Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
File: AFA0jPYGQvVOyQck3niqoD3NOOE.mft (raw, json)
Hash identifier: L7Jzhs8Cla4FSw01Phq+GTjyTDU1YwyEfu26LtYvTQQ=
Subject key identifier: C9:B2:85:16:00:31:91:C9:5F:3C:38:42:E0:F9:D9:78:83:02:DB:B8
Authority key identifier: 00:50:34:8C:F6:06:42:F5:4E:C9:07:24:DE:78:AA:A0:3D:CD:38:E1
Certificate issuer: /CN=0050348cf60642f54ec90724de78aaa03dcd38e1
Certificate serial: 019FA82B37C7CE44A1D7729E922CA69AB64B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFA0jPYGQvVOyQck3niqoD3NOOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
Manifest number: 117D
Signing time: Tue 28 Jul 2026 10:00:32 +0000
Manifest this update: Tue 28 Jul 2026 10:00:32 +0000
Manifest next update: Wed 29 Jul 2026 10:00:32 +0000
Files and hashes: 1: AFA0jPYGQvVOyQck3niqoD3NOOE.crl (hash: 7iS+pCf6IWlnKA/0BPJSg9VogA1wtCl2Qf/eYyCw/mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFA0jPYGQvVOyQck3niqoD3NOOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:37:c7:ce:44:a1:d7:72:9e:92:2c:a6:9a:b6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0050348cf60642f54ec90724de78aaa03dcd38e1
Validity
Not Before: Jul 28 10:00:32 2026 GMT
Not After : Jul 29 10:00:32 2026 GMT
Subject: CN=c9b28516003191c95f3c3842e0f9d9788302dbb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:11:62:46:dc:df:34:46:dc:9b:2a:1b:a5:
33:7d:21:bf:c6:cf:bf:70:95:85:01:c0:49:8a:90:
24:ad:a9:7c:9a:66:16:81:dc:d0:a4:5c:6b:af:b0:
80:17:7e:f2:f9:e2:b8:56:b7:39:6b:0b:6c:50:88:
b2:57:81:3f:62:a0:4e:ee:53:f9:19:57:f8:b3:f5:
e1:0b:76:57:c3:c4:b9:6e:de:e9:eb:e7:03:0b:39:
8e:4b:f4:21:64:44:79:39:f7:db:59:40:24:4a:a4:
c8:03:14:ce:76:f5:b5:bc:6a:f2:21:16:11:dc:45:
23:f1:a7:d4:82:f3:69:de:73:66:0b:83:79:c6:80:
75:56:cd:54:34:f7:14:1d:aa:78:60:f1:a5:5c:27:
19:b2:e9:2e:d9:fb:8c:e3:b0:eb:ad:4c:2c:77:71:
f3:73:61:e6:08:5f:b5:69:17:40:90:04:73:f5:2f:
d5:d4:83:47:80:24:94:12:65:3d:1b:c3:de:0d:52:
db:9a:70:81:c4:32:e5:0b:9a:03:d9:e8:03:10:8b:
29:18:48:4a:79:03:0b:fc:3f:54:6a:ed:f2:a5:18:
a1:26:fc:98:3b:86:27:b4:e6:8d:c2:d6:43:8c:15:
a7:d0:08:cd:dc:be:da:0a:d8:34:ea:1c:2b:b5:d6:
51:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B2:85:16:00:31:91:C9:5F:3C:38:42:E0:F9:D9:78:83:02:DB:B8
X509v3 Authority Key Identifier:
keyid:00:50:34:8C:F6:06:42:F5:4E:C9:07:24:DE:78:AA:A0:3D:CD:38:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFA0jPYGQvVOyQck3niqoD3NOOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fb:5b:54:e1:73:5c:2d:06:de:34:2e:04:7c:c1:de:da:6f:
a7:91:ef:87:7d:ab:4b:80:c6:36:49:20:5b:3a:3b:0d:36:16:
32:89:88:a1:a2:44:9d:d8:43:29:8e:c0:87:3b:f7:b0:0f:a9:
56:8f:4a:98:1a:ac:32:03:1a:c7:6b:dd:2b:a5:93:1b:92:b5:
c1:dc:bd:82:f1:aa:42:98:b1:3f:fb:64:3f:4c:ec:69:9f:51:
6f:89:5b:ac:bd:58:00:0a:13:8b:82:56:42:1f:22:00:33:49:
d3:8b:03:e7:58:70:c7:d0:d8:9f:38:11:5f:26:d5:73:49:06:
4e:35:f3:18:c9:d4:f3:7f:19:04:33:1e:25:d1:b9:b5:64:f2:
39:e5:77:9a:f6:dd:70:89:54:00:2e:30:55:98:19:af:4e:4e:
85:b5:34:90:b4:99:91:c9:ae:2d:c3:49:49:c1:23:cb:00:ed:
db:44:8c:9b:ee:d2:60:45:da:c7:92:9b:85:99:cb:b9:24:16:
b4:c3:fc:6e:72:d6:fd:ae:70:b9:2e:ab:d7:4a:52:40:ac:13:
c8:c0:e9:cc:13:b3:e6:99:28:b4:40:49:63:43:4b:83:b1:4c:
6a:de:59:4c:37:8c:be:0a:cb:46:05:22:01:53:13:01:9c:a7:
b4:ff:02:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:43 2026 by rpki-client