Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
File: Afp6rPiShM693j1MEkYvxE3rw4Q.mft (raw, json)
Hash identifier: TaF1M6WEU1/bSBfb7muAayOVVgbKbW1fVOecshsYrA0=
Subject key identifier: 19:35:22:4B:F1:00:94:94:C5:06:FD:F4:D3:86:B2:2E:D3:D4:3D:31
Authority key identifier: 01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
Certificate issuer: /CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Certificate serial: 01A1C5C38FA3D927FA0F7604BFED9A8EAFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
Manifest number: 1086
Signing time: Tue 10 Nov 2026 14:01:30 +0000
Manifest this update: Tue 10 Nov 2026 14:01:30 +0000
Manifest next update: Wed 11 Nov 2026 14:01:30 +0000
Files and hashes: 1: Afp6rPiShM693j1MEkYvxE3rw4Q.crl (hash: fqThfUwRI4TubuiZ1J2o9huuyTt7C4NFQjQo4CSqCiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 14:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:c3:8f:a3:d9:27:fa:0f:76:04:bf:ed:9a:8e:af:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fa7aacf89284cebdde3d4c12462fc44debc384
Validity
Not Before: Nov 10 14:01:30 2026 GMT
Not After : Nov 11 14:01:30 2026 GMT
Subject: CN=1935224bf1009494c506fdf4d386b22ed3d43d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:db:35:67:56:d7:fc:6a:38:a3:42:cf:c9:
79:2c:97:e7:9a:7b:dd:51:0b:37:b0:74:23:c0:39:
b9:f2:f3:c7:00:99:66:1e:97:f7:0c:92:76:67:c5:
a6:64:b8:2c:08:ee:fb:b1:49:eb:08:bc:de:7a:54:
c0:1d:5d:ac:e9:22:62:12:92:d9:2b:78:90:98:f0:
2e:8f:ac:e9:5e:ca:80:78:1b:ff:87:df:b6:9c:5b:
c1:0b:a8:85:cf:4d:c0:96:0a:a1:a7:8b:e0:3f:fb:
d6:9d:5e:9a:db:95:98:4f:57:8b:31:0d:b4:e1:7e:
6d:6d:a4:d4:12:89:c3:d9:f3:02:6e:96:fd:8d:5a:
f1:2d:73:2a:af:06:6d:76:83:da:c7:d4:2e:da:8a:
9e:58:b1:6e:7a:fc:85:9b:f4:70:b1:77:54:14:dd:
35:a4:97:0d:04:13:45:58:36:57:a4:06:02:bd:e6:
ed:87:0d:cc:ee:fd:a7:3b:96:26:96:1a:76:85:a8:
63:cf:48:bf:d8:97:51:09:dd:c6:df:3b:d2:1d:7c:
8f:14:60:1e:48:42:cb:9a:9a:80:1f:93:89:93:a7:
7b:77:ff:1c:96:64:a5:ec:c2:fd:02:b9:fa:1b:3b:
10:4c:cd:77:1c:a1:70:12:1d:fb:61:d6:d5:9b:1d:
de:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:35:22:4B:F1:00:94:94:C5:06:FD:F4:D3:86:B2:2E:D3:D4:3D:31
X509v3 Authority Key Identifier:
keyid:01:FA:7A:AC:F8:92:84:CE:BD:DE:3D:4C:12:46:2F:C4:4D:EB:C3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afp6rPiShM693j1MEkYvxE3rw4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/645e1a-ef72-4922-aa9a-7be43eddf2ca/1/Afp6rPiShM693j1MEkYvxE3rw4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:29:3c:62:6e:ee:69:3f:f2:57:67:6a:b6:20:84:27:a5:90:
12:34:71:a7:ef:8c:d7:fd:f2:06:4f:11:25:9a:de:07:80:3f:
b1:bc:e3:37:bc:a9:e6:cb:a1:a0:e3:38:7b:f4:a5:da:b6:21:
df:83:4f:11:cc:96:56:2f:47:82:96:a9:3f:80:a8:58:c1:fe:
d5:27:31:ef:6d:b1:d0:78:68:6f:da:61:db:fc:2e:12:82:65:
c2:00:7a:4e:de:74:b7:59:fe:79:46:d4:ee:02:21:f8:8d:07:
30:3b:e5:38:89:74:84:a2:a3:c4:a6:0e:1c:62:75:6f:fe:d1:
c6:5f:49:3f:34:d8:d6:da:25:c8:e8:95:a6:d0:3a:9c:49:b9:
8f:d2:cb:ab:10:86:ed:ae:a2:73:d9:ab:22:da:6c:7a:07:3f:
6b:d2:5d:83:0d:f8:cc:3e:45:63:27:c2:c3:86:81:19:ef:98:
56:c8:42:97:5d:24:e1:9f:e9:aa:60:c8:a5:5c:01:b1:a3:36:
6a:59:c8:e3:a1:70:ec:39:66:63:58:55:bf:69:2d:9c:ed:1e:
1b:6f:c7:24:e3:96:fe:53:f9:22:0d:37:8d:d8:11:cf:e7:a7:
b8:f6:08:7b:6e:ef:9e:f3:6d:3d:25:c0:68:63:b4:e2:03:ad:
27:d0:d9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:56:46 2026 by rpki-client