Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
File: afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json)
Hash identifier: 88xPaqFKON0CMUYC0X8EEa3qE8ucfb3CDVZ7Qn1HbP4=
Subject key identifier: CE:69:1D:51:FF:83:0F:8F:5A:F3:AB:53:54:F8:D2:2E:BC:21:0F:65
Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
Certificate issuer: /CN=69f1a6b4804bb6a3854a44e1069f257267417805
Certificate serial: 019CAA21A7B3AAB1176E0F75A0C65934CBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
Manifest number: 061C
Signing time: Sun 01 Mar 2026 16:00:58 +0000
Manifest this update: Sun 01 Mar 2026 16:00:58 +0000
Manifest next update: Mon 02 Mar 2026 16:00:58 +0000
Files and hashes: 1: EWm46AI1rMUSMZthGRFJLKzdg5w.roa (hash: VkQfmMtNp47GhBpBHPy5YMBbYpA58g2YnMi7hmT4lRU=)
2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: cyjZX62yRfDdvbqkTzW8GTrfF6se8zM0jO+IBkggfFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:a7:b3:aa:b1:17:6e:0f:75:a0:c6:59:34:cb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805
Validity
Not Before: Mar 1 16:00:58 2026 GMT
Not After : Mar 2 16:00:58 2026 GMT
Subject: CN=ce691d51ff830f8f5af3ab5354f8d22ebc210f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fc:1f:b7:c9:ba:e4:17:77:fd:ab:6d:60:9b:
b7:2a:cd:00:b5:14:b6:32:b3:53:42:b5:7f:9e:87:
fb:3e:8a:60:a5:d8:16:65:bd:85:a9:eb:7d:3c:7e:
2e:b9:d6:e8:ca:a0:8f:e1:fc:f6:c9:3c:39:d2:8d:
e3:4d:ad:53:d7:44:ff:d0:19:8b:01:c3:8d:a3:d5:
c3:2a:79:26:67:a3:e7:a3:5c:9c:46:2c:59:88:0e:
c6:d3:9f:b9:3e:a4:c5:e4:a7:fa:73:ab:fe:a7:31:
2b:25:92:8a:78:a1:dc:39:d2:84:a8:aa:4e:a2:f7:
83:be:e2:25:b9:31:81:57:dc:ff:4e:1e:5c:8f:a9:
62:42:bd:77:78:4c:fe:6c:07:65:41:d8:e8:e2:ec:
37:3e:65:97:7c:6d:ff:03:30:11:3f:ca:4c:b5:16:
30:75:69:bb:ba:50:eb:76:e1:2a:bf:b5:4b:00:2c:
b7:4d:15:4b:ed:74:46:6b:85:f5:08:87:63:f8:a2:
1c:54:28:a6:a6:18:68:70:2d:0f:e3:06:ef:be:9d:
64:b9:e2:a8:45:6a:b9:2d:fd:34:bc:9e:bc:cb:88:
b6:ed:fd:29:33:26:28:78:33:30:c8:0a:bb:02:e6:
50:98:c6:74:59:f4:2c:cc:af:a5:75:a3:a8:26:4d:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:69:1D:51:FF:83:0F:8F:5A:F3:AB:53:54:F8:D2:2E:BC:21:0F:65
X509v3 Authority Key Identifier:
keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:3c:06:10:59:a5:5f:70:b2:1b:75:36:df:26:01:f5:0d:2f:
cc:f1:78:62:00:2f:47:5a:56:01:46:d6:bb:d3:3e:0d:31:be:
ff:1d:bc:6f:8c:50:7b:98:2a:50:d2:90:8f:74:b9:fa:d2:08:
b0:8c:ce:08:a0:e8:2d:3f:33:41:b2:a1:38:24:d0:70:14:b4:
5b:07:1e:21:4e:d6:fd:a0:c3:13:68:1f:fd:b1:94:33:4d:15:
aa:fd:42:17:01:fc:d2:b0:6c:b6:c4:12:bd:32:49:87:d3:56:
6b:59:59:82:2b:fb:85:c1:0b:6a:2a:b0:50:3c:a4:fb:ec:2f:
c1:4e:95:b7:1a:67:7c:b2:47:ab:2f:3d:8f:88:75:3f:29:0c:
e7:59:9e:25:1d:e3:e4:5c:61:f9:2d:f8:53:ef:b1:0a:f6:6d:
48:ec:da:21:53:1f:95:26:66:eb:83:50:ae:a6:14:72:f4:0f:
cd:b0:65:08:ec:d3:5b:21:95:0a:e8:47:8e:98:7b:ef:03:b3:
53:ae:05:0b:51:fd:ab:c6:a2:9d:64:49:03:33:d5:2e:2d:7d:
5e:69:7e:ac:0f:4a:43:46:fd:8c:f8:47:8c:8a:7f:15:ff:ba:
d2:40:f9:9b:d2:97:81:fc:34:56:cc:aa:46:64:cb:99:b1:fb:
0c:29:d2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:14 2026 by rpki-client