Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
File: AFSIJAGwckhkqMzLrq_kLIUkBFY.mft (raw, json)
Hash identifier: 1jHVnafr85cB3WUNJEiPUz/2GhtZhFj1MalG+8158hY=
Subject key identifier: 5F:B7:16:1B:CA:F0:75:1A:10:B4:BF:AD:69:FC:D0:7A:0C:42:CB:FA
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 019EC2C94EA9CB1A0C14775C405C9DA4E07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 21:00:33 +0000
Manifest this update: Sat 13 Jun 2026 21:00:33 +0000
Manifest next update: Sun 14 Jun 2026 21:00:33 +0000
Files and hashes: 1: AFSIJAGwckhkqMzLrq_kLIUkBFY.crl (hash: xp6FF+jOdZr4y2esffgOn03TvfLT5d08t0kSY7jOwtI=)
2: NcBIwWrVfFqKGC-Ejlu0skUAVME.roa (hash: QpyQXhGs4Yf3p6aesaO1I7bW/lGukmfPe/wqoZKA1Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:4e:a9:cb:1a:0c:14:77:5c:40:5c:9d:a4:e0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: Jun 13 21:00:33 2026 GMT
Not After : Jun 14 21:00:33 2026 GMT
Subject: CN=5fb7161bcaf0751a10b4bfad69fcd07a0c42cbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f2:e8:50:03:70:e4:3f:9b:5a:8e:c0:bc:ff:
bc:ec:e2:2b:55:d6:06:be:17:20:be:96:90:53:46:
02:f3:27:cf:bb:40:0e:ca:e4:95:22:3a:98:69:b9:
fe:72:4f:6a:b1:c1:32:0f:3d:00:e9:55:d9:4a:8f:
ea:0f:77:3c:ae:1a:c8:cd:25:e6:fe:b5:21:93:c4:
91:49:d3:6b:0f:bb:13:9f:b7:6a:0c:04:31:66:07:
7a:43:00:3e:7b:d5:4a:6b:79:0c:b5:25:1f:fc:52:
a8:2f:fa:96:47:6b:10:1f:f8:8a:60:bb:ae:53:c4:
dc:f2:21:ca:62:38:18:0d:a0:67:a3:6b:12:f8:09:
0c:fe:e9:c3:a5:e8:67:80:2a:b5:bd:47:33:38:19:
02:06:df:2a:f9:ad:77:6c:45:2c:db:fb:52:7d:a2:
c6:d4:8a:6d:d8:48:c1:62:fd:13:d2:d9:17:ab:f0:
74:41:59:78:c2:9a:60:8f:c9:57:8a:7c:3d:ff:9a:
e3:c2:8b:f4:6d:70:59:f0:84:ad:0f:db:74:5a:9f:
77:bb:2c:94:96:4c:25:59:95:03:d2:ee:a4:18:91:
d3:10:b3:da:84:f4:9b:0c:56:b5:0c:db:9f:0f:a4:
f8:e4:c4:39:72:8e:32:27:f1:17:2a:ea:22:ad:73:
2d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B7:16:1B:CA:F0:75:1A:10:B4:BF:AD:69:FC:D0:7A:0C:42:CB:FA
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:64:d9:e7:b6:46:5e:2a:df:ad:c1:72:16:d3:6d:07:85:34:
94:df:3b:38:da:0d:7a:97:a5:7f:28:5c:3e:31:ab:6e:9c:f3:
88:27:d7:a4:b0:ea:92:57:57:9c:79:cd:3a:35:56:f1:ea:77:
d1:82:1e:06:27:81:ab:fc:08:34:da:99:4d:7a:cd:d6:65:77:
e3:35:24:12:78:3a:a6:2e:c2:fa:22:22:62:f9:70:5b:29:4f:
43:d8:39:86:43:91:53:be:6f:6f:77:08:8d:eb:a6:4c:06:86:
b1:92:39:44:50:67:7f:09:21:01:e6:e1:64:a0:5c:92:aa:25:
72:a4:3d:06:58:d3:a1:07:37:bd:74:c0:4a:4c:b3:f5:75:2c:
8b:65:b1:0a:b8:cf:8f:9e:87:40:5c:c6:66:16:f0:9a:3a:14:
22:90:a4:ab:75:08:56:fe:04:96:50:92:af:f6:fe:f8:54:56:
3c:b9:86:a1:6b:98:11:4a:d8:87:44:52:9e:7f:4d:17:63:64:
e2:c5:e9:fc:cf:7a:a2:2e:12:34:3c:9d:86:89:e5:b9:6d:24:
f0:b9:ff:21:68:1c:82:ce:23:19:c6:f2:ce:c6:f6:ec:20:f3:
85:c1:5e:ae:c3:6b:2e:88:fe:fa:a3:1d:39:f5:94:e6:58:56:
21:46:d7:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7CyU6pyxoMFHdcQFydpOB9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNTQ4ODI0MDFiMDcyNDg2NGE4Y2NjYmFlYWZlNDJjODUy
NDA0NTYwHhcNMjYwNjEzMjEwMDMzWhcNMjYwNjE0MjEwMDMzWjAzMTEwLwYDVQQD
Eyg1ZmI3MTYxYmNhZjA3NTFhMTBiNGJmYWQ2OWZjZDA3YTBjNDJjYmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivLoUANw5D+bWo7AvP+87OIrVdYG
vhcgvpaQU0YC8yfPu0AOyuSVIjqYabn+ck9qscEyDz0A6VXZSo/qD3c8rhrIzSXm
/rUhk8SRSdNrD7sTn7dqDAQxZgd6QwA+e9VKa3kMtSUf/FKoL/qWR2sQH/iKYLuu
U8Tc8iHKYjgYDaBno2sS+AkM/unDpehngCq1vUczOBkCBt8q+a13bEUs2/tSfaLG
1Ipt2EjBYv0T0tkXq/B0QVl4wppgj8lXinw9/5rjwov0bXBZ8IStD9t0Wp93uyyU
lkwlWZUD0u6kGJHTELPahPSbDFa1DNufD6T45MQ5co4yJ/EXKuoirXMtjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+3FhvK8HUaELS/rWn80HoMQsv6MB8GA1UdIwQY
MBaAFABUiCQBsHJIZKjMy66v5CyFJARWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUt
NDZlZTk5YTFlZTMwLzEvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85NWZlNDQtYjAzOS00YzkzLWI5NzUtNDZlZTk5YTFlZTMw
LzEvQUZTSUpBR3dja2hrcU16THJxX2tMSVVrQkZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2TZ57ZG
XirfrcFyFtNtB4U0lN87ONoNepelfyhcPjGrbpzziCfXpLDqkldXnHnNOjVW8ep3
0YIeBieBq/wINNqZTXrN1mV34zUkEng6pi7C+iIiYvlwWylPQ9g5hkORU75vb3cI
jeumTAaGsZI5RFBnfwkhAebhZKBckqolcqQ9BljToQc3vXTASkyz9XUsi2WxCrjP
j56HQFzGZhbwmjoUIpCkq3UIVv4EllCSr/b++FRWPLmGoWuYEUrYh0RSnn9NF2Nk
4sXp/M96oi4SNDydhonluW0k8Ln/IWgcgs4jGcbyzsb27CDzhcFersNrLoj++qMd
OfWU5lhWIUbXsA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:37:16 2026 by rpki-client