Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier: 5KAr+gD54JOCOzNCDdDZl6ev9oESZ3C395PSaGdeFpc=
Subject key identifier: 8F:37:43:60:88:4D:A3:24:D1:DB:C7:7C:75:60:8F:AB:5C:2F:D1:D4
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 019CADC862EC29EB9F9FCEB9F2058D1A019E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 09:01:56 +0000
Manifest this update: Mon 02 Mar 2026 09:01:56 +0000
Manifest next update: Tue 03 Mar 2026 09:01:56 +0000
Files and hashes: 1: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: Zs9kUKlU8OOmIdjPbsh5iSJtCIhcj+uxCoNBy9rWfzg=)
2: NcBIwWrVfFqKGC-Ejlu0skUAVME.roa (hash: QpyQXhGs4Yf3p6aesaO1I7bW/lGukmfPe/wqoZKA1Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:62:ec:29:eb:9f:9f:ce:b9:f2:05:8d:1a:01:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: Mar 2 09:01:56 2026 GMT
Not After : Mar 3 09:01:56 2026 GMT
Subject: CN=8f374360884da324d1dbc77c75608fab5c2fd1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:41:14:01:fd:f0:19:b6:8a:df:8b:45:de:71:
c0:92:71:42:4d:8e:a8:4e:ef:9a:c9:ed:0d:0f:93:
6d:f2:e6:05:ad:30:36:5a:00:58:03:59:f5:de:78:
d7:94:37:8e:e5:49:ef:d7:16:90:df:8d:81:42:50:
3a:b0:cb:bd:0b:18:cd:f9:81:ee:75:a3:b8:7f:82:
d4:f7:85:b9:f5:80:1b:73:b7:fb:f2:9b:76:a4:a3:
e9:6e:72:1d:a8:c1:9d:2a:9f:8c:24:0e:00:1e:38:
e3:0e:6b:64:46:cb:72:92:7a:d2:e1:a3:07:91:4f:
46:1e:8b:f6:7f:74:d1:ca:55:5c:d4:3b:26:cf:d7:
8c:93:95:60:95:01:f9:a6:ce:cb:1e:5a:75:9a:1e:
6c:f1:7c:9f:62:9e:2f:97:fe:3f:96:f3:d6:50:6e:
b7:c8:d1:ee:d7:14:46:74:d3:9c:17:70:99:79:5b:
19:11:ed:6d:5a:de:f9:32:86:3c:15:a4:22:69:85:
8b:1b:3a:4b:d4:71:65:2d:91:75:c4:00:58:c2:70:
13:e5:e7:1c:b5:e2:b6:ef:26:e1:0b:88:29:d3:11:
45:74:44:90:7b:c1:cf:6c:9d:2e:c0:84:b9:c2:6f:
eb:b4:89:51:f8:af:6d:3c:e5:88:49:6c:46:54:56:
2f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:37:43:60:88:4D:A3:24:D1:DB:C7:7C:75:60:8F:AB:5C:2F:D1:D4
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0b:03:eb:b0:2b:3d:59:af:70:4c:f3:82:4f:79:7b:9a:a0:
fe:6f:24:13:eb:11:25:d6:f5:5d:a2:4c:8d:74:b9:63:4b:ff:
4f:01:92:e4:b7:1a:8d:86:c8:a2:7b:0a:8e:e4:40:62:7a:c4:
8d:6d:a7:c3:88:13:5a:4f:10:d1:eb:0d:7d:d2:2b:7c:07:de:
fb:4a:8d:dd:be:89:50:97:15:f2:3d:f7:f3:79:57:4d:17:05:
02:19:41:ba:9a:9f:10:aa:b6:1e:32:af:a7:d1:b7:39:9c:5e:
2f:e6:16:15:0c:ad:de:10:a3:e5:1f:af:ec:66:00:32:54:66:
c5:24:1c:3f:36:da:53:dc:09:f3:3c:e7:86:ff:c4:28:7e:e3:
db:8a:44:a4:bb:53:2a:b6:c3:90:3b:0c:62:ad:86:0d:e3:c0:
d0:59:53:b4:44:aa:c4:ef:f6:13:f4:81:5b:59:2e:66:0c:a7:
7e:d5:92:40:4f:5a:3a:79:8e:6e:ea:d4:79:38:1b:25:9e:c1:
11:08:fd:7c:0a:e2:db:9a:08:ef:8b:78:50:94:32:6f:ab:a8:
a1:1f:19:fa:9c:d4:51:d8:a9:f6:e1:a9:37:20:24:97:c7:77:
69:95:d9:4b:8c:63:8d:f3:5d:ab:a9:5c:4d:bf:ec:8e:c6:e8:
5c:2d:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:04:46 2026 by rpki-client