Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
File: af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft (raw, json)
Hash identifier: QhQZOaGbTDPWsepMM2ihtO/P+CyzvxLIKl4aVAMxZaM=
Subject key identifier: 50:EF:A0:66:2C:94:9F:44:55:83:40:2D:E7:DB:F9:5C:2C:DD:A7:0C
Authority key identifier: 69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC
Certificate issuer: /CN=69fdfe8249f943aabad1881fca5836613a6a67bc
Certificate serial: 019D9AABC5A4577D6782AA3ACE77466E4520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 09:00:41 +0000
Manifest this update: Fri 17 Apr 2026 09:00:41 +0000
Manifest next update: Sat 18 Apr 2026 09:00:41 +0000
Files and hashes: 1: HDFZ1nzAPhY5th4yTPNuqiO-Idw.roa (hash: BUbqdFYsXkOCO21qdCL7kVwV2KzcTLQ6Ol4gUVkwKWY=)
2: af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl (hash: sylqAsEX41bPjPoh2+uveFJVz/RznFr4RttQZKHR+q0=)
3: uJrBPbJuAzhkVZXNYxGhegbxeZE.roa (hash: vkQaOQJuuFQiTy2ZPMpaydP0z5Y6YEBLnSoStn62x7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:c5:a4:57:7d:67:82:aa:3a:ce:77:46:6e:45:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fdfe8249f943aabad1881fca5836613a6a67bc
Validity
Not Before: Apr 17 09:00:41 2026 GMT
Not After : Apr 18 09:00:41 2026 GMT
Subject: CN=50efa0662c949f445583402de7dbf95c2cdda70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:af:72:3f:31:67:00:a2:c7:24:16:43:5b:4d:
8b:a8:3a:3c:68:12:67:c3:37:30:9b:82:4a:53:c8:
c8:d9:99:a5:20:81:19:24:d2:34:5e:3c:98:43:78:
36:3f:c7:47:41:20:52:47:43:fc:1f:a8:d4:ca:a1:
c0:2f:e4:36:06:5e:3e:22:20:e6:ef:3d:7e:6d:77:
ff:01:d2:48:af:88:e4:9a:37:6e:00:04:d1:25:b0:
c4:05:ee:75:77:2b:79:2f:46:65:a3:48:87:dd:e7:
80:03:bb:5d:23:ac:59:36:73:5c:35:53:77:19:90:
75:f3:6a:36:6e:c2:1c:92:2a:84:55:a7:19:08:08:
2e:98:39:57:0d:9d:90:36:4e:16:cd:b3:36:82:ab:
8b:e0:88:81:2f:b3:3f:ad:fb:94:db:1a:8c:8d:f8:
cc:06:55:dc:2e:55:d7:2d:d8:06:d3:46:fd:e9:a3:
e6:55:19:39:96:38:9c:d6:b4:15:36:19:ce:00:77:
ae:6b:3a:89:a3:e1:1b:b4:74:22:1c:2f:80:76:5f:
10:a9:c0:92:75:fe:65:7a:c9:2e:d3:d2:b1:52:13:
9e:fc:72:14:d3:cb:26:fb:6e:2f:95:69:f2:15:73:
91:97:25:e3:f5:3b:6c:84:3b:fd:a7:e4:f5:a8:da:
cb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EF:A0:66:2C:94:9F:44:55:83:40:2D:E7:DB:F9:5C:2C:DD:A7:0C
X509v3 Authority Key Identifier:
keyid:69:FD:FE:82:49:F9:43:AA:BA:D1:88:1F:CA:58:36:61:3A:6A:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/af3-gkn5Q6q60Ygfylg2YTpqZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ccf777-9465-4a2e-8112-71d8b8850853/1/af3-gkn5Q6q60Ygfylg2YTpqZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:bd:b2:51:b0:7a:dc:25:50:ef:5a:c8:30:bc:46:73:c5:0b:
77:84:bc:6e:cf:19:8d:9e:bb:4e:dc:14:f5:89:f8:b6:cd:6d:
1a:5f:46:6d:ed:0a:03:ab:0a:1e:3e:05:83:d7:4a:d9:e9:09:
bb:06:ed:e7:e0:e4:ad:79:f8:72:f7:12:c9:e4:6d:63:f4:9c:
0f:3b:b6:1f:f1:d1:ce:bf:08:d8:22:b4:df:29:ab:53:56:6e:
45:3e:95:d6:53:d9:df:e9:d2:b5:b8:87:05:71:b3:4f:e0:14:
5f:5c:f2:7f:46:73:dc:5e:f9:87:eb:78:1b:73:81:6f:6f:0e:
31:e4:f8:41:8e:f5:10:b8:85:42:62:98:5b:c5:d0:9c:cb:9f:
04:a3:f0:48:e1:40:78:39:3e:44:31:39:a7:f3:97:7c:da:0d:
f9:fa:df:4e:ee:38:80:06:d3:e7:a5:48:f1:41:8d:62:18:e2:
32:48:9f:f3:74:37:6d:5f:7b:ed:16:17:cb:26:7c:47:09:26:
55:79:d7:29:bf:34:44:df:03:9c:af:12:e9:e2:bb:42:5a:f1:
91:20:f5:7a:1a:ef:85:84:92:d4:55:23:0e:c9:c7:79:17:bf:
61:bb:27:05:b3:f2:73:c7:54:a5:cf:4c:30:47:33:d3:de:28:
a9:54:3a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:46:44 2026 by rpki-client