Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
File: afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json)
Hash identifier: WzQ9UEb4GgPy8nOHSdTR3cJKhJ2M5p8Tv2BC49rbiX0=
Subject key identifier: 21:B4:5E:8B:E2:CF:EB:8C:10:6A:7A:50:4F:0D:8E:C9:F7:5D:EA:0D
Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
Certificate issuer: /CN=69f1a6b4804bb6a3854a44e1069f257267417805
Certificate serial: 019FAABEE93136307415D4C56B4649EECA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
Manifest number: 07AA
Signing time: Tue 28 Jul 2026 22:01:05 +0000
Manifest this update: Tue 28 Jul 2026 22:01:05 +0000
Manifest next update: Wed 29 Jul 2026 22:01:05 +0000
Files and hashes: 1: EWm46AI1rMUSMZthGRFJLKzdg5w.roa (hash: VkQfmMtNp47GhBpBHPy5YMBbYpA58g2YnMi7hmT4lRU=)
2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: 9EH24IbOEq7S4GVP/hVCiYdrordgSe1zz8FacKFbgGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:e9:31:36:30:74:15:d4:c5:6b:46:49:ee:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805
Validity
Not Before: Jul 28 22:01:05 2026 GMT
Not After : Jul 29 22:01:05 2026 GMT
Subject: CN=21b45e8be2cfeb8c106a7a504f0d8ec9f75dea0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:a6:28:da:77:6b:ae:73:f8:e2:ce:e6:72:
68:e3:aa:e7:58:4b:81:18:37:43:6c:01:f4:be:c5:
45:4a:e0:6a:fd:fc:7c:39:a4:24:28:12:1e:6d:8b:
5d:99:2d:6d:41:d6:04:77:71:10:93:c2:65:3a:ed:
69:f2:35:95:a5:b8:af:ee:51:33:00:d8:e2:63:c7:
bb:b1:99:f4:22:35:4e:b4:93:e8:da:b7:2c:06:36:
3a:64:bd:f6:d3:aa:ea:69:3f:35:3c:f6:50:3d:9e:
19:fc:9f:8c:24:bd:d2:b7:6d:b7:b9:40:c2:8b:97:
63:11:25:7f:dc:21:74:9e:c4:b3:8d:87:8c:38:49:
34:bf:1d:8b:a2:2c:b7:63:09:ab:5f:e0:6a:db:16:
88:df:8f:42:4f:ba:31:a0:0b:4a:b0:b4:79:9e:4c:
4c:b7:02:55:9d:ce:31:75:67:95:4e:95:af:27:00:
59:3e:cd:f0:5c:7a:6a:19:b1:2d:62:6d:94:92:34:
13:70:84:e2:bb:fd:7f:68:24:3b:61:75:7f:92:3d:
d1:27:59:18:f7:5d:7e:08:2b:9e:d6:58:9f:3c:9e:
bd:bd:c6:cd:0e:fe:2a:08:b9:ef:2c:e2:33:dd:80:
98:8e:23:6b:d7:e4:bb:bc:06:d1:ed:f4:1f:c7:08:
72:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B4:5E:8B:E2:CF:EB:8C:10:6A:7A:50:4F:0D:8E:C9:F7:5D:EA:0D
X509v3 Authority Key Identifier:
keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5a:94:c3:17:ea:c9:8a:be:4b:f2:26:fb:cd:c2:bd:1f:35:
0a:38:97:d2:64:fa:d7:0d:6d:b7:f7:08:31:c6:db:91:1f:6e:
70:dc:4c:ee:99:bd:80:7a:40:bf:f0:86:a5:80:a6:23:8b:13:
b3:7b:ed:dd:4b:ea:1d:42:61:34:31:b9:63:2f:8d:eb:a5:09:
10:3f:c8:62:02:26:97:64:de:3b:08:5a:14:e4:e5:c6:a0:8b:
b4:34:cc:90:fb:da:7b:db:84:6a:10:24:d1:e3:a3:7e:37:d8:
ac:92:14:94:16:08:d4:b3:23:5c:98:2c:ea:81:fa:e3:99:8b:
32:92:87:69:33:8e:0b:ee:e6:1e:1f:bc:e0:87:73:b7:77:ad:
31:41:74:a1:2d:69:3d:ff:9b:b4:c0:2f:b9:5f:e4:09:23:3c:
73:c8:c5:9a:28:07:b3:da:73:a6:37:97:ef:f8:47:c3:3f:ee:
e6:be:06:21:5e:fe:d9:09:7b:20:bc:0e:ca:ef:d1:d8:36:6d:
b3:78:02:cc:ae:b4:03:28:d1:ec:42:65:20:f9:bc:01:75:76:
3d:77:ff:c8:13:1c:db:d9:5c:36:b7:f1:e2:40:92:11:e7:8b:
97:20:0d:0e:6a:92:a4:73:db:bf:c9:1e:18:af:56:d3:3e:47:
e4:a0:f6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:00 2026 by rpki-client