Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier: 63ZCvJGk7oyD3Xj8GOGJOgtXKcNkExIHdaRp0zn6Lq4=
Subject key identifier: D2:60:51:BA:C9:7E:A3:78:C9:34:26:C2:2F:EA:75:28:4C:56:50:2B
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 019D9B50F49F0D843F62B7D18F4A3A48C6EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 12:01:07 +0000
Manifest this update: Fri 17 Apr 2026 12:01:07 +0000
Manifest next update: Sat 18 Apr 2026 12:01:07 +0000
Files and hashes: 1: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: DasAiomwabxZ/olaglWqWgn+eDQK4XS6kV1GdKWKS8I=)
2: NcBIwWrVfFqKGC-Ejlu0skUAVME.roa (hash: QpyQXhGs4Yf3p6aesaO1I7bW/lGukmfPe/wqoZKA1Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:f4:9f:0d:84:3f:62:b7:d1:8f:4a:3a:48:c6:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: Apr 17 12:01:07 2026 GMT
Not After : Apr 18 12:01:07 2026 GMT
Subject: CN=d26051bac97ea378c93426c22fea75284c56502b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b8:a5:ae:7b:66:72:22:75:6f:87:05:77:57:
8c:15:50:2e:cd:99:47:b5:f2:07:cc:f3:2d:1f:4a:
6d:67:f7:a5:bb:ee:7e:67:b1:16:41:8c:d5:bf:0c:
99:56:e2:46:85:f6:63:83:f6:1f:af:8e:05:c7:7a:
d6:ce:3c:7e:1c:1d:fb:6b:6d:89:b1:cd:f4:3d:d0:
62:15:0a:61:7d:a1:f3:69:fe:51:4d:12:45:23:14:
fb:c9:4a:17:d7:3b:52:68:9f:d4:62:d8:34:04:1c:
22:71:38:c8:54:4a:fb:4f:86:be:d2:ed:3d:e7:d8:
68:0b:29:3b:71:61:e5:b7:4d:55:d7:fa:eb:f7:33:
d4:06:2b:78:16:5d:62:c6:7a:59:bb:08:6c:a9:ad:
6c:6f:87:94:05:57:2e:73:1c:8c:37:1d:80:a0:b3:
db:64:71:39:99:50:16:87:0e:72:f2:dd:bb:38:88:
1b:e9:9e:24:43:f0:bf:31:f4:3b:a3:80:0b:e1:75:
3f:e6:6c:f3:9d:2e:9d:35:a7:21:e1:57:2a:d7:5b:
c4:3b:13:9f:1a:04:d4:ae:a9:db:d2:69:10:07:da:
7e:67:80:b9:a5:5c:0b:25:43:06:6e:16:80:a1:86:
5a:91:53:f1:76:47:2a:cf:46:2c:7b:2d:15:4e:57:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:60:51:BA:C9:7E:A3:78:C9:34:26:C2:2F:EA:75:28:4C:56:50:2B
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b6:99:e4:56:62:24:53:01:de:2f:e1:3f:f2:24:c5:77:cf:
eb:92:b7:14:c7:89:95:31:fd:0d:80:df:0a:fa:5c:b6:34:87:
2e:e5:f5:24:e0:54:f7:19:38:61:ce:d2:c9:43:72:b3:43:c0:
cb:6a:79:c3:ea:8a:66:6e:74:57:c9:6c:3c:5d:35:c6:97:8e:
7b:45:2e:85:06:3c:ba:02:f4:e3:ed:0f:b2:7d:c2:14:0d:7f:
d3:54:c5:59:14:c3:85:57:79:94:e4:c7:3c:f3:d6:df:7b:07:
7f:34:b2:07:04:d3:d4:a0:46:a5:79:e9:20:a5:12:8a:de:19:
92:15:21:a8:f7:4a:a0:de:31:4d:67:8e:c0:a1:c5:3a:8b:d1:
30:41:52:6f:13:61:aa:25:a0:59:2b:18:9c:9d:41:85:3f:8c:
a5:e1:3c:19:a5:3e:16:74:97:a2:c0:4c:8b:e5:cb:be:f0:a6:
15:c8:75:8b:ba:18:5c:ee:d4:e6:8a:db:d6:63:10:86:2c:b7:
8e:cf:5f:1a:14:4d:b1:3e:38:ec:66:22:a1:08:b4:ab:da:ad:
3e:2c:a0:2f:43:18:bb:ea:63:b4:5e:66:c3:5d:fd:a4:9b:8d:
90:cc:a6:aa:87:a1:8f:cf:16:21:bf:d4:cd:e7:22:2d:84:3e:
12:02:15:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:41:12 2026 by rpki-client