Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
File: afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json)
Hash identifier: g5eKm89HXxHT2wo1WwoB86+BPtIYe29+behDXPbcW50=
Subject key identifier: ED:52:E9:0D:31:ED:63:DD:FB:54:AA:78:32:28:13:FF:54:3F:5A:A5
Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
Certificate issuer: /CN=69f1a6b4804bb6a3854a44e1069f257267417805
Certificate serial: 01A0CE5A76E79DCEC77AA541586E46ECFE84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
Manifest number: 0841
Signing time: Wed 23 Sep 2026 13:00:30 +0000
Manifest this update: Wed 23 Sep 2026 13:00:30 +0000
Manifest next update: Thu 24 Sep 2026 13:00:30 +0000
Files and hashes: 1: EWm46AI1rMUSMZthGRFJLKzdg5w.roa (hash: VkQfmMtNp47GhBpBHPy5YMBbYpA58g2YnMi7hmT4lRU=)
2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: lz44b6Yp3z+Z1InhPwnC8lLZJizUK89XT4bMZz9MXJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:76:e7:9d:ce:c7:7a:a5:41:58:6e:46:ec:fe:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805
Validity
Not Before: Sep 23 13:00:30 2026 GMT
Not After : Sep 24 13:00:30 2026 GMT
Subject: CN=ed52e90d31ed63ddfb54aa78322813ff543f5aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:33:68:99:eb:6f:43:84:80:3b:4d:b9:65:2b:
9c:a5:04:52:c1:fb:11:41:dd:b8:d8:cd:7d:5a:d2:
d6:9b:09:f7:06:f7:8d:56:4f:92:94:9c:58:f0:04:
58:22:f9:e0:33:69:0b:46:7a:70:cb:5e:20:40:8b:
ad:72:51:69:ed:0b:c0:2f:26:35:fa:10:94:41:c6:
61:43:6e:b7:cb:45:1e:fa:11:91:ff:f7:7e:6e:37:
04:ce:1a:be:8d:88:fb:97:e9:d9:19:2a:69:5a:5f:
bc:86:00:b1:e0:d2:d3:37:ac:f3:ac:48:ad:a3:ed:
fc:a1:b2:6d:83:f9:89:77:24:de:7d:da:e1:d5:8c:
72:dc:c0:7c:52:8a:56:6d:c2:8c:03:af:b8:eb:c9:
9f:f3:3a:51:9f:09:e3:25:86:6d:59:35:1f:34:c2:
e2:fe:c9:a1:38:ac:ea:33:5f:d7:0f:34:db:2c:86:
b6:c1:50:a0:91:1b:8f:4c:af:54:f1:4e:2b:cb:16:
d3:d8:75:32:24:88:96:86:f9:df:94:d2:41:af:9c:
9a:22:b1:65:d4:09:20:e9:14:1e:ab:ee:75:81:b4:
da:76:fa:4d:c6:84:de:28:73:6b:4e:0c:d4:54:a1:
cc:2e:f5:b0:3e:1f:39:2d:74:02:1f:65:46:15:96:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:52:E9:0D:31:ED:63:DD:FB:54:AA:78:32:28:13:FF:54:3F:5A:A5
X509v3 Authority Key Identifier:
keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:03:36:c7:d9:09:4e:64:8e:99:97:3f:8e:d4:f6:d1:aa:d0:
ea:b9:ed:9b:7a:00:a7:6f:7f:0a:4b:e9:30:96:b0:b0:72:78:
cf:67:3c:f0:f1:9c:43:df:91:57:88:2c:39:e7:59:80:eb:ad:
02:3d:93:9a:83:28:45:a3:d8:17:fa:fe:c8:d5:f0:b6:5d:5b:
4e:3a:6c:f8:5c:d6:7e:90:3f:9c:d5:1a:c9:22:0c:9f:17:a1:
5d:7b:c8:19:f6:42:95:b6:00:ad:bc:bc:1b:86:84:bd:7c:23:
16:0e:d1:2f:96:8b:ca:24:fb:84:ab:42:eb:89:c0:6e:01:cd:
f7:47:9f:17:65:5e:60:26:88:20:f4:20:5a:5c:9a:c3:db:2a:
3d:a2:a8:53:b7:70:de:56:50:66:01:7b:20:22:1e:d1:aa:6c:
62:4f:d6:17:a3:63:a2:e5:65:6b:0b:ec:1f:ea:5b:f1:32:4d:
00:90:41:06:1c:11:b2:1b:c7:7d:e4:f4:3d:5e:aa:df:98:5a:
1e:61:95:e7:5b:78:2c:d8:47:bf:4d:9e:b0:1d:71:f6:54:90:
bd:51:b8:ed:4f:87:25:2f:21:e7:71:d4:3d:ca:0c:4d:73:61:
8e:35:62:9f:94:a8:e6:c5:ab:8d:ac:a5:61:0f:bd:df:5c:85:
fb:a8:a6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:26:37 2026 by rpki-client