Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File: AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier: EDY5xpD4ftOX4Yhap6v3z0M0/ndZeisipF7KJuiIJQA=
Subject key identifier: AA:91:A8:51:06:6A:72:5B:F5:3C:E5:C7:68:74:69:09:F9:DA:E8:1E
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial: 019D992B7192867083A6FCCBB33EF1D591A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 02:00:54 +0000
Manifest this update: Fri 17 Apr 2026 02:00:54 +0000
Manifest next update: Sat 18 Apr 2026 02:00:54 +0000
Files and hashes: 1: 9M-CJkVBZVuqIwi3Sawh0isCz1k.roa (hash: aFU0pADsAbTvFke0dF4U47/0s76HwBtoQCpl6QnSuNI=)
2: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: be0ZJSoaOE+3FzjFyG+Y87s9ocPX9NmkNTDwk0ZVRRw=)
3: KbY29WtKZkz8Fbjj7QvLlg811Iw.roa (hash: vGh5FY7zuISKMd7QAir+eppKFgiFx2llO5uFQh7FV0A=)
4: Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa (hash: lpodXqk6t7MJFjfZg1Uow8LLK/4R3ylcdMkmlTgRneo=)
5: hkJYoKxZ5NaqYkSY0GG7dfC0J6M.roa (hash: M6l2Qx3MyNr2ADezdHbYqYOeyWWrHzzKzTBcWubDLyY=)
6: iN3PbeV3-UffGNWyXfh7JHJfK74.roa (hash: JtoeR6EU9pVtvyEClltI2vcG5Q/h7OJRN/rUzf7IfP8=)
7: qydppjeYfUzDVxdV73Ghn9vaAYk.roa (hash: F/o5ke8f18yC9oKEjHkU0hNCPxAS0/yMbN5QTK0st0g=)
8: sH1teYqG2FqEXd7RfMCaBcOnmaw.roa (hash: suxWcXpZV2IMJ73fGzjwM37LJ58quwhaki1YE7N0sRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:71:92:86:70:83:a6:fc:cb:b3:3e:f1:d5:91:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Validity
Not Before: Apr 17 02:00:54 2026 GMT
Not After : Apr 18 02:00:54 2026 GMT
Subject: CN=aa91a851066a725bf53ce5c768746909f9dae81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:f1:7f:f9:fa:24:a9:46:77:d6:e2:fa:8d:
73:fb:4e:0e:67:c0:83:38:66:31:e8:36:ff:97:9d:
70:48:aa:c6:e2:63:75:9b:f1:54:db:6a:74:76:43:
d7:40:ff:de:64:ae:2c:be:f2:46:b8:75:2b:51:1b:
b4:e5:49:7e:d9:fb:f0:09:f7:4d:c6:9e:ee:5c:e9:
57:03:0a:03:7d:0e:5e:59:87:87:e1:96:42:8e:85:
99:15:31:a5:d1:de:fc:c3:18:76:a5:9a:85:dc:51:
24:25:68:56:78:db:df:e2:8e:c3:84:f7:0d:b7:2f:
41:b8:bc:68:b3:47:0b:43:78:03:9d:68:f2:a8:53:
71:b7:24:5b:33:34:dc:75:7c:5a:e9:c9:df:f6:32:
68:67:57:05:5a:13:3a:9e:86:05:50:00:a9:ff:ba:
90:b7:ec:a4:cc:d2:a1:17:68:96:be:5d:fa:6b:39:
67:58:b5:16:77:7e:0a:ff:00:43:64:94:f2:1b:df:
40:84:6c:f5:10:10:2c:ae:d0:70:68:5c:e7:68:17:
c2:11:ad:db:80:8b:79:5a:1b:a0:df:db:e6:5d:25:
0c:0a:55:66:bc:d3:0b:f7:92:6b:80:cb:a3:c0:91:
db:ff:9a:7c:a2:76:86:fc:d6:fb:f6:c8:e8:96:56:
c3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:91:A8:51:06:6A:72:5B:F5:3C:E5:C7:68:74:69:09:F9:DA:E8:1E
X509v3 Authority Key Identifier:
keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:60:93:a6:b1:59:c7:d8:e2:01:5e:4e:98:f4:9f:ab:e3:d3:
63:96:64:77:28:31:9b:de:ae:81:8f:2f:15:c6:e3:32:08:c6:
08:d4:1f:a6:4b:53:1d:9a:24:5d:ed:8c:8b:0e:eb:da:ce:4a:
06:5c:75:b1:84:64:7d:44:09:bc:35:2e:ac:92:1a:d8:ba:4a:
b1:e2:b4:53:29:f0:b7:70:16:d5:4b:0e:58:b4:6e:f3:be:08:
48:55:5d:48:76:7c:72:37:49:53:e3:2f:46:b3:99:34:c0:b6:
d2:87:c6:76:fb:07:9f:11:cb:73:98:f8:4f:27:c7:69:1d:4a:
66:63:1c:b6:47:de:64:8a:be:df:0f:4d:e3:3d:5c:bc:f6:e8:
65:25:96:f0:db:db:d7:85:06:da:75:44:55:a2:49:ca:2a:41:
b4:fb:9d:6b:b8:ff:2c:62:59:63:ee:fa:d7:97:d9:23:3a:93:
22:51:b4:22:9b:19:c9:42:1d:6e:4f:c7:2d:8b:ee:3e:e7:9a:
45:16:20:11:83:23:59:75:b0:d1:6a:8f:da:ef:22:09:df:2f:
b3:9d:7b:24:ad:f6:43:d4:12:8c:8f:e8:ab:2b:e6:c6:a3:9a:
fe:9a:3a:fe:6d:f6:1e:92:bc:ea:f1:ab:9d:30:0e:26:25:8a:
5c:8f:f1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:28:00 2026 by rpki-client