Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
File: afY2pbazoordg_l0Rtewg7lMPa4.mft (raw, json)
Hash identifier: BKsiUsZuatstPg9l3fpsmb467uk/0IANw20ImKJ8cp4=
Subject key identifier: 6A:AB:C6:24:93:96:14:64:56:71:E3:F4:A3:BA:E5:6E:CC:23:2E:DF
Authority key identifier: 69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
Certificate issuer: /CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Certificate serial: 019D992B220CE21B53E114AE57AC75B7D856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
Manifest number: 0891
Signing time: Fri 17 Apr 2026 02:00:33 +0000
Manifest this update: Fri 17 Apr 2026 02:00:33 +0000
Manifest next update: Sat 18 Apr 2026 02:00:33 +0000
Files and hashes: 1: afY2pbazoordg_l0Rtewg7lMPa4.crl (hash: /0UqsmUuB9g4TQG24J8QERzohbxZcKbRRXrEKU/36P8=)
2: yVIh76xTZ4QX7LFk-xKKVayLUYw.roa (hash: QHMxu1cY+b4CW+lhAzUzhzJoH+xpmKyHhi16mUYw9vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:22:0c:e2:1b:53:e1:14:ae:57:ac:75:b7:d8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f636a5b6b3a28add83f97446d7b083b94c3dae
Validity
Not Before: Apr 17 02:00:33 2026 GMT
Not After : Apr 18 02:00:33 2026 GMT
Subject: CN=6aabc624939614645671e3f4a3bae56ecc232edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:79:34:df:c3:a6:d3:26:b7:4c:8c:5c:fb:
0d:b8:25:03:20:7f:1e:1c:d5:55:65:77:db:6d:47:
1c:fe:b7:0a:30:91:a0:c7:23:8e:c3:cf:3e:47:c1:
6b:98:26:b2:02:d6:d6:d4:33:75:f0:ff:3b:9c:b1:
1d:40:49:83:44:74:f6:94:93:7a:f8:5c:47:49:1a:
06:9f:7a:97:30:fb:bb:68:97:b6:38:53:aa:85:d0:
de:2c:c4:6e:2b:14:6f:70:cf:e7:c8:49:84:21:c6:
13:76:e2:02:69:dc:c0:5c:90:0a:c5:f8:1e:67:48:
aa:74:63:85:60:77:b7:03:25:55:f2:90:e7:37:60:
18:26:37:50:9e:15:18:1a:d1:60:c8:f3:a8:7f:6e:
7b:e2:f3:d4:2c:f9:12:9a:a5:96:6b:f4:7a:40:53:
be:f9:af:21:e4:a8:98:3c:52:26:39:13:0c:1e:94:
98:91:31:56:22:9a:74:f7:33:58:8a:5a:56:96:69:
95:98:c0:82:08:b1:5a:50:e7:9e:8a:f9:40:52:13:
51:84:5c:45:cd:ec:ee:11:b2:b2:39:b1:6e:fe:3d:
77:a7:0c:a0:08:42:bb:dd:87:54:0e:e6:5d:05:c4:
88:c3:73:eb:7d:bd:d9:9a:9b:31:e0:14:88:12:3d:
25:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AB:C6:24:93:96:14:64:56:71:E3:F4:A3:BA:E5:6E:CC:23:2E:DF
X509v3 Authority Key Identifier:
keyid:69:F6:36:A5:B6:B3:A2:8A:DD:83:F9:74:46:D7:B0:83:B9:4C:3D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afY2pbazoordg_l0Rtewg7lMPa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e99954-c00f-4014-8e71-8aee2bf89b91/1/afY2pbazoordg_l0Rtewg7lMPa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:2c:b2:85:10:6b:6e:13:33:ba:96:ff:d1:4e:43:3d:5c:d4:
64:3a:bf:53:3a:a2:a0:5b:82:9c:c9:74:2e:f2:05:6e:32:47:
6c:64:d0:1a:4a:72:7c:b0:c0:4a:8c:9c:5c:24:33:2d:aa:b4:
c1:1e:c8:17:1a:55:db:73:2d:a7:7c:e8:fb:b4:b4:11:33:07:
f1:c6:e3:96:29:e3:99:57:83:2d:b1:e8:ed:aa:2c:13:b1:ec:
ac:2d:d8:18:79:a4:a4:f9:0d:bd:0d:f9:1e:e0:1b:f2:41:d9:
e2:f3:5f:d6:65:3f:f5:3b:4f:8b:45:b6:07:ac:89:ca:36:8b:
5d:11:ea:c3:5b:b8:aa:61:8f:62:16:51:c5:03:83:3e:5b:81:
24:ee:81:ef:d4:29:a8:53:e5:90:e2:a3:d2:88:7e:fe:e2:c0:
28:be:22:db:34:4d:ae:de:ee:34:6f:99:95:55:ed:a4:b7:64:
70:ec:17:c7:29:ac:a6:fe:db:d9:26:c0:99:77:95:cf:f7:7c:
4c:20:df:d6:65:f2:ce:fd:84:05:0c:41:f7:38:d0:ad:60:1d:
e5:be:b0:d9:c0:6a:88:bd:6d:aa:84:01:b0:10:1b:4a:f7:ca:
c8:aa:3a:55:8c:94:0f:76:9e:7f:44:4f:14:20:64:d7:57:49:
27:67:c0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:50 2026 by rpki-client