Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
File: Afg1dg4UKs6kvwp_-K52do9dzcc.mft (raw, json)
Hash identifier: HUigZaD42y/DN6KnbrBpSitPggSNjjYLmy9Cxk1wOtw=
Subject key identifier: 00:0B:82:ED:22:3D:4F:7D:66:0D:7E:A5:05:F0:A5:C6:7C:8A:88:B1
Authority key identifier: 01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
Certificate issuer: /CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Certificate serial: 01A0C47C2C151496486DF150F66CB891FD1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 15:01:07 +0000
Manifest this update: Mon 21 Sep 2026 15:01:07 +0000
Manifest next update: Tue 22 Sep 2026 15:01:07 +0000
Files and hashes: 1: 4jcZt8wr_Es5obrL6nyZ-hZNiVo.roa (hash: IB+ugtp0I7aeSyY/gPMof8xJPcR03yNbnpz2Zj7EXMg=)
2: Afg1dg4UKs6kvwp_-K52do9dzcc.crl (hash: dQkdm6P0CNq1WmOrXUBgtk0lQgBaGdAxnDgyqGAAHFQ=)
3: EKtIRD07koj3PioZOzCC9_Q7xak.roa (hash: lz0w7rq5fTE3a3NzEhEeOVrovs8rwD/BBZm7VfWq6Qw=)
4: ETVOeNdAXGMglMi9aSJ3RaDWQ6k.roa (hash: lZ1vDi/rrrr51AW0R6YsNcHKSikuFPwLBuW6UAowH/0=)
5: EnUvjP-IlK1TjhIK9PapivGlbHI.roa (hash: s3r3WCLrBtGWpOA+chKpU0iZQeLq5vYcO5cTKAGqiTI=)
6: LYcuob5nBFbh7n613P7zBmvuRi8.roa (hash: BlKetV9H5SDTjF2fquyGonvag/juU02Kfq5nG08wFNE=)
7: Z91QgU3zPEvidy5E07FD820SvCE.roa (hash: t1hJ2jxHCBaQ4V6GB9HTa2VYzxo2IJI3xiQVOmOCbuo=)
8: kkaN34dPFzsfPEI-fZd7KP-pfLU.roa (hash: AzWDWwHIXhb8lGQNOOstOsRvBfcDp2w4pMgxi168ueE=)
9: lQPkRwjAgL9s8Del_fG_YG6m55w.roa (hash: tt7eRX7rLhh4+WSgLjRaVmZ3euA+zhr35kKk4/BemZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:2c:15:14:96:48:6d:f1:50:f6:6c:b8:91:fd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Validity
Not Before: Sep 21 15:01:07 2026 GMT
Not After : Sep 22 15:01:07 2026 GMT
Subject: CN=000b82ed223d4f7d660d7ea505f0a5c67c8a88b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:01:e1:07:43:38:71:0a:ed:cf:a6:83:38:
b9:ad:a5:fc:65:55:fd:aa:25:50:0a:6f:98:b1:39:
62:a0:ce:07:10:cf:e4:f4:49:3a:45:1d:a6:2c:88:
9f:e3:f0:61:67:3b:b6:99:68:2c:7b:3b:c9:e2:72:
cc:93:5f:5b:d6:9a:a9:e6:d1:d1:3e:c5:d2:e0:58:
36:9f:fb:08:fd:65:1d:e1:91:96:8e:02:79:c6:f1:
8e:6f:e7:72:34:4e:77:e5:96:c3:cd:5c:b0:29:14:
30:1b:3f:8c:1c:6d:e0:83:7f:f2:3e:07:95:80:86:
3f:c7:12:9f:b6:dc:40:9a:ff:17:ad:20:45:32:70:
a7:8b:fa:fa:ae:27:b1:40:0c:6a:94:b4:d7:2e:d0:
13:e5:78:00:78:42:12:35:fc:13:4d:6d:59:74:40:
39:41:b0:bb:68:d9:6c:75:c1:0c:02:85:72:5e:d3:
28:db:3b:c8:97:f7:c3:50:a2:c3:17:8f:5c:80:f2:
10:cb:36:db:74:46:d7:21:8d:10:4c:66:50:33:c3:
3b:50:5c:c4:ea:91:21:ea:b4:10:8f:f9:1d:6a:6b:
45:7d:ae:94:11:a4:0f:38:74:9d:d3:59:a1:c4:c9:
3b:7a:39:eb:5d:6f:0c:4b:96:51:1d:ea:2e:21:af:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0B:82:ED:22:3D:4F:7D:66:0D:7E:A5:05:F0:A5:C6:7C:8A:88:B1
X509v3 Authority Key Identifier:
keyid:01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f4:ea:d7:aa:9c:9d:12:49:78:43:a1:b4:67:db:60:11:7c:
8a:a9:8b:30:b7:bd:62:28:cb:f5:b9:6a:ec:0a:7c:b0:91:e1:
14:69:8f:5f:24:d6:61:4f:48:b7:aa:b1:a3:75:eb:c1:92:7d:
67:fb:15:ae:83:e0:18:db:f0:be:fc:6d:f8:aa:65:23:58:77:
c5:3e:26:83:be:e8:5f:38:86:84:86:1f:c1:15:64:fc:d5:0e:
ae:32:8d:ee:30:55:fb:98:df:a0:b3:72:6d:70:a3:8d:5c:71:
6a:33:67:75:da:51:b4:4c:1c:c0:75:85:9c:23:2e:03:b3:3f:
b2:32:41:cc:56:cf:bc:37:53:2a:a7:31:09:3c:ee:d1:ad:e6:
39:2d:f6:2e:2c:7e:4a:01:35:35:55:e3:87:ad:5f:99:d8:72:
d8:2e:53:5f:1d:e3:5d:64:be:2a:f8:6b:de:16:66:ba:9e:7b:
bb:8a:1f:5c:46:ab:9c:0f:0f:23:4d:2b:69:45:06:02:4c:02:
b9:d5:4c:ea:db:8e:00:68:30:f8:bb:c2:0d:dc:b4:ca:f8:30:
b8:1b:b6:bf:69:0d:c9:cb:f9:c4:0f:5a:e8:fe:ed:89:f9:e8:
4b:42:18:b0:f4:ec:9b:3c:c7:0b:5f:85:85:66:8e:75:c3:ef:
ad:bd:5e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:27:55 2026 by rpki-client