Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
File: Afg1dg4UKs6kvwp_-K52do9dzcc.mft (raw, json)
Hash identifier: +abc2wA9xeKQa1jE/BXSSr+8LSgXW5yM//D6ANWtl6I=
Subject key identifier: 38:99:AC:4B:1A:05:27:9C:46:A2:DA:23:4F:54:F9:A1:23:64:CF:F3
Authority key identifier: 01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
Certificate issuer: /CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Certificate serial: 019FA899FA1111EBD062F5BB4BBC2A3AA8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:31 +0000
Manifest this update: Tue 28 Jul 2026 12:01:31 +0000
Manifest next update: Wed 29 Jul 2026 12:01:31 +0000
Files and hashes: 1: 4jcZt8wr_Es5obrL6nyZ-hZNiVo.roa (hash: IB+ugtp0I7aeSyY/gPMof8xJPcR03yNbnpz2Zj7EXMg=)
2: Afg1dg4UKs6kvwp_-K52do9dzcc.crl (hash: dU0kiJAkDWtM1rk9nKDk/f5+waeLMxkZ1RlmcG0NSU8=)
3: EKtIRD07koj3PioZOzCC9_Q7xak.roa (hash: lz0w7rq5fTE3a3NzEhEeOVrovs8rwD/BBZm7VfWq6Qw=)
4: ETVOeNdAXGMglMi9aSJ3RaDWQ6k.roa (hash: lZ1vDi/rrrr51AW0R6YsNcHKSikuFPwLBuW6UAowH/0=)
5: EnUvjP-IlK1TjhIK9PapivGlbHI.roa (hash: s3r3WCLrBtGWpOA+chKpU0iZQeLq5vYcO5cTKAGqiTI=)
6: LYcuob5nBFbh7n613P7zBmvuRi8.roa (hash: BlKetV9H5SDTjF2fquyGonvag/juU02Kfq5nG08wFNE=)
7: Z91QgU3zPEvidy5E07FD820SvCE.roa (hash: t1hJ2jxHCBaQ4V6GB9HTa2VYzxo2IJI3xiQVOmOCbuo=)
8: kkaN34dPFzsfPEI-fZd7KP-pfLU.roa (hash: AzWDWwHIXhb8lGQNOOstOsRvBfcDp2w4pMgxi168ueE=)
9: lQPkRwjAgL9s8Del_fG_YG6m55w.roa (hash: tt7eRX7rLhh4+WSgLjRaVmZ3euA+zhr35kKk4/BemZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:fa:11:11:eb:d0:62:f5:bb:4b:bc:2a:3a:a8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01f835760e142acea4bf0a7ff8ae76768f5dcdc7
Validity
Not Before: Jul 28 12:01:31 2026 GMT
Not After : Jul 29 12:01:31 2026 GMT
Subject: CN=3899ac4b1a05279c46a2da234f54f9a12364cff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c8:24:ef:93:a2:2e:2f:1b:c2:5e:96:3b:46:
2a:53:92:6d:ee:fc:19:65:64:64:d8:36:c1:8b:a1:
b5:c6:36:9e:e5:58:1d:e3:c7:15:2e:58:8b:7b:94:
b6:00:d4:51:b7:96:56:0b:0c:bd:c5:20:8f:f3:8b:
88:98:9c:cb:60:53:e0:93:ef:49:51:d9:4a:45:ae:
72:36:3e:57:fb:6d:00:60:cb:77:d5:17:f7:b5:cb:
41:ea:83:d5:ea:ab:50:ee:c6:1e:2e:2f:ee:45:43:
01:c5:45:3f:e2:1b:5a:fb:93:cc:34:d9:c3:2d:8d:
e9:ae:22:45:b8:bb:07:4a:fb:a3:16:b5:f3:64:9c:
42:a8:8e:22:c4:ba:af:6b:ab:26:99:6f:81:e5:bc:
b4:81:e3:9f:2e:f4:89:59:21:ab:2d:1a:8f:fb:1a:
39:eb:42:d5:22:c7:64:fa:c9:38:ca:90:da:9e:f0:
cf:02:7b:04:6b:bd:d8:ee:99:0e:36:b8:d9:62:60:
0c:02:64:8d:ad:bd:05:ca:04:85:85:25:c1:b7:42:
a7:d2:ae:fe:a6:45:c2:71:c2:52:32:25:ca:d7:4b:
80:a4:7e:94:4d:c4:25:d8:90:47:4f:74:57:8b:c9:
2b:4f:05:a0:fa:76:11:97:60:bb:a4:20:6f:f9:71:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:99:AC:4B:1A:05:27:9C:46:A2:DA:23:4F:54:F9:A1:23:64:CF:F3
X509v3 Authority Key Identifier:
keyid:01:F8:35:76:0E:14:2A:CE:A4:BF:0A:7F:F8:AE:76:76:8F:5D:CD:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afg1dg4UKs6kvwp_-K52do9dzcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Afg1dg4UKs6kvwp_-K52do9dzcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8f:7a:38:6a:7d:b4:20:c8:c7:e7:11:49:33:42:f9:61:4e:
70:32:fc:2e:a4:e2:12:d7:bb:3e:4d:9b:f3:85:2c:73:b3:2a:
0d:2a:87:b4:9f:99:6a:f4:99:89:cf:c8:74:40:f5:f2:17:ed:
a7:ae:20:c5:07:7d:8f:a7:c9:9b:96:a4:85:6b:26:df:6e:f3:
3b:1b:21:e7:a3:b5:82:d0:ae:04:ce:75:72:3f:1b:9d:a3:93:
95:0b:2c:b1:87:ff:b2:d8:98:c6:c4:d7:6a:44:e2:29:ef:d8:
6e:c6:16:8f:65:94:24:cc:e6:74:c8:43:58:6a:d5:9d:62:11:
3b:d1:b6:5b:08:68:1e:10:80:e8:b9:3e:3f:11:08:00:4a:c9:
bd:b5:2d:2e:45:42:20:8d:bf:5f:8a:ff:ed:9c:0e:ef:80:97:
b3:7c:a6:e9:0d:73:89:9d:60:81:72:e8:c6:b9:b6:18:fc:43:
0b:27:f0:00:5e:02:78:39:85:89:9c:57:b8:19:e0:1e:c8:01:
af:4a:b0:6e:cf:40:b5:e7:2b:36:02:cd:f9:78:dc:dd:90:cf:
55:66:d3:c3:c3:fe:09:f9:5a:4b:17:65:98:12:a1:1a:03:fc:
dd:58:28:12:f1:89:33:2e:89:64:dd:60:1f:15:60:41:a4:16:
ce:94:34:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:46 2026 by rpki-client