Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
File: Afp6rPiShM693j1MEkYvxE3rw4Q.mft (raw, json)
Hash identifier: 9KD8enXTb1zR0jz+2XcI8iWcI2sgnLmTwzpcMyO2SH8=
Subject key identifier: 7B:44:07:AE:94:E0:85:A3:37:85:92:65:A8:A0:D8:8F:67:D5:56:2E
Authority key identifier: 01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
Certificate issuer: /CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Certificate serial: 019FA90793D28E4F575BD6329046DDDDE9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
Manifest number: 0F6E
Signing time: Tue 28 Jul 2026 14:01:13 +0000
Manifest this update: Tue 28 Jul 2026 14:01:13 +0000
Manifest next update: Wed 29 Jul 2026 14:01:13 +0000
Files and hashes: 1: Afp6rPiShM693j1MEkYvxE3rw4Q.crl (hash: KgDH0dKXdmTe5eX3mX8eUkn8kvhamOdwRW4DeJePBIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:93:d2:8e:4f:57:5b:d6:32:90:46:dd:dd:e9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Validity
Not Before: Jul 28 14:01:13 2026 GMT
Not After : Jul 29 14:01:13 2026 GMT
Subject: CN=7b4407ae94e085a337859265a8a0d88f67d5562e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:40:52:b8:f5:dc:41:02:d7:84:50:34:df:
83:00:61:9a:05:98:77:13:33:9b:53:2a:7e:df:ff:
db:4b:38:b9:9a:7e:db:b1:09:c3:c9:da:93:cf:20:
52:e3:61:2f:75:ac:32:9d:9f:de:a6:45:63:df:37:
fc:87:ce:ba:df:0e:d0:b8:b2:df:e2:bd:be:55:d3:
b9:b7:41:12:b2:b1:ad:d7:cd:c0:15:6c:f7:72:d9:
5a:12:45:ee:22:53:a0:f4:85:fa:80:f8:f2:85:21:
e2:cf:60:ba:a7:d9:d9:1e:08:63:1f:47:43:dd:2e:
88:d7:1a:f4:2e:84:60:7c:a0:41:29:44:be:85:2c:
b2:81:7e:e8:6a:c2:28:89:ad:03:09:65:15:1c:02:
25:d3:ff:57:0a:c8:1a:a4:31:6a:a6:c2:d8:7b:50:
aa:fa:d5:46:a0:29:73:6f:f9:4b:39:b0:a7:d5:f9:
71:9a:64:59:5c:71:42:f9:8e:e2:47:bd:bc:c4:5d:
93:bf:66:65:78:b0:0e:f6:af:a0:a4:5e:c4:22:5d:
3a:b5:0b:9f:be:3d:d0:78:b6:2e:8b:f9:87:8f:21:
46:d8:a5:44:bf:03:2e:53:5e:f2:83:7e:cc:ed:4c:
ff:1b:ef:3e:4f:f2:26:2d:d4:ab:3b:f6:bb:1c:c8:
6d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:44:07:AE:94:E0:85:A3:37:85:92:65:A8:A0:D8:8F:67:D5:56:2E
X509v3 Authority Key Identifier:
keyid:01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:53:b0:34:ad:8b:1e:d5:57:35:a0:17:3b:ee:44:a2:3c:e2:
61:d5:ca:06:38:01:ac:99:fd:74:13:70:a3:c4:4b:ec:4e:3a:
f8:69:ea:09:db:09:30:80:76:49:d5:b3:09:53:df:f5:21:01:
8e:f1:67:c3:15:6b:74:f1:89:2b:ef:2b:c8:c8:3d:3a:28:e5:
e9:f0:a8:6f:c7:32:7f:0f:f9:53:ad:74:20:e2:00:b7:3e:23:
dc:e8:3f:d3:40:68:2e:89:91:40:ee:5c:93:3e:a1:e3:dd:d9:
37:c0:b1:b9:4b:25:d7:25:7c:2a:cf:23:89:c6:40:a7:32:52:
d4:54:e1:63:09:8b:59:53:a6:3f:51:73:c7:1a:ed:64:87:f2:
5b:52:b6:7b:03:54:d0:d6:8a:b6:ba:4f:30:50:58:a0:af:5d:
92:52:61:cd:04:71:6a:21:7a:be:cb:8c:04:71:eb:cc:a1:b8:
a8:15:a7:34:09:6e:5a:30:b5:cb:07:6b:14:65:00:84:2b:2f:
8f:a3:b1:dc:d9:1f:80:54:6f:f5:cd:b5:8e:53:e1:4c:86:8f:
7f:20:31:6c:69:ed:a5:0b:73:87:e7:62:45:8a:a2:73:57:05:
4b:28:d2:34:51:83:63:4a:95:bb:35:aa:2d:5e:af:48:ea:06:
b9:75:7b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:34:43 2026 by rpki-client