Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
File: Afp6rPiShM693j1MEkYvxE3rw4Q.mft (raw, json)
Hash identifier: SX0M4iRpzFcVA/AyJfb1yFaLHfG+UsmQKiuPa78O8rA=
Subject key identifier: AD:71:3D:51:41:DE:E2:AD:2F:B5:BC:56:7A:0F:54:6E:BA:9D:04:7B
Authority key identifier: 01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
Certificate issuer: /CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Certificate serial: 019CAC479268BADED8EB621B3B1217F97C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
Manifest number: 0DE2
Signing time: Mon 02 Mar 2026 02:01:37 +0000
Manifest this update: Mon 02 Mar 2026 02:01:37 +0000
Manifest next update: Tue 03 Mar 2026 02:01:37 +0000
Files and hashes: 1: Afp6rPiShM693j1MEkYvxE3rw4Q.crl (hash: 3u3AQydpH8LXOaG9FtkhxeRNWIPcvMfTqY/dNr5Jz/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:92:68:ba:de:d8:eb:62:1b:3b:12:17:f9:7c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Validity
Not Before: Mar 2 02:01:37 2026 GMT
Not After : Mar 3 02:01:37 2026 GMT
Subject: CN=ad713d5141dee2ad2fb5bc567a0f546eba9d047b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:5d:e3:f9:15:ed:20:b9:71:70:53:c8:4a:
e1:1b:32:d5:56:88:76:ef:1d:c2:d6:1f:9d:38:5b:
88:4b:ba:62:9a:62:00:29:16:d8:83:57:e6:af:4d:
0d:bb:6d:01:18:9e:98:3c:95:76:67:86:46:3c:ff:
01:8d:00:74:b0:76:93:de:e9:14:b0:c4:ba:73:28:
2b:09:71:2f:a2:74:7d:81:79:c8:f4:9f:c5:7f:8c:
d8:56:0b:8b:dc:d9:33:b2:ef:dd:63:14:cb:f1:70:
85:7b:ec:20:ff:22:19:52:07:c3:2a:ca:fe:2f:d7:
70:64:ad:de:1b:33:ae:06:c1:9b:85:79:46:14:d4:
d0:e6:1e:52:59:c5:64:93:b6:5a:e0:46:a1:91:b4:
0d:46:a8:d3:df:ca:6c:5f:a2:c2:bc:96:0f:15:dc:
00:f5:6b:f0:92:2d:74:fa:26:4a:c8:07:ad:09:f1:
5d:1a:9a:26:30:b0:32:7f:16:98:1b:9f:72:79:a3:
4d:b5:bd:cd:c0:75:df:08:99:ea:8e:f4:66:88:25:
31:b2:ee:16:dc:d8:b1:f8:7c:83:91:8b:2b:e4:e9:
00:3b:d0:e3:8c:79:a4:b4:0d:b3:67:25:bd:f2:60:
bb:77:0a:ae:bc:24:1b:c0:4d:c3:7f:6a:4d:1a:49:
4b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:71:3D:51:41:DE:E2:AD:2F:B5:BC:56:7A:0F:54:6E:BA:9D:04:7B
X509v3 Authority Key Identifier:
keyid:01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:54:09:a1:d5:91:d8:94:ca:cf:1d:32:67:74:9a:d9:36:7b:
c5:74:fe:25:89:5a:92:fd:25:2a:22:98:95:54:e9:e6:85:15:
19:12:34:83:ca:71:e2:d3:d3:c7:a7:65:c6:cf:db:27:2a:17:
da:b0:a3:fd:c0:b2:5e:62:f5:b1:36:0b:87:40:3e:34:0e:dd:
9a:a8:9d:a8:54:55:93:2d:ea:38:d9:8e:d7:f7:07:cf:a6:14:
17:83:a0:3c:2a:e2:25:84:c5:ec:62:ce:c1:13:e0:db:5f:3d:
d1:f4:fc:c1:dd:bb:99:78:05:8f:ae:53:0a:b4:fe:0d:6a:66:
df:a0:e2:c5:e8:38:02:19:b6:7d:02:6a:e6:29:87:c6:84:37:
12:e1:4b:5a:2f:a4:98:57:55:f1:a9:6d:f2:cf:fd:91:b3:28:
18:e4:33:69:56:27:86:03:f2:42:b5:75:6f:df:57:ec:64:f9:
83:78:42:7a:de:92:4f:5d:ca:16:2f:2e:37:75:b5:61:ca:ba:
66:8e:5b:53:7f:eb:f4:2a:a2:bc:11:bc:33:47:00:14:cd:17:
07:ab:e3:10:59:37:52:30:c4:2e:f2:14:91:39:c9:79:28:df:
78:47:8e:a2:03:9a:60:24:e2:e0:06:12:b1:88:cc:2f:0c:4e:
46:38:f8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:37 2026 by rpki-client