Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
File: afAHCvh31rmGswe5vATvGcRAQz0.mft (raw, json)
Hash identifier: vp3i1Fuj2xZRLu3OBZHrzWTlrZgqNoHDF2s9ZmzJDKo=
Subject key identifier: 28:21:B4:40:40:2E:2D:0F:E5:D9:65:BD:1A:27:C4:F4:99:FB:E1:C4
Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d
Certificate serial: 019EC1490E838A313F94BBEFD8153278F30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
Manifest number: 0B8F
Signing time: Sat 13 Jun 2026 14:00:50 +0000
Manifest this update: Sat 13 Jun 2026 14:00:50 +0000
Manifest next update: Sun 14 Jun 2026 14:00:50 +0000
Files and hashes: 1: afAHCvh31rmGswe5vATvGcRAQz0.crl (hash: XhbiagV1rUdEC/rN4gsOGzF4idyLWKxVy8zcrRf+Zk4=)
2: dkw8BE0MteDejxs-2qVpeffd5cE.roa (hash: OLIzwrtSctTD4rRGWSFchziybsw/DjSgiuUvhAPMb0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:0e:83:8a:31:3f:94:bb:ef:d8:15:32:78:f3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d
Validity
Not Before: Jun 13 14:00:50 2026 GMT
Not After : Jun 14 14:00:50 2026 GMT
Subject: CN=2821b440402e2d0fe5d965bd1a27c4f499fbe1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:12:7a:43:5c:f5:24:f4:d2:db:71:c8:d8:
79:04:9d:a2:e8:10:f0:c8:f7:35:e0:8a:2a:12:83:
a0:93:7b:67:8e:f4:79:08:90:4b:80:b5:9b:8f:d1:
97:c9:22:7c:24:3b:53:2a:5f:2e:db:81:13:73:5c:
3f:16:53:ab:45:05:45:1e:a5:85:46:e6:b8:6d:ca:
90:21:f5:ae:e2:63:66:2f:2a:3e:d3:df:cd:a7:47:
af:f0:47:5a:9b:2f:a3:ef:9e:11:94:39:ab:6a:34:
a0:d7:5b:1c:cd:73:c8:59:72:e7:aa:17:18:72:91:
d0:ee:f5:ef:52:35:ab:cb:dc:21:44:9f:98:72:f9:
06:29:6f:36:88:ed:51:d7:d4:e2:66:af:29:0f:cc:
7e:e0:f7:7f:01:b1:bc:5d:83:c7:0d:ca:7a:f3:df:
57:ce:8a:95:e4:85:c5:84:7a:d8:3e:d3:2d:5e:d9:
01:97:87:35:49:22:86:9a:f0:81:aa:f7:92:f1:ee:
28:d0:9b:f5:ac:d1:d1:38:c2:b8:fa:dc:1d:cf:19:
6f:8a:34:3e:65:63:11:7e:b4:98:cf:2c:63:3b:38:
0f:37:fa:ef:10:f0:b7:63:26:2b:f7:1a:72:2c:4b:
0c:4b:b7:56:cd:20:b6:ee:a4:b5:a2:64:9b:8c:a8:
6a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:21:B4:40:40:2E:2D:0F:E5:D9:65:BD:1A:27:C4:F4:99:FB:E1:C4
X509v3 Authority Key Identifier:
keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:27:45:c6:ba:a0:90:56:29:01:12:01:4c:45:f0:5c:7e:5b:
5a:80:8a:5e:0b:ea:81:20:4b:c6:e3:90:82:6e:17:73:33:04:
d7:f0:ea:eb:b2:14:ad:d0:73:c5:99:9c:56:69:50:0b:97:17:
b0:60:4f:90:98:5a:7b:13:cc:91:7d:f4:6e:4c:21:e0:36:b6:
e2:8d:e5:3c:a5:af:67:df:4f:b2:03:4b:4d:cf:4b:97:9a:69:
50:91:7d:13:ca:a3:fd:8d:7b:05:87:11:63:6b:8f:93:6d:5b:
ef:53:33:4d:7a:ec:2f:3b:62:a7:67:f4:ea:c8:67:0d:51:2f:
2f:90:05:21:62:06:0b:3a:ad:04:eb:6d:14:06:1a:17:0b:50:
a2:c5:da:0c:dd:47:03:d4:a3:ec:c6:26:e6:66:a1:d1:cb:1a:
89:df:79:ea:97:bc:76:fc:3f:4b:be:a6:7a:59:c5:3b:7b:a5:
d6:80:18:16:d3:33:bd:0b:13:e1:5b:87:95:54:93:90:91:43:
21:92:59:ff:e3:7f:f5:13:48:08:3e:51:4d:e3:fb:66:fc:22:
73:ef:86:92:ab:77:43:9d:5a:46:20:86:32:a6:bd:3c:f1:3c:
b7:82:58:26:40:0b:60:16:20:ef:13:68:2a:6e:24:b7:75:8c:
0c:99:40:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:24:10 2026 by rpki-client