Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
File: AFA0jPYGQvVOyQck3niqoD3NOOE.mft (raw, json)
Hash identifier: LMq7s9qRBIZCa0/O/8cFxg1NOI2T+UC+alt8OYEpYvk=
Subject key identifier: A3:EA:F6:E0:67:8C:87:6A:86:92:DD:29:4E:2D:FB:8D:33:56:14:EE
Authority key identifier: 00:50:34:8C:F6:06:42:F5:4E:C9:07:24:DE:78:AA:A0:3D:CD:38:E1
Certificate issuer: /CN=0050348cf60642f54ec90724de78aaa03dcd38e1
Certificate serial: 01A0C5FC0BE360EFB91F5B348A28F0024B3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFA0jPYGQvVOyQck3niqoD3NOOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
Manifest number: 1211
Signing time: Mon 21 Sep 2026 22:00:24 +0000
Manifest this update: Mon 21 Sep 2026 22:00:24 +0000
Manifest next update: Tue 22 Sep 2026 22:00:24 +0000
Files and hashes: 1: AFA0jPYGQvVOyQck3niqoD3NOOE.crl (hash: /G9CHJcgMVnwyUHcIek/nmd4rhdZ8tsAX2ZTIl9fxws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFA0jPYGQvVOyQck3niqoD3NOOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:0b:e3:60:ef:b9:1f:5b:34:8a:28:f0:02:4b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0050348cf60642f54ec90724de78aaa03dcd38e1
Validity
Not Before: Sep 21 22:00:24 2026 GMT
Not After : Sep 22 22:00:24 2026 GMT
Subject: CN=a3eaf6e0678c876a8692dd294e2dfb8d335614ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f6:3f:d5:9e:22:f6:09:40:63:86:cf:d9:63:
a0:15:fa:af:c9:01:c7:8a:5b:b8:0c:e2:67:8b:44:
5e:36:51:9e:79:e4:c9:cf:05:a0:f2:54:4a:e8:c7:
4e:05:d7:f4:ea:28:21:7d:f6:da:35:26:c3:26:83:
20:f1:ce:05:0f:12:f8:a9:10:ed:d0:a1:ab:e1:c9:
b1:1d:d7:86:ec:5c:3e:70:2d:42:b8:68:b3:b5:c8:
c2:1c:dd:00:7a:d2:f7:2a:ba:3d:ac:ae:86:a8:b5:
b4:34:83:98:f8:e7:2d:80:c3:44:37:40:fe:81:25:
6e:ec:54:80:62:04:ac:2d:db:a3:ed:c9:75:09:02:
7b:4c:24:58:a5:4b:9a:14:69:a5:74:34:a0:01:28:
a3:57:f4:c9:33:1e:68:e7:52:76:69:2c:c5:71:a4:
1b:1c:24:e2:a7:a4:56:f6:0e:60:17:fe:c3:a7:49:
7a:30:5f:e6:2e:cc:04:65:75:96:3c:e9:7e:33:bd:
7f:d1:46:87:88:20:d7:db:b3:80:80:3f:34:6a:17:
b5:fb:24:b5:37:fa:24:61:95:81:37:d7:9c:17:64:
3b:a0:fb:33:04:de:cc:00:cc:5a:c1:82:c0:ec:dc:
0e:d2:25:c7:93:db:fb:3e:24:0e:20:7e:06:31:04:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EA:F6:E0:67:8C:87:6A:86:92:DD:29:4E:2D:FB:8D:33:56:14:EE
X509v3 Authority Key Identifier:
keyid:00:50:34:8C:F6:06:42:F5:4E:C9:07:24:DE:78:AA:A0:3D:CD:38:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFA0jPYGQvVOyQck3niqoD3NOOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f124b2-474e-45a0-b73a-e54b06a93526/1/AFA0jPYGQvVOyQck3niqoD3NOOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:92:f4:b0:5e:ea:fe:bf:e8:7b:83:fa:ca:d4:b2:c7:e1:c3:
fa:01:03:d6:44:65:6b:13:ad:63:65:02:99:3e:ac:88:93:92:
8b:b5:94:0a:d3:f0:a1:72:cb:e0:5c:81:a9:40:0b:56:9a:c3:
fc:dd:d7:19:31:79:2a:14:a3:e3:e0:73:c1:c6:ff:19:1a:63:
ae:b5:a7:e9:e7:28:7c:b0:e7:f1:e1:fd:78:4d:15:8a:3f:8c:
2a:e6:e9:ae:5b:85:5c:d3:2f:61:39:1b:70:fc:da:e1:b1:ff:
70:c1:a1:5a:86:f5:fc:ec:3b:cc:e2:25:c7:0e:5b:0c:f1:27:
ab:66:db:9a:81:c5:63:fb:88:39:43:7a:83:f3:67:80:89:73:
f5:7d:eb:db:7b:b3:79:37:3b:c6:e7:08:7e:ea:c8:f5:80:76:
f6:09:6d:cb:4b:22:0f:27:01:f5:eb:63:70:8f:47:bc:5f:af:
43:27:6b:88:c5:ad:22:5d:7d:aa:55:39:39:5d:55:26:4d:82:
fe:12:7c:d3:e2:7b:eb:e0:cf:9b:ef:5f:e8:f3:37:4b:ef:99:
d7:51:07:1f:1c:3f:2f:51:5f:67:59:cc:ec:5d:5f:99:c9:18:
d5:3f:33:3d:6a:57:64:c6:03:f6:0d:58:43:3f:04:80:c8:19:
50:26:62:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:39:22 2026 by rpki-client