Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File: AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier: y+B3m5M3hvDKmCJQKzOWL1ZmDXxlzVMyFOgckJJC2CU=
Subject key identifier: 15:EB:08:E3:4C:9F:7A:AA:51:D4:B1:53:05:2A:D1:CC:5B:93:95:60
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial: 019FA8627BDD7D051D919A8D24C14F51CC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 11:00:54 +0000
Manifest this update: Tue 28 Jul 2026 11:00:54 +0000
Manifest next update: Wed 29 Jul 2026 11:00:54 +0000
Files and hashes: 1: 9M-CJkVBZVuqIwi3Sawh0isCz1k.roa (hash: aFU0pADsAbTvFke0dF4U47/0s76HwBtoQCpl6QnSuNI=)
2: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: FTf5JeHO6OSRdG8kI3SqS4DpjOUAcqB+2/f2eohAhsE=)
3: KbY29WtKZkz8Fbjj7QvLlg811Iw.roa (hash: vGh5FY7zuISKMd7QAir+eppKFgiFx2llO5uFQh7FV0A=)
4: Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa (hash: lpodXqk6t7MJFjfZg1Uow8LLK/4R3ylcdMkmlTgRneo=)
5: hkJYoKxZ5NaqYkSY0GG7dfC0J6M.roa (hash: M6l2Qx3MyNr2ADezdHbYqYOeyWWrHzzKzTBcWubDLyY=)
6: iN3PbeV3-UffGNWyXfh7JHJfK74.roa (hash: JtoeR6EU9pVtvyEClltI2vcG5Q/h7OJRN/rUzf7IfP8=)
7: qydppjeYfUzDVxdV73Ghn9vaAYk.roa (hash: F/o5ke8f18yC9oKEjHkU0hNCPxAS0/yMbN5QTK0st0g=)
8: sH1teYqG2FqEXd7RfMCaBcOnmaw.roa (hash: suxWcXpZV2IMJ73fGzjwM37LJ58quwhaki1YE7N0sRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:7b:dd:7d:05:1d:91:9a:8d:24:c1:4f:51:cc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Validity
Not Before: Jul 28 11:00:54 2026 GMT
Not After : Jul 29 11:00:54 2026 GMT
Subject: CN=15eb08e34c9f7aaa51d4b153052ad1cc5b939560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:21:42:72:c2:ba:c2:97:ff:33:47:ce:5f:
3e:79:2c:3a:c7:71:d4:7f:c2:05:f6:30:a9:6b:76:
2b:f9:c4:20:d7:96:fb:23:ae:c0:e3:4d:bd:6f:87:
c9:ed:f8:20:15:83:6f:59:39:91:63:17:ce:90:15:
1b:78:39:9e:0d:cc:50:36:a2:79:66:b2:1b:f1:0b:
ac:c8:7a:5d:c2:a5:80:15:a2:d7:5c:c2:98:36:a3:
30:65:72:29:cc:20:f0:d4:68:66:fc:38:8b:cb:1e:
3b:60:ea:08:a6:60:90:49:bd:63:d3:ec:1b:c0:9b:
19:9d:82:cd:3f:91:e4:3a:04:70:91:6a:7e:87:ea:
bb:42:07:2e:b2:9d:4f:e0:64:a3:ac:5d:bb:c0:85:
29:3a:d8:d4:a5:22:c1:b0:85:27:6d:6e:2d:6b:c9:
b9:67:4d:f6:61:b1:10:f3:77:a6:fe:1f:fc:05:14:
9f:88:4d:66:90:64:af:18:0a:d5:25:01:9c:79:3f:
37:fb:0f:b3:4f:27:5c:3f:df:2e:8a:f5:2e:c1:e4:
9e:de:1f:7f:50:55:4c:50:4b:70:01:bd:00:50:c0:
33:02:85:76:7e:f1:99:19:3d:5e:b5:5a:fb:90:6e:
ae:5d:7f:f0:e6:ca:be:68:6c:21:ea:ff:72:19:88:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EB:08:E3:4C:9F:7A:AA:51:D4:B1:53:05:2A:D1:CC:5B:93:95:60
X509v3 Authority Key Identifier:
keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c6:ae:15:48:79:7c:f9:34:9d:6a:51:74:42:4c:2d:ef:5e:
45:9a:d7:f5:1a:87:5d:8f:d1:05:54:3f:3d:fd:90:0e:99:31:
70:cd:11:e0:04:67:73:ea:fd:ac:b5:f7:6f:05:fc:3e:3d:71:
12:4c:7c:52:2e:e6:07:78:16:9d:92:b2:6e:f6:50:d7:44:86:
eb:a8:5b:98:97:ca:72:15:82:d0:a0:01:84:92:9b:c9:67:69:
9b:b1:0d:31:c4:9b:f9:cc:fb:64:4a:f4:ce:68:e4:ca:0f:01:
a4:94:a1:c6:89:64:8f:24:8f:1a:c2:94:5e:9e:8d:9f:e2:7b:
5d:31:60:0a:00:d2:7c:7f:46:8c:38:79:6d:a1:44:2a:67:86:
91:dc:ce:c2:ef:cc:e9:58:d8:b9:5d:b2:e5:0a:81:7e:12:c5:
7b:fc:44:60:31:77:5d:5b:95:e6:93:13:01:f8:1e:32:a6:18:
5f:ff:b4:e5:bc:8c:b2:fa:88:76:56:ad:8b:c1:f4:45:ca:f3:
7b:05:18:17:7c:9e:94:86:e0:41:6b:5c:01:58:c1:bb:bf:4c:
57:da:7e:11:88:b5:7e:f4:9c:18:36:a5:ab:a1:ba:82:74:ad:
45:7b:d8:8a:ba:49:b1:2e:a5:4d:56:c1:e3:bf:d9:68:6c:d9:
7f:7e:5f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:39 2026 by rpki-client