Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
File: Afp6rPiShM693j1MEkYvxE3rw4Q.mft (raw, json)
Hash identifier: zHkLAcQFUgFcNKDRT1iQOnW6GWz6koiuRej6ed1j/no=
Subject key identifier: 41:F1:CB:33:2B:19:F6:DF:BB:0A:E2:E3:AD:1D:50:A3:D0:7F:BE:7E
Authority key identifier: 01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
Certificate issuer: /CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Certificate serial: 01A0C2FB1FC6DB8EE9DB06ADC7F1CBA0CA96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
Manifest number: 1000
Signing time: Mon 21 Sep 2026 08:00:32 +0000
Manifest this update: Mon 21 Sep 2026 08:00:32 +0000
Manifest next update: Tue 22 Sep 2026 08:00:32 +0000
Files and hashes: 1: Afp6rPiShM693j1MEkYvxE3rw4Q.crl (hash: kaDNi+ApOhG/eRsKk+BDcu64y8Pna5XozF5wXwB+Mks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:1f:c6:db:8e:e9:db:06:ad:c7:f1:cb:a0:ca:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Validity
Not Before: Sep 21 08:00:32 2026 GMT
Not After : Sep 22 08:00:32 2026 GMT
Subject: CN=41f1cb332b19f6dfbb0ae2e3ad1d50a3d07fbe7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:82:31:bf:5d:fc:ec:e5:d6:b1:b7:43:77:
05:17:cc:d4:32:f7:65:45:03:aa:1e:e7:24:67:a6:
41:2a:21:48:a4:29:38:c1:f1:93:93:0c:f3:0f:ac:
80:24:4d:87:25:fe:e4:e4:0a:cf:fc:7d:16:60:e3:
1a:9c:32:00:9a:28:c5:fe:78:86:95:93:29:c6:7c:
f0:3b:9f:08:15:4b:5a:d2:b1:8e:1b:d5:e5:f1:e2:
48:ce:27:2a:06:ac:46:95:4f:08:6e:76:b3:9f:ea:
e0:31:40:a2:9a:6b:23:9a:be:2d:34:b2:bb:1e:4c:
b2:91:80:6f:e8:71:9b:fa:5a:c9:75:81:09:49:54:
69:6e:53:aa:65:18:65:21:c5:d6:44:98:55:af:ea:
dd:fe:50:68:53:88:88:4b:3e:54:c9:22:31:8d:69:
d8:3a:d3:f7:6d:cc:5c:3c:97:41:51:11:cb:fb:17:
4b:51:0f:24:52:d5:36:78:28:c2:c6:dc:d2:0e:f9:
3f:63:a3:69:40:01:d4:99:d8:f8:af:f2:d5:7b:0a:
e0:7a:31:59:9e:b9:f2:a4:5c:2c:5e:55:40:73:82:
1e:6d:2a:59:76:a1:02:04:e2:e7:4e:35:12:b4:90:
c8:4a:20:9c:e6:ac:6b:72:ff:eb:ad:b4:aa:95:8b:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F1:CB:33:2B:19:F6:DF:BB:0A:E2:E3:AD:1D:50:A3:D0:7F:BE:7E
X509v3 Authority Key Identifier:
keyid:01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7a:26:7c:4d:06:67:8a:01:d6:7a:34:14:00:67:42:61:2e:
87:24:e8:63:2a:37:f5:38:96:c1:0d:41:ee:95:27:c0:f3:08:
df:0a:05:ec:cb:d2:6b:ae:b8:95:4f:87:12:64:0d:b1:9e:83:
dd:e4:40:67:5d:79:c2:aa:96:ed:35:75:0c:1b:74:b6:f6:cb:
86:cf:32:68:c9:45:e8:98:5a:9f:5c:0d:85:eb:3d:ae:7c:a3:
6d:ed:db:50:77:0f:26:e1:33:64:7f:84:85:7c:9c:b7:de:f1:
cc:a5:26:c3:05:03:45:0c:ec:79:e8:27:51:d3:2b:0c:01:46:
00:1e:14:d0:47:2d:79:ef:b0:d3:10:ac:ae:b5:b1:ba:38:18:
08:d2:22:b8:df:b0:55:40:3e:90:46:d0:9c:a6:a1:c9:c2:fe:
2d:19:5c:6b:2a:b9:0d:e5:3a:01:c1:4a:ff:8d:aa:c0:5c:7f:
32:fd:93:6b:2e:65:d9:29:d0:60:b9:2a:ce:c0:9b:cd:1e:2e:
5a:78:00:6a:7b:b6:46:ef:e3:66:6c:fb:7c:46:41:b9:78:ed:
bb:9b:d5:41:71:f2:ac:b9:47:de:13:ee:cd:b9:80:ae:ef:4a:
ab:24:4d:66:81:14:95:2a:ba:89:7d:16:95:50:c8:b0:ee:1d:
2a:00:2a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:19:43 2026 by rpki-client