Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier: 6lzkICbSoTMdgFcNP9ftUkIwojRw4XM+4NrGHuCla4w=
Subject key identifier: 69:6C:29:5A:2F:E8:B3:C7:02:FE:B2:72:45:EA:EF:6F:99:7B:09:54
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 01A11974C2B2623D7ABD8C7B5D4F9D655F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number: 1A97
Signing time: Thu 08 Oct 2026 03:00:44 +0000
Manifest this update: Thu 08 Oct 2026 03:00:44 +0000
Manifest next update: Fri 09 Oct 2026 03:00:44 +0000
Files and hashes: 1: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: TaL7T77gSlMHjJApXmPPWUps7GkCLTYttz1sz32E0Tc=)
2: NcBIwWrVfFqKGC-Ejlu0skUAVME.roa (hash: QpyQXhGs4Yf3p6aesaO1I7bW/lGukmfPe/wqoZKA1Vg=)
3: YqoEfCVI39hAluAfuMKb2WZmnfU.roa (hash: dTRvrkco3cUg6qthtYWXfMOfQd/LnK7uBuo3ueDWwbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:74:c2:b2:62:3d:7a:bd:8c:7b:5d:4f:9d:65:5f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: Oct 8 03:00:44 2026 GMT
Not After : Oct 9 03:00:44 2026 GMT
Subject: CN=696c295a2fe8b3c702feb27245eaef6f997b0954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:7e:8b:fd:5f:a6:d5:9b:de:d6:0d:71:cf:
72:a2:33:ef:ba:04:10:e4:82:fb:c4:bc:57:97:5b:
a6:ba:38:00:2c:ef:21:5a:07:44:d5:2f:25:fa:07:
ce:51:50:13:8c:e4:c8:2a:68:0f:ff:48:1e:b0:68:
e8:ae:35:ac:ad:ae:81:f7:60:51:1a:24:a2:7c:25:
c3:dc:48:30:a9:13:e4:48:b0:87:81:97:16:8c:bc:
62:43:f2:a5:9d:45:89:1e:91:ab:9f:e5:56:a2:c1:
03:37:fd:8d:27:91:d3:0a:6b:40:f2:29:65:5d:60:
4f:4b:a5:6a:84:f4:c9:ab:4c:72:12:51:e9:65:25:
9d:f0:86:ab:8a:04:78:f1:0d:07:fc:97:1e:0e:3e:
70:d2:18:88:50:74:25:05:c0:de:e6:04:ce:3d:68:
77:54:ff:8b:b9:81:61:d8:a1:67:7c:08:24:96:77:
bf:d8:00:0c:71:59:29:eb:f0:4e:fe:ab:5f:c6:6d:
22:82:b4:09:95:98:13:dc:65:42:f1:77:71:eb:e3:
27:be:40:af:7f:6e:7d:58:c4:54:fd:6c:71:8d:a1:
98:fb:60:92:13:15:97:30:20:16:ef:66:7d:c7:2d:
f7:7d:74:f2:7b:7f:dc:82:91:60:ca:3e:e9:65:6d:
d6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6C:29:5A:2F:E8:B3:C7:02:FE:B2:72:45:EA:EF:6F:99:7B:09:54
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:56:c7:d1:bd:71:25:43:17:5d:97:00:f9:c4:69:59:d7:87:
99:b7:5a:d0:e6:ac:ea:7d:92:22:84:82:21:9f:e7:55:a0:6e:
ff:d8:6a:29:9b:09:85:8b:bf:d5:94:a6:b9:a8:85:5f:68:4d:
09:7f:12:a7:d3:61:74:71:e0:5e:4d:55:00:77:bd:99:78:6f:
9c:9d:da:97:b6:01:55:06:aa:10:fc:ba:1b:bd:d1:2e:d5:e4:
98:cf:48:0e:13:75:21:98:e0:43:4a:af:22:91:f6:70:6f:92:
3a:7b:24:4f:bf:ba:6a:4a:9e:b9:ed:35:df:4e:0b:78:f5:bf:
d4:78:97:d3:80:93:81:8d:2b:95:2e:e2:07:9d:c4:84:d1:f9:
48:f1:66:07:b8:b0:18:f3:ca:f7:8e:df:e0:7a:6b:ee:de:5d:
9d:12:c3:33:57:43:32:9b:dd:81:bf:fa:c3:a8:15:51:ec:b7:
88:f2:bc:d3:7c:6b:03:69:13:6a:74:04:ae:a8:00:5f:e5:33:
81:ac:43:8b:79:15:88:2e:3b:7e:59:af:1b:3f:47:10:d1:ca:
4e:1a:d6:65:00:f0:c9:47:62:24:bd:10:9a:31:04:68:9b:11:
76:04:43:48:49:1e:bd:7c:32:da:6d:e6:a9:4b:4d:9f:0c:c7:
f5:38:8b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:08:12 2026 by rpki-client