Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File: AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier: ACiu9KTAQ4dlvqLzgpwWtozbwBAnuSoD2NHdt3aWvlo=
Subject key identifier: D6:BC:E4:D8:94:35:37:71:1C:8D:F7:41:41:86:22:E7:92:35:72:E3
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial: 01A1C1419F2C0D0248EA1C542090CE59AF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number: 1AED
Signing time: Mon 09 Nov 2026 17:01:05 +0000
Manifest this update: Mon 09 Nov 2026 17:01:05 +0000
Manifest next update: Tue 10 Nov 2026 17:01:05 +0000
Files and hashes: 1: 9M-CJkVBZVuqIwi3Sawh0isCz1k.roa (hash: aFU0pADsAbTvFke0dF4U47/0s76HwBtoQCpl6QnSuNI=)
2: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: BWp2oZ0QypnbolkKYw2W7hZMdICX+O2AacI/q4PxkVw=)
3: KbY29WtKZkz8Fbjj7QvLlg811Iw.roa (hash: vGh5FY7zuISKMd7QAir+eppKFgiFx2llO5uFQh7FV0A=)
4: Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa (hash: lpodXqk6t7MJFjfZg1Uow8LLK/4R3ylcdMkmlTgRneo=)
5: hkJYoKxZ5NaqYkSY0GG7dfC0J6M.roa (hash: M6l2Qx3MyNr2ADezdHbYqYOeyWWrHzzKzTBcWubDLyY=)
6: iN3PbeV3-UffGNWyXfh7JHJfK74.roa (hash: JtoeR6EU9pVtvyEClltI2vcG5Q/h7OJRN/rUzf7IfP8=)
7: qydppjeYfUzDVxdV73Ghn9vaAYk.roa (hash: F/o5ke8f18yC9oKEjHkU0hNCPxAS0/yMbN5QTK0st0g=)
8: sH1teYqG2FqEXd7RfMCaBcOnmaw.roa (hash: suxWcXpZV2IMJ73fGzjwM37LJ58quwhaki1YE7N0sRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:41:9f:2c:0d:02:48:ea:1c:54:20:90:ce:59:af:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Validity
Not Before: Nov 9 17:01:05 2026 GMT
Not After : Nov 10 17:01:05 2026 GMT
Subject: CN=d6bce4d8943537711c8df741418622e7923572e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:0e:37:dd:1a:ed:b9:47:1c:e3:28:1e:c8:
b6:0c:bf:e7:e2:fe:ae:1b:69:d2:8e:e3:0a:d5:0b:
77:19:2a:af:d5:42:c7:eb:32:b3:3f:8c:c6:58:22:
14:2e:54:83:8e:e6:ff:ba:0c:43:c2:6e:8a:87:9e:
2e:f7:4d:2c:2e:5b:c3:65:f4:d2:b6:4f:cd:07:b4:
ff:6d:a7:ec:b4:c4:34:59:15:ac:af:b3:14:fd:9a:
08:04:00:de:4f:01:6e:3c:63:2b:2c:07:05:7b:3e:
3a:4f:33:50:bb:ec:96:5b:92:dc:2c:0e:a9:35:c4:
02:05:61:b9:fa:ae:ab:53:ea:3c:a1:16:95:9c:0e:
02:1f:91:2d:ea:62:a5:64:b4:46:92:03:f2:e9:9c:
32:a3:8b:db:ec:eb:43:25:34:11:2a:f6:5b:cb:66:
e1:81:7a:2f:cf:53:44:16:c7:b6:52:d0:77:4b:58:
a9:cd:a0:87:4a:3c:d8:6e:da:1a:a6:e7:68:d6:ff:
21:a8:a6:52:c3:37:b0:00:5d:e4:d4:02:c1:de:c6:
f8:7d:58:96:aa:51:74:0c:45:ea:ae:d2:d3:d3:4e:
81:27:3c:3a:a7:19:82:69:9a:07:dc:3a:c6:0c:26:
42:a0:0d:82:fe:26:e5:d0:f6:c5:26:81:86:4c:02:
4c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BC:E4:D8:94:35:37:71:1C:8D:F7:41:41:86:22:E7:92:35:72:E3
X509v3 Authority Key Identifier:
keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d1:48:b0:94:1d:ea:8b:3d:6d:9f:4b:47:bc:aa:08:9a:3e:
c5:30:82:10:a1:3f:57:7d:89:84:32:af:f0:03:36:14:b2:1c:
c9:a5:51:9a:cf:35:38:2d:dc:81:5f:06:cc:5b:b5:c3:38:45:
53:06:e3:7b:bd:53:e1:d9:98:37:07:57:01:5f:39:55:3a:1d:
81:ca:6d:01:8f:72:18:9d:df:26:ed:2f:f9:8e:da:bc:51:47:
41:2e:83:48:06:23:5c:12:af:c1:e9:41:3a:d8:df:0b:23:57:
3a:d2:79:89:ab:b5:0f:5c:7c:34:86:12:03:2d:0e:69:72:c2:
4c:f3:eb:1c:84:ac:ef:10:46:00:84:0f:ca:2f:fc:7f:0b:3f:
82:3d:aa:44:5c:ae:8a:8a:72:bf:c1:bf:2a:67:7f:26:32:dd:
6b:82:e1:6e:0c:53:4c:62:a9:5c:28:20:7d:7a:51:2c:7c:e7:
30:c3:00:f7:b4:69:2b:79:6c:e4:d0:af:f9:17:c6:65:35:b9:
18:34:25:72:91:eb:14:db:9b:4c:e0:8e:20:a1:ed:13:f8:91:
e7:b0:d0:e9:d8:d7:f2:5a:cd:2d:14:0b:de:b8:0a:dd:e1:c4:
41:16:68:62:67:40:6d:9b:fb:54:ff:f8:0a:8d:65:d8:be:6c:
c7:ca:13:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 03:47:33 2026 by rpki-client