Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
File: afc1LQcTViPjP1p-YpJdS6tyL8Y.mft (raw, json)
Hash identifier: h89jAEKz75tZf5hyvboWTzwQnoFRFZ5EnuZLTKD3jwY=
Subject key identifier: 1C:46:23:02:9B:34:37:67:F1:9F:73:0E:96:48:24:11:82:44:E0:7A
Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Certificate serial: 019F82D57A29BC251B9D95566B9E6F22CCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
Manifest number: 1340
Signing time: Tue 21 Jul 2026 04:00:56 +0000
Manifest this update: Tue 21 Jul 2026 04:00:56 +0000
Manifest next update: Wed 22 Jul 2026 04:00:56 +0000
Files and hashes: 1: PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa (hash: uNWAi4ypu2U7vKEwyptJEE3BsJukgPqN0/lL7CgpehE=)
2: afc1LQcTViPjP1p-YpJdS6tyL8Y.crl (hash: 0xca3jXn9/A8vJIVzOw/cbmrrX4S5/0/BJjwR2Khvqc=)
3: bNsvbdSJD0WI7Ewm9hgAe8yTIz4.roa (hash: fjVFQSNrjHzCOHsMITQUOhjzFotcFBmj0QqIbMKaS7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:d5:7a:29:bc:25:1b:9d:95:56:6b:9e:6f:22:cc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6
Validity
Not Before: Jul 21 04:00:56 2026 GMT
Not After : Jul 22 04:00:56 2026 GMT
Subject: CN=1c4623029b343767f19f730e964824118244e07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:56:8e:31:bd:8e:c8:1e:28:17:32:9f:91:
8d:3c:08:88:e5:48:bb:8d:67:fb:66:a9:f8:49:83:
b2:ce:4d:7f:e0:18:be:4f:c8:f3:31:19:74:05:11:
5e:61:59:18:12:70:ec:a4:70:88:99:97:cf:01:11:
09:9a:19:29:5d:5e:28:2d:16:59:e0:3f:1f:04:c0:
cf:0b:07:18:5e:00:43:29:fa:15:86:66:d1:d5:ca:
e6:07:5a:f7:d0:ab:5c:ea:c6:6c:09:c5:f0:31:62:
07:0f:4e:cd:71:56:73:15:e4:61:19:2b:f3:e7:fc:
ce:2a:a0:6e:a1:b3:d5:4b:7d:cc:13:7c:5d:ed:e6:
fd:91:d6:dc:c9:23:d6:41:a8:bd:8d:bf:35:30:8e:
9f:63:70:77:74:d1:32:f8:bc:54:88:98:16:da:01:
0f:fb:1e:87:44:48:1e:3d:45:1b:fb:19:47:9a:4a:
33:09:f6:1a:60:e6:5f:b5:03:3f:26:98:4a:9c:75:
90:3f:f3:c7:e5:82:4f:a7:8f:5c:cf:62:54:3b:8f:
1e:4d:a2:85:cb:56:c6:46:63:f4:16:18:e2:94:4f:
51:3d:26:ee:4b:d6:75:ae:52:0a:a4:31:04:5f:38:
f4:dc:cc:fa:cd:4f:21:77:33:ae:55:c8:23:99:70:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:46:23:02:9B:34:37:67:F1:9F:73:0E:96:48:24:11:82:44:E0:7A
X509v3 Authority Key Identifier:
keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9b:4e:e6:87:28:ca:47:71:35:a4:85:53:73:d7:40:66:a5:
da:af:71:b1:50:f5:ca:02:79:04:37:b6:32:b2:1c:e8:1b:7b:
cb:3e:3c:1d:52:71:b6:a3:70:c3:ba:1f:56:22:d4:c1:08:fe:
7f:7e:ce:8c:5d:9e:8b:8f:7c:94:8a:5c:5c:d0:8d:6d:ab:46:
4a:39:68:8a:26:f3:1c:a7:c5:68:3a:fb:be:5c:dd:ea:dc:e7:
ea:bd:05:46:cb:30:7e:1b:60:10:61:e3:f3:54:4d:73:32:5c:
82:a8:81:6d:91:a5:bf:17:22:76:e5:11:0b:81:50:c8:27:2f:
52:26:74:2a:4e:97:8d:bc:fd:15:92:ab:27:97:ee:0d:79:29:
4a:f6:93:5d:1e:2c:7b:fa:8e:1c:a8:01:6a:a2:8e:fb:59:22:
f5:9b:79:90:0e:63:c8:c3:80:14:71:98:ad:82:e2:b7:6f:7a:
2b:46:ae:15:8f:dc:6b:da:e4:87:16:c4:84:93:df:58:ef:c3:
1e:b4:6a:30:fb:3a:9d:6c:89:e4:93:b5:40:2f:cb:a1:d1:73:
09:83:97:45:f8:1c:ca:48:36:9c:f2:05:6a:05:ea:18:ad:e4:
c0:8a:66:79:4c:31:1b:20:27:47:46:ee:bb:75:2b:0a:19:d8:
44:9b:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:37:04 2026 by rpki-client