Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
File: af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft (raw, json)
Hash identifier: /moS5e4ws13OtW4njEa43mSE7/Z17VCUDmFDKDZbShs=
Subject key identifier: CE:06:4A:BF:87:39:BF:CD:DA:FA:7D:28:13:32:41:CE:74:5D:34:F4
Authority key identifier: 69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC
Certificate issuer: /CN=69fdfe8249f943aabad1881fca5836613a6a67bc
Certificate serial: 019CAD2272B7734DACB2189043EF86CC0934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 06:00:41 +0000
Manifest this update: Mon 02 Mar 2026 06:00:41 +0000
Manifest next update: Tue 03 Mar 2026 06:00:41 +0000
Files and hashes: 1: HDFZ1nzAPhY5th4yTPNuqiO-Idw.roa (hash: BUbqdFYsXkOCO21qdCL7kVwV2KzcTLQ6Ol4gUVkwKWY=)
2: af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl (hash: xMTnKcBWuiiINyQDo/INjIv2Ul0jgQat/R5097l9Dd4=)
3: uJrBPbJuAzhkVZXNYxGhegbxeZE.roa (hash: vkQaOQJuuFQiTy2ZPMpaydP0z5Y6YEBLnSoStn62x7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:72:b7:73:4d:ac:b2:18:90:43:ef:86:cc:09:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fdfe8249f943aabad1881fca5836613a6a67bc
Validity
Not Before: Mar 2 06:00:41 2026 GMT
Not After : Mar 3 06:00:41 2026 GMT
Subject: CN=ce064abf8739bfcddafa7d28133241ce745d34f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:ae:5d:c9:72:5a:5e:8f:71:3f:53:d4:7f:
1a:0f:5a:1f:8b:8e:17:78:8a:aa:b8:7a:6e:60:1a:
0c:37:9c:33:ba:72:e9:72:61:b4:4b:bc:26:47:0c:
8f:a4:db:3f:8f:0e:0c:9e:b3:ea:9c:47:25:c2:d0:
0e:94:fb:20:be:2b:2a:f9:c9:6d:32:67:0d:1f:be:
8b:03:fb:b4:29:d4:41:70:af:29:c5:93:a2:bc:f8:
56:96:c9:9b:15:2d:06:06:60:49:e9:f4:72:b9:a5:
5c:8a:1b:2a:10:dc:bd:0d:8b:81:ff:33:f8:ba:14:
67:22:b3:46:37:6b:8a:ce:1b:b7:3a:76:59:00:8c:
8f:c5:16:23:f1:60:59:c7:4c:c9:0b:cb:61:74:22:
83:1d:01:b4:8e:9e:6f:32:0b:3f:99:17:39:e7:ce:
dd:a5:54:a2:0c:29:6d:c1:99:38:d8:1a:67:6d:45:
62:f3:13:70:55:ce:1f:a7:7e:95:02:0e:2d:40:9e:
a9:10:a8:4b:45:8a:cb:30:19:49:8b:30:2f:63:4a:
c9:2f:8b:a3:fb:58:0b:49:2f:21:b1:d2:ac:7e:fc:
28:11:b3:0e:ca:14:eb:93:ac:97:65:d9:4c:bb:f9:
25:0c:6e:52:7a:43:f8:ce:57:8b:3f:06:2b:bc:a8:
b7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:06:4A:BF:87:39:BF:CD:DA:FA:7D:28:13:32:41:CE:74:5D:34:F4
X509v3 Authority Key Identifier:
keyid:69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:08:c0:31:12:31:27:2a:ef:da:b2:fd:81:09:9a:8d:68:0b:
ba:01:2b:bd:f5:37:79:55:09:1c:a9:91:e8:55:02:ef:b5:a4:
cb:20:08:60:45:36:b8:be:fe:5e:50:4b:fc:e3:ae:d0:e6:73:
30:61:fe:30:69:8a:58:7d:25:7a:eb:cc:58:ce:22:b8:82:c1:
2f:09:fa:18:37:fd:29:cb:8b:14:33:f9:d4:f3:99:12:1b:91:
51:db:24:0b:7d:26:98:70:7e:00:55:13:37:6d:71:d9:2b:ed:
fe:34:d3:34:8f:5e:6d:4e:00:03:7e:3d:b1:13:e0:10:ae:e4:
f0:c3:86:ca:01:33:3e:05:84:36:bd:18:48:2f:0e:49:6f:b6:
31:a5:c3:6f:98:8c:7f:d7:4f:eb:23:9e:10:4f:1b:2d:f7:3e:
42:08:51:76:60:49:23:4a:d4:59:cb:e9:cc:72:67:18:a6:e2:
72:65:2b:f7:46:2b:f1:fe:29:ca:68:01:ae:d5:b9:e9:d7:9f:
fc:f8:f3:f1:48:70:a5:e8:93:63:bd:6f:ea:73:97:d3:99:f7:
ad:7c:15:e7:7e:f9:e8:bb:a6:ce:aa:31:9d:95:b1:32:07:84:
f7:d9:b5:5d:2b:af:42:37:f7:e8:6c:91:80:89:00:e3:9d:36:
fa:4d:37:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:42 2026 by rpki-client