:f4:5d:c4:74:23:bb:ae:e7:c4:02:87:
86:a5:8a:b5:fd:e0:5a:f4:30:e3:b1:65:47:46:f2:
e2:09:ea:4e:60:06:d1:f4:85:9b:e8:81:28:59:bc:
b2:c7:25:ea:15:68:d6:10:0b:03:7e:f5:95:0d:7b:
39:b2:0c:45:8c:86:c6:54:32:5f:b4:d4:91:3f:dc:
08:15:03:c2:e1:92:34:d7:7d:d2:af:ab:96:a7:b1:
54:a7:ee:5f:5c:75:e8:66:95:bd:a1:af:94:1e:b9:
a0:1d:7b:59:f9:c7:be:2f:4f:18:9f:f2:b2:a7:6e:
75:2b:e0:2c:25:58:4f:aa:b8:3a:60:c0:ac:84:7a:
8b:0f:33:7b:87:0e:5f:d1:59:3c:09:49:23:c5:95:
64:f4:35:c2:15:1d:9b:d4:03:75:c5:2f:2d:c1:04:
5e:01:4d:76:68:12:aa:33:06:23:35:82:c2:d4:88:
71:42:db:29:0a:60:d1:db:6e:98:92:10:4a:89:cb:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C3:12:11:EB:55:31:CF:1F:F4:F0:FA:D8:FC:BB:6F:7C:76:AB:1F
X509v3 Authority Key Identifier:
keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:d4:bb:ce:3e:d9:29:43:7f:e5:e8:1a:9d:57:e8:aa:fb:93:
dc:74:69:b2:7c:d7:08:0c:79:0f:32:93:8b:94:6f:5d:06:65:
ec:cc:f6:a0:53:18:23:e7:00:5a:45:46:d8:39:c5:7f:14:4f:
1d:ed:2b:a4:7b:9a:b5:76:80:2a:18:01:b9:50:c8:cc:db:44:
f3:75:77:88:d2:ca:0a:d8:26:c3:69:14:5b:d8:d0:e7:b8:c5:
d9:8d:de:cd:4f:12:5a:43:0f:06:71:1f:ab:04:72:c6:9f:15:
5e:3d:1b:51:01:35:af:11:63:75:09:b1:8c:1b:e2:05:54:95:
96:57:0c:0f:2f:0c:9a:52:b9:37:b6:25:c2:20:a8:c9:ab:09:
e3:e3:42:ce:b0:f3:5f:81:82:7e:59:ed:cb:87:64:c1:d5:68:
f6:31:e1:d8:06:4e:f4:21:dd:7f:39:bf:cf:3c:00:a3:0f:29:
41:45:5f:03:fb:6a:f0:f0:74:7b:1e:31:62:f8:9d:d0:00:0c:
f7:06:d6:49:87:a5:ed:3e:6f:54:52:92:7b:ad:e7:a0:1b:f0:
43:02:47:e8:d3:ca:4d:8f:22:c0:5d:a2:e1:62:0c:35:12:fa:
19:f0:69:8a:4a:9c:6b:b9:29:4b:92:0d:94:77:c0:25:73:1d:
05:71:eb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:57:15 2026 by rpki-client