Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
File: AF_5zInGaoo6XXNKDWXGH9yFGL4.mft (raw, json)
Hash identifier: LdsLqs+35551sfGH5m+IME6j9kxP8Y6zUcLEUaz87SE=
Subject key identifier: 8C:CF:DA:1D:61:AA:FE:9E:C5:09:2E:89:10:6B:F7:E8:DF:35:53:B0
Authority key identifier: 00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
Certificate issuer: /CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Certificate serial: 01A0C4449D6AFD9945A871286C4CDFCE43CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
Manifest number: 1A6A
Signing time: Mon 21 Sep 2026 14:00:26 +0000
Manifest this update: Mon 21 Sep 2026 14:00:26 +0000
Manifest next update: Tue 22 Sep 2026 14:00:26 +0000
Files and hashes: 1: 9M-CJkVBZVuqIwi3Sawh0isCz1k.roa (hash: aFU0pADsAbTvFke0dF4U47/0s76HwBtoQCpl6QnSuNI=)
2: AF_5zInGaoo6XXNKDWXGH9yFGL4.crl (hash: MEaFCSifnYMqxgAJ4t67yFG15RhIsaO6WVDxeqoXToc=)
3: KbY29WtKZkz8Fbjj7QvLlg811Iw.roa (hash: vGh5FY7zuISKMd7QAir+eppKFgiFx2llO5uFQh7FV0A=)
4: Yczj7zwVDs2cX_wNQ-ssqLpurf0.roa (hash: lpodXqk6t7MJFjfZg1Uow8LLK/4R3ylcdMkmlTgRneo=)
5: hkJYoKxZ5NaqYkSY0GG7dfC0J6M.roa (hash: M6l2Qx3MyNr2ADezdHbYqYOeyWWrHzzKzTBcWubDLyY=)
6: iN3PbeV3-UffGNWyXfh7JHJfK74.roa (hash: JtoeR6EU9pVtvyEClltI2vcG5Q/h7OJRN/rUzf7IfP8=)
7: qydppjeYfUzDVxdV73Ghn9vaAYk.roa (hash: F/o5ke8f18yC9oKEjHkU0hNCPxAS0/yMbN5QTK0st0g=)
8: sH1teYqG2FqEXd7RfMCaBcOnmaw.roa (hash: suxWcXpZV2IMJ73fGzjwM37LJ58quwhaki1YE7N0sRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:9d:6a:fd:99:45:a8:71:28:6c:4c:df:ce:43:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=005ff9cc89c66a8a3a5d734a0d65c61fdc8518be
Validity
Not Before: Sep 21 14:00:26 2026 GMT
Not After : Sep 22 14:00:26 2026 GMT
Subject: CN=8ccfda1d61aafe9ec5092e89106bf7e8df3553b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:50:4a:3f:a5:87:48:0f:35:43:8e:64:d1:
7f:0c:df:4b:6a:33:55:11:84:b9:9e:23:2b:df:b2:
5b:32:48:c8:85:a9:bb:09:c1:bf:b6:72:4f:aa:22:
75:19:2e:be:0b:93:16:e4:d2:22:a3:f4:31:49:a2:
af:4f:e7:9b:51:d2:8d:52:48:27:55:59:62:85:d7:
a6:6b:20:95:70:81:44:dd:21:71:90:5c:d8:c7:97:
aa:7d:58:f7:71:2e:8c:54:fb:e6:6b:56:9c:62:d0:
d7:10:ba:ed:2f:c9:12:41:29:df:eb:22:12:19:1b:
83:18:1b:77:8c:e2:ab:b4:dd:35:8e:6e:2b:6c:10:
ef:c0:36:66:52:c5:e3:3e:29:c0:c8:59:a9:7c:1d:
49:8d:15:f0:fa:7c:97:0e:f1:03:a4:e2:31:47:ff:
3a:a9:90:04:e6:1e:5c:79:9d:89:c7:3e:78:4a:8a:
c7:02:b8:77:4d:4f:0b:bb:07:8c:a1:bc:ec:1f:77:
32:ee:ee:1e:af:b4:6e:0b:bb:30:77:9b:ff:76:4f:
1f:5d:2d:3c:eb:16:65:00:61:a0:9d:67:dc:30:2f:
89:ec:14:da:53:cb:3c:23:10:8b:cb:b0:d3:5c:77:
04:68:89:fb:e7:0a:fb:d1:e7:2c:c3:5a:c8:1a:3f:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CF:DA:1D:61:AA:FE:9E:C5:09:2E:89:10:6B:F7:E8:DF:35:53:B0
X509v3 Authority Key Identifier:
keyid:00:5F:F9:CC:89:C6:6A:8A:3A:5D:73:4A:0D:65:C6:1F:DC:85:18:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF_5zInGaoo6XXNKDWXGH9yFGL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d53c78-0d5b-4237-9999-0e2d697b27e3/1/AF_5zInGaoo6XXNKDWXGH9yFGL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:75:3a:6a:32:26:f8:1b:8d:16:a4:72:fb:2f:14:95:58:c9:
cd:18:1a:f0:65:5b:57:1c:b7:7e:de:17:e8:b1:1d:24:76:8a:
ca:12:c2:6b:8a:34:99:46:28:c8:a3:8a:6c:9a:dc:f2:25:23:
42:53:4d:a6:e2:76:73:96:bc:86:9a:4c:b0:9f:a8:d6:06:30:
00:3d:48:e0:68:1d:66:e5:34:ec:8c:a4:05:98:ac:1e:be:7e:
f9:d2:35:6c:a5:d4:af:29:aa:76:f6:d7:5b:92:ff:21:76:65:
0a:62:1c:2f:c1:c5:5a:7c:74:36:00:32:f0:32:b5:31:4e:47:
d9:81:e4:9d:7d:28:8c:b3:e7:1b:52:f0:47:96:9b:0b:7c:e8:
1a:b4:57:cd:df:0c:f6:dd:d9:6d:cc:12:87:97:99:78:50:c8:
07:87:d0:02:8a:2d:70:e0:56:79:2f:1c:a8:3c:f7:73:81:9f:
f4:fa:e2:d9:28:36:6d:24:ae:6f:e0:3c:81:9c:02:01:b1:85:
46:0a:47:e5:9c:c4:35:61:0b:14:fe:96:0f:54:0d:73:5c:67:
cc:fb:20:19:1c:81:02:d6:f0:8b:f6:e7:ac:82:16:44:45:3c:
a9:1f:28:4b:c1:3c:5e:14:4e:e7:41:c5:f4:4d:f6:e0:29:cf:
cf:0f:da:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:39:43 2026 by rpki-client