Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
File: afY2pbazoordg_l0Rtewg7lMPa4.mft (raw, json)
Hash identifier: 3LlqE92gdF8lyNRVsdb89YL6QGvHry/Vmzg95uitNNQ=
Subject key identifier: 23:9E:86:83:DF:1B:95:8F:D6:F4:81:85:B7:FD:E5:39:79:9B:D9:89
Authority key identifier: 69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
Certificate issuer: /CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Certificate serial: 019CAD905A0A0F37567AD7F1D115A6BF3F96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
Manifest number: 0817
Signing time: Mon 02 Mar 2026 08:00:44 +0000
Manifest this update: Mon 02 Mar 2026 08:00:44 +0000
Manifest next update: Tue 03 Mar 2026 08:00:44 +0000
Files and hashes: 1: afY2pbazoordg_l0Rtewg7lMPa4.crl (hash: fJ54oqH18J9dH6GtOKhgRJS9DjQF3YyY6NgHZ1SL/Cg=)
2: yVIh76xTZ4QX7LFk-xKKVayLUYw.roa (hash: QHMxu1cY+b4CW+lhAzUzhzJoH+xpmKyHhi16mUYw9vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:5a:0a:0f:37:56:7a:d7:f1:d1:15:a6:bf:3f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Validity
Not Before: Mar 2 08:00:44 2026 GMT
Not After : Mar 3 08:00:44 2026 GMT
Subject: CN=239e8683df1b958fd6f48185b7fde539799bd989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e3:23:db:ff:a3:5e:92:b7:c9:29:2c:bd:42:
dd:11:94:a7:26:48:cf:ff:b0:5a:93:f1:7b:2a:40:
a7:a9:7d:ce:91:84:5b:6e:e1:9e:08:a9:96:cb:58:
92:b5:fd:c6:03:96:7e:26:bb:79:28:17:09:e7:50:
f4:ea:64:ef:bb:6b:e2:66:d4:64:0d:28:12:a4:8f:
9e:63:3c:cf:7c:13:e1:c4:83:7f:37:06:fb:6d:cd:
fd:08:6a:af:b6:51:94:3b:f1:13:d7:96:88:95:f4:
dc:f4:70:42:f8:c1:3f:77:6f:65:d9:71:1b:60:d1:
a2:d9:2a:aa:ba:38:80:54:03:82:19:35:40:ab:98:
27:75:85:25:79:fa:91:9f:30:bf:7a:ee:5c:41:23:
56:55:86:ed:fe:26:ab:e5:3b:c5:f7:22:6f:72:de:
c6:49:66:13:3c:64:54:27:bd:cc:31:d2:18:e9:1b:
73:84:c8:a6:6c:bd:0d:00:05:0f:a9:5f:d8:4e:c2:
fc:05:2e:dd:71:b9:eb:be:3e:04:89:09:b7:54:ce:
52:7e:78:8f:f3:2a:a1:e2:c9:89:fb:1f:67:40:2c:
fa:2a:f2:25:a0:f0:02:1d:b9:9e:4f:88:e7:98:e6:
ba:3b:72:ab:4a:d4:1c:0e:60:ab:a9:52:b6:a2:eb:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9E:86:83:DF:1B:95:8F:D6:F4:81:85:B7:FD:E5:39:79:9B:D9:89
X509v3 Authority Key Identifier:
keyid:69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a9:d1:17:71:ca:24:b8:84:92:0d:c2:03:10:80:48:98:a6:
92:dd:a6:04:5b:08:4d:e4:bb:f2:34:da:8f:0f:75:13:db:6a:
5b:b1:78:36:6c:4b:a4:31:18:92:a1:ec:5c:63:f7:ad:c6:24:
2f:26:cd:db:bb:8e:f6:a7:63:fc:84:4f:b4:5a:fb:dc:2b:c4:
77:e9:da:69:79:eb:f7:0b:23:97:16:20:e3:03:6b:e6:04:41:
0f:80:f6:6c:33:f3:58:ff:37:67:05:5e:f2:15:8a:02:af:e9:
4d:8f:01:38:3a:c6:81:70:77:45:e2:88:fc:a3:82:a5:7f:ef:
85:a2:dc:81:61:df:c1:70:82:bf:ad:61:c5:41:85:46:db:78:
1e:6d:04:9b:2b:00:57:bc:29:23:b6:da:d3:5a:dc:1f:a9:6f:
f7:f0:60:70:04:7d:90:a1:1c:1b:54:1d:bd:80:ae:b4:9c:08:
82:e7:5c:9d:0a:ef:ea:31:ff:a1:1a:20:1a:8b:bb:5f:58:a3:
bc:f8:3e:29:d9:87:3f:fe:b8:57:63:57:da:28:69:4d:7d:14:
36:65:0d:95:24:97:1b:4a:39:9e:8f:57:0b:af:48:55:f0:17:
af:eb:84:c4:67:b4:08:13:ce:c0:f2:f6:67:9c:52:57:ac:11:
c8:12:23:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:01:21 2026 by rpki-client